예제 #1
0
        private void CheckTimer1_Tick(object sender, EventArgs e)
        {
            DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType Finispscan    = DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.Process_scanner;
            DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType FinisDbugscan = DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.Debugers_scanner;
            DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType FinisVMscan   = DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.VM_scanner;
            DestroyerProtectionLib.Destroyer.MainDirScan Mdirs = new DestroyerProtectionLib.Destroyer.MainDirScan();
            bool MdirBool = Mdirs.MaliciousDir();

            if (Finispscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Danger)
            {
                ResultScan.ProcessResult = "[DANGER] Malicious Process has been Detected";
            }
            else if (Finispscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Secure)
            {
                ResultScan.ProcessResult = "[SECURE] Malicious Process Not Detected";
            }

            if (FinisDbugscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Danger)
            {
                ResultScan.DebuggersResult = "[DANGER] Debuggers Detected";
            }
            else if (FinisDbugscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Secure)
            {
                ResultScan.DebuggersResult = "[SECURE] Debuggers not Detected";
            }

            if (FinisVMscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Danger)
            {
                ResultScan.VMResult = "[DANGER] Virutal Machines Have Been Detected";
            }
            else if (FinisVMscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Secure)
            {
                ResultScan.VMResult = "[SECURE] No Virtual Machines Found";
            }

            if (!(ResultScan.ProcessResult == string.Empty) & !(ResultScan.DebuggersResult == string.Empty) & !(ResultScan.VMResult == string.Empty))
            {
                if (MdirBool == true)
                {
                    TextBox1.Text += "Detected DnSpy or De4dot in your system." + Environment.NewLine;
                }
                TextBox1.Text    += ResultScan.ProcessResult + Environment.NewLine + ResultScan.DebuggersResult + Environment.NewLine + ResultScan.VMResult + Environment.NewLine;
                TextBox1.Text    += DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.LogResult + Environment.NewLine;
                TextBox2.Text    += DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.DetectDescription + Environment.NewLine;
                ResultScan.Finish = true;
                DestroyerProtectionLib.Destroyer.AntiDump.MainDump.AntiDumpEnabled(this);
                CheckTimer1.Enabled = false;
            }
        }
예제 #2
0
        private void MonitorTimer1_Tick(object sender, EventArgs e)
        {
            DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType Finispscan    = DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.Process_scanner;
            DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType FinisDbugscan = DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.Debugers_scanner;
            DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType VMscanner     = DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.VM_scanner;
            DestroyerProtectionLib.Destroyer.MainDirScan Mdirs = new DestroyerProtectionLib.Destroyer.MainDirScan();

            if (Finispscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Danger)
            {
                ResultScan.ProcessResult = "[DANGER] Malicious Process has been Detected";
            }
            else if (Finispscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Secure)
            {
                ResultScan.ProcessResult = "[SECURE] Malicious Process Not Detected";
            }

            if (FinisDbugscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Danger)
            {
                ResultScan.DebuggersResult = "[DANGER] Debuggers Detected";
            }
            else if (FinisDbugscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Secure)
            {
                ResultScan.DebuggersResult = "[SECURE] Debuggers not Detected";
            }

            if (VMscanner == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Danger)
            {
                ResultScan.VMResult = "[DANGER] Virutal Machines Have Been Detected";
            }
            else if (Finispscan == DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.ResultType.Secure)
            {
                ResultScan.VMResult = "[SECURE] No Virtual Machines Found";
            }

            if (!(ResultScan.ProcessResult == string.Empty))
            {
                // DeleteSelfApplication() ' Auto Delete Function
                TextBox1.Text        += ResultScan.ProcessResult + Environment.NewLine;
                TextBox1.Text        += DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.LogResult + Environment.NewLine;
                TextBox2.Text        += DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.DetectDescription + Environment.NewLine;
                ResultScan.Finish     = true;
                MonitorTimer1.Enabled = false;
            }

            if (!(ResultScan.DebuggersResult == string.Empty))
            {
                // DeleteSelfApplication() ' Auto Delete Function
                TextBox1.Text        += ResultScan.DebuggersResult + Environment.NewLine;
                TextBox1.Text        += DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.LogResult + Environment.NewLine;
                TextBox2.Text        += DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.DetectDescription + Environment.NewLine;
                ResultScan.Finish     = true;
                MonitorTimer1.Enabled = false;
            }

            if (Mdirs.MaliciousDir() == true)
            {
                // DeleteSelfApplication() ' Auto Delete Function
                TextBox1.Text        += "Detect DnSpy and De4dot." + Environment.NewLine;
                TextBox2.Text        += DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.DetectDescription + Environment.NewLine;
                ResultScan.Finish     = true;
                MonitorTimer1.Enabled = false;
            }

            if (!(ResultScan.VMResult == string.Empty))
            {
                // DeleteSelfApplication() ' Auto Delete Function
                TextBox1.Text        += ResultScan.VMResult + Environment.NewLine;
                TextBox2.Text        += DestroyerProtectionLib.Destroyer.Protect.DestroyerProtect.DetectDescription + Environment.NewLine;
                ResultScan.Finish     = true;
                MonitorTimer1.Enabled = false;
            }
        }