public static PossibleThreat scanFile(string path)
{
try
{
if (File.Exists(path.Split(split1)[0]))
{
PossibleThreat info = new PossibleThreat();
info.fullpath = path.Split(split1)[0];
info.regkey = path.Split(split1)[1];
info.running = isRunning(path);
info.exename = Path.GetFileName(info.fullpath);
info.btype = JudgedAs.Unknown;
if (info.fullpath == Misc.getLocation())
{
return(new PossibleThreat());
}
string tempstr = Encoding.UTF8.GetString(File.ReadAllBytes(info.fullpath)).Trim((char)0);
if (tempstr != null)
{
foreach (string s in generic)
{
if (tempstr.Contains(s))
{
info.btype = JudgedAs.GenericBot;
}
}
foreach (string s in keylogger)
{
if (tempstr.Contains(s))
{
info.btype = JudgedAs.Keylogger;
}
}
foreach (string s in injector)
{
if (tempstr.Contains(s))
{
info.btype = JudgedAs.Injector;
}
}
foreach (string s in ircbot)
{
if (tempstr.Contains(s))
{
info.btype = JudgedAs.IRC_Bot;
}
}
return(info);
}
else
{
return(new PossibleThreat());
}
}
else
{
return(new PossibleThreat());
}
}
catch { return(new PossibleThreat()); }
}
public static PossibleThreat scanFile(string path)
{
try
{
if (File.Exists(path.Split(split1)[0]))
{
PossibleThreat info = new PossibleThreat();
info.fullpath = path.Split(split1)[0];
info.regkey = path.Split(split1)[1];
info.running = isRunning(path);
info.exename = Path.GetFileName(info.fullpath);
info.btype = JudgedAs.Unknown;
if (info.fullpath == Misc.getLocation())
return new PossibleThreat();
string tempstr = Encoding.UTF8.GetString(File.ReadAllBytes(info.fullpath)).Trim((char)0);
if (tempstr != null)
{
foreach (string s in generic)
{
if (tempstr.Contains(s))
info.btype = JudgedAs.GenericBot;
}
foreach (string s in keylogger)
{
if (tempstr.Contains(s))
info.btype = JudgedAs.Keylogger;
}
foreach (string s in injector)
{
if (tempstr.Contains(s))
info.btype = JudgedAs.Injector;
}
foreach (string s in ircbot)
{
if (tempstr.Contains(s))
info.btype = JudgedAs.IRC_Bot;
}
return info;
}
else
{
return new PossibleThreat();
}
}
else
{
return new PossibleThreat();
}
}
catch { return new PossibleThreat(); }
}
