M@XM@N , PUES EL TROJAN NO TIENE MUCHA CIENCIA , SOLAMENTE ES PONER EL IP DE LA MAQUINA AFECTADA Y YA, Y TODO LOS DEMAS ATRIBUTOS PUES ES COSA DE USARLO E INVESTIGARLO , EL TUTORIAL DE HECHO ES MUY PEQUEÑO Y AUNQUE MI INGLES NO ES PERFECTO , SI LE ENTENDI QUE UNA DE SUS FUNCIONES ES LA EJECUCION DE PROGRAMAS REMOTOS , BORRAR , SUBIR , BAJAR Y DEJAR MENSAGES EN PANTALLA , Y EN ESO SE BASA LO GENIAL DEL TROJAN , EN SU PEQUEÑES Y EFECTIVIDAD Y ESO TE LO DIGO YO QUE YA LO USE OK
AQUI TE POSTEO EL TUTO QUE BIENE EN EL MISMO ZIP
Kuang2 theVirus v0.21
Kuang2 Client v0.21
Kuang2 Infector v0.12
ALL THIS IS DEDICATED TO THE PEACE AND JUSTICE IN YUGOSLAVIA!
In time when you are reading this I may be dead. Please, never forget that I was a guy just like you, young and with dreams. I belived in love, peace, truth and hard-work.
But NATO don't care. They use Death. They kill. They lie.
What for?
Warning: This program is made only for education. You use it on your own risk! Also, my English is bad. All was hard-tested, but still there may be some bugs.
What is this?
Kuang2 theVirus is the first Windows and Internet virus that gives to user the possibilty to 'connect' with infected computer. Kuang2 Client is a program for users to comunicate with infected computer. Kuang2 Infector can infect any particular exe file.
Virus performanses are very good. If you use plug-ins (for example: Kuang2 VeryFun, Kuang2 veryLite etc.) you can forget NetBus and others big and slow programs.
How to use?
First you need to infect target computer. That can be done in two ways:
- one is to send Kuang2 theVirus. You can change the exe name, of course. This is *not* recomended way. When victim starts virus nothing happens, but program is active so it can not delete it etc. All that gives suspicions that somethings wrong to the victim.
- send previously infected exe file (program, game, instalation). This is *recomended* way for infecting someone! Virus remains active too, but somwhere else, so victim can remove all files (but too late). Cause this way is recomended there is a small tool Kuang2 Infector that can infect any exe file with Kuang2 theVirus.
When a target is infected you have to find its IP. For that you can use any IP scanner or any other posible way (icq...).
Now you are ready to use Kuang2 Client. After connection to the server (to the infected computer) in middle part of window you will be able to see target computer name and list od availiable disks. You can upload, download or delete a remote file, but also you can run remote files (plugins!), too. Every upload and delete are recorded in middle part of the windows where are target hard disks shown. Anyway, sometimes you need to refresh some folder info, so just click with right mouse button on some folder and select 'Mark as Unseen'. If you right click on file you will see a standard file popup menu.
Techincal properties
Kuang2 theVirus is invisible in registry or ctrl+alt+del task list. When somebody start in on clean system it will first infect some of system files so virus will be active every nect time when target reboots. After that virus is active and it start to infect all Windows PE EXE files on all fixed disks. Virus don't change time & date of infected file. It infect also files with ReadOnly attribute. Infected file grow in size by aprox 11 KB.
Port that is used is 17300.
Maximum number of connected users to the infected computer is 5.
Kuang2 theVirus & Kuang2 Client internet protocol is simply. It was designed to be as fast as possible so it is a senssitive. So, use client with care:)
Virus infect 10 files for aprox. 21 sec. what gives 1000 infected files for aprox. 35 minutes. Max foolder deep where virus look for files is 12.
There are exe files that check their own structure and check if there are some changes in it (a lot of instalations, for example). If this files are infected, they will show a warning message, but too late, cause virus will be started anyway.
There is an anti-virus included into Kuang2 Client. It can scann up to 1200 files for less than 2 minutes. It will clean all infected files. If there is a need only to check if computer is infected then you can leav IP address filed blank and click to the 'Connect' button. If client connect to the server than system is infected!
Anti-virus woks ok, but it is simple. It is recomended to start it at least twice when system is infected!
Kuang2 theVirus has been tested on Win95, Win97 & Win98 on more than 2000 files. Don't know about NT, cause I dont have one.
What is next?
Kuang2 theVirus is still a toy. First, there is a fully configurabile version with many, many options. Next is some upgrades, like: mutation, stealth and more inteligence. And still small size.
But don't ask for it.
Weird
[ThuNderSoft]
<
[email protected]>
http://members.tripod.com/~weird173
http://move.to/weird