Folosirea unui trojan (Remote Access Trojan) - Page 3

daatdraqq · 11-17-2009, 02:01 PM

Acelasi server trimiti la toti .Dar va dati seama ca trebuie si criptat serverul ,daca victima are antivirus .

messenger_spam · 11-17-2009, 06:09 PM

da, l-am criptat, totul a mers ok...dar dupa vreo 30 de minute, brusc conexiunea a disparut, pc-ul ramanand conectat la net. (vorbeam cu persoana pe mess). Ce pot face?

EDIT: in 5 minute s-a reconectat...care ar putea fi cauza?

daatdraqq · 11-17-2009, 06:55 PM

Se mai intampla ,dupa ce da restart la pc victima ,o sa fie mai stabil . Si ai grija ca daca are memorie ram mica ,in momentul in care faci remote desktop(te uiti la ecranul lui ) i se ingreuneaza pc-ul , mouse-ul are lag ...etc .Ca sa nu-si dea seama ca e ceva in neregula tre' sa aiba 1gb ram .

messenger_spam · 11-18-2009, 06:30 AM

Multimesc pt raspunsul rapid

.

Alta buba: dupa ce pc-ul respectiv a fost restartat, probabil serverul a fost sters de av.
Pe scurt, as avea nevoie de un crypter care sa treaca de Avira. Eu am folosit "Public crypter Poison ivy 2.0" in descrierea caruia este specificat :

Detections

a-squared - Nothing found!
Avira AntiVir - TR/Crypt.XPACK.Gen
Avast - Nothing found!
AVG - Nothing found!
BitDefender - Nothing found!
ClamAV - Nothing found!
Comodo - Nothing found!
Dr.Web - Nothing found!
Ewido - Nothing found!
F-PROT 6 - Nothing found!
G DATA - Nothing found!
IkarusT3 - Trojan-Dropper.Win32.VB
Kaspersky - Nothing found!
McAfee - Nothing found!
MHR (Malware Hash Registry) - Nothing found!
NOD32 v3 - Win32/Injector.GP
Norman - Nothing found!
Panda - Nothing found!
Quick Heal - Nothing found!
Solo Antivirus - Nothing found!
Sophos - Nothing found!
TrendMicro - Nothing found!
VBA32 - Nothing found!
Virus Buster - Nothing found!

daatdraqq · 11-18-2009, 07:05 AM

Orice cripter public este sau devine detectabil .Cumpara unul privat sau invata sa-ti faci unul singur ,sau sa-i modifici sursa unuia deja facut de cineva .Nu pot sa te ajut aici .Din cate stiu o sansa mare sa treci de avira este sa schimbi icon la server cu resource hacker.

messenger_spam · 11-18-2009, 05:26 PM

Ce fac in cazut in care eu am ip dinamic pt ca atunci cand creez serverul, pun ip-ul meu la momentul respectiv, dupa care infectez victima. Se mai realizeaza conexiunea dupa o zi, 2 ,3? (timp in care, evident, ip-ul meu nu va mai fi cel din serverul trimis).

goods · 02-14-2010, 10:51 PM

Din pacate nu vad downladarea video un linke Va rog

daatdraqq · 02-15-2010, 10:01 AM

Quote:

Originally Posted by goods

Din pacate nu vad downladarea video un linke Va rog

Verifica primul post .
Check the first post ,the link it ok.

darkhell · 02-19-2010, 12:16 PM

nu te lasa pentru ca se baga antivirusul poate,asa patesc si eu,merge decat dak il dezactivez

DarkIceee · 02-19-2010, 12:24 PM

Toata stima se respectu mosule . Bv cu tutorialu asta . O sa fac si eu unu da o sa folosesc zeus 1.2.7.19 . Da ceva spreading methods mai serioase asa poti sa dai un pm .

11-17-2009, 02:01 PM	#21 (permalink)
daatdraqq Registered Users Cultul betivilor Join Date: Jan 2008 Location: Acasa Posts: 1,799 Rep Power: 0	Folosirea unui trojan (Remote Access Trojan) hotel regim hotelier hotel yahoo domain Acelasi server trimiti la toti .Dar va dati seama ca trebuie si criptat serverul ,daca victima are antivirus . __________________ [SQL] - Structured Query Language [LFI] - Local File Include [RFI] - Remote File Include [XSS] - Cross Site Scripting [RCE] - Remote Code Execution [AFD] - Arbitrary File Download [SCD] - Source Code Disclosure [PCI] - PHP Code Injection

11-17-2009, 06:09 PM	#22 (permalink)
messenger_spam Registered user Bautor de ceai Join Date: Sep 2009 Location: Cioroxville, RO Posts: 16 Rep Power: 0	da, l-am criptat, totul a mers ok...dar dupa vreo 30 de minute, brusc conexiunea a disparut, pc-ul ramanand conectat la net. (vorbeam cu persoana pe mess). Ce pot face? EDIT: in 5 minute s-a reconectat...care ar putea fi cauza? __________________ L2 pro.

