Re: [Full-Disclosure] Infobot-backdoor

From: Donnie Weiner (s2_pi_di_ty_at_hotmail.com)
Date: 06/17/03

  • Next message: Justin Shin: "[Full-Disclosure] weasel32" 
    To: full-disclosure@lists.netsys.com
Date: Tue, 17 Jun 2003 00:53:14 +0000

    Since when do lamers with no security knowledge whatsoever get permission to
    flame? Everybody check out http://www.illmob.org to see "w g" a.k.a.
    Illwill's level of "skill". If you can't be bothered to look, I've pasted
    some of the "tools" made by this moron below:

    trILLian rape:
    by: illwill - 2.5kb - this program will get the users and passwords from
    trillian (icq,aim,msn,yahoo) and send them to your icq uin

    kILLer 2.0:
    by: illwill - 3kb - stays resident on the machine to kill start/restart
    avs/firewall every 5 seconds.. kills over 280 fw's/av's

    PassRape 1.0:
    by: illwill - 11kb - simple ******* password unmasker ,tested on win98

    ILL-Eagle DL:
    by: illwill - 1.62kb - a webdownloader made especially for vb trojan coders
    or users it checks for the presence of Msvbvm60.dll in the system directory
    before dling the trojan if its not there it dls the dll then the trojan

    halflife jacker:
    by: illwill - 1.26kb - steals victims half life cdkey from their registry
    and sends it to your icq number

    cginotify:
    by: illwill - 1.98kb - a 1.9kb CGI notifier that sends to cgi script the
    victims inner lan and outter wan ip,username:) works on win9x/me/nt/2k/xp
    uses: to bind with other trojans that dont have notification or as a
    replacement to icq notification or as a standalone app

    Shut it down loader:
    by: illwill - 3.5kb - smallest webdler that kills firewalls/antivirus before
    downloading the much larger trojan .. then stay resident on the machine to
    kill any restart of avs/firewalls every 5 seconds.. kills over 280 fw's/av's

    At this point you should get the idea. Somebody remove this trojan kiddie
    from the list, PLEASE. He isn't capable of contributing. Illwill: Stay in
    your place, son. "kthnx"

    >From: w g <xillwillx@yahoo.com> To: Vanja Hrustic <vanja@pobox.com>,
    >full-disclosure@lists.netsys.com Subject: Re: [Full-Disclosure]
    >Infobot-backdoor Date: Sat, 14 Jun 2003 23:50:04 -0700 (PDT)
    >
    >"'Maybe we should have 2 lists instead of 1; full-discolure and
    >full-disclosure-diapers'"
    >
    >i wanna be on the 'full-discolure' list , me no likey diapers... and yes
    >some morons like yourself do install default when they dont know what the
    >*** they are doing ... so sit down ,shut the *** up and quit your
    >bitchin. kthnx

    _________________________________________________________________
    The new MSN 8: smart spam protection and 2 months FREE*
    http://join.msn.com/?page=features/junkmail

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Justin Shin: "[Full-Disclosure] weasel32"
    Loading