11-17-2009, 06:55 PM	#23 (permalink)
daatdraqq Registered Users Cultul betivilor Join Date: Jan 2008 Location: Acasa Posts: 1,799 Rep Power: 0	Se mai intampla ,dupa ce da restart la pc victima ,o sa fie mai stabil . Si ai grija ca daca are memorie ram mica ,in momentul in care faci remote desktop(te uiti la ecranul lui ) i se ingreuneaza pc-ul , mouse-ul are lag ...etc .Ca sa nu-si dea seama ca e ceva in neregula tre' sa aiba 1gb ram . __________________ [SQL] - Structured Query Language [LFI] - Local File Include [RFI] - Remote File Include [XSS] - Cross Site Scripting [RCE] - Remote Code Execution [AFD] - Arbitrary File Download [SCD] - Source Code Disclosure [PCI] - PHP Code Injection

11-18-2009, 06:30 AM	#24 (permalink)
messenger_spam Registered user Bautor de ceai Join Date: Sep 2009 Location: Cioroxville, RO Posts: 16 Rep Power: 0	Multimesc pt raspunsul rapid . Alta buba: dupa ce pc-ul respectiv a fost restartat, probabil serverul a fost sters de av. Pe scurt, as avea nevoie de un crypter care sa treaca de Avira. Eu am folosit "Public crypter Poison ivy 2.0" in descrierea caruia este specificat : Detections a-squared - Nothing found! Avira AntiVir - TR/Crypt.XPACK.Gen Avast - Nothing found! AVG - Nothing found! BitDefender - Nothing found! ClamAV - Nothing found! Comodo - Nothing found! Dr.Web - Nothing found! Ewido - Nothing found! F-PROT 6 - Nothing found! G DATA - Nothing found! IkarusT3 - Trojan-Dropper.Win32.VB Kaspersky - Nothing found! McAfee - Nothing found! MHR (Malware Hash Registry) - Nothing found! NOD32 v3 - Win32/Injector.GP Norman - Nothing found! Panda - Nothing found! Quick Heal - Nothing found! Solo Antivirus - Nothing found! Sophos - Nothing found! TrendMicro - Nothing found! VBA32 - Nothing found! Virus Buster - Nothing found! __________________ L2 pro.

Last edited by messenger_spam; 11-18-2009 at 06:41 AM.

11-18-2009, 07:05 AM	#25 (permalink)
daatdraqq Registered Users Cultul betivilor Join Date: Jan 2008 Location: Acasa Posts: 1,799 Rep Power: 0	Orice cripter public este sau devine detectabil .Cumpara unul privat sau invata sa-ti faci unul singur ,sau sa-i modifici sursa unuia deja facut de cineva .Nu pot sa te ajut aici .Din cate stiu o sansa mare sa treci de avira este sa schimbi icon la server cu resource hacker. __________________ [SQL] - Structured Query Language [LFI] - Local File Include [RFI] - Remote File Include [XSS] - Cross Site Scripting [RCE] - Remote Code Execution [AFD] - Arbitrary File Download [SCD] - Source Code Disclosure [PCI] - PHP Code Injection

11-18-2009, 05:26 PM	#26 (permalink)
messenger_spam Registered user Bautor de ceai Join Date: Sep 2009 Location: Cioroxville, RO Posts: 16 Rep Power: 0	Ce fac in cazut in care eu am ip dinamic pt ca atunci cand creez serverul, pun ip-ul meu la momentul respectiv, dupa care infectez victima. Se mai realizeaza conexiunea dupa o zi, 2 ,3? (timp in care, evident, ip-ul meu nu va mai fi cel din serverul trimis). __________________ L2 pro.

02-14-2010, 10:51 PM	#27 (permalink)
goods Registered user Registered Users Join Date: Feb 2010 Posts: 1 Rep Power: 0	Din pacate nu vad downladarea video un linke Va rog

02-19-2010, 12:16 PM	#29 (permalink)
darkhell Registered user Bautor de ceai Join Date: Sep 2009 Posts: 5 Rep Power: 0	nu te lasa pentru ca se baga antivirusul poate,asa patesc si eu,merge decat dak il dezactivez __________________ \m/

02-19-2010, 12:24 PM	#30 (permalink)
DarkIceee Registered user Bautor de gin Join Date: Jan 2010 Posts: 155 Rep Power: 1	Toata stima se respectu mosule . Bv cu tutorialu asta . O sa fac si eu unu da o sa folosesc zeus 1.2.7.19 . Da ceva spreading methods mai serioase asa poti sa dai un pm .