Trojan Defense Suite
[17/02/00]It protects you from over 523 Trojans/Worms. It detects 'all' versions of subseven, including the new 2.1 Gold.
TDS-2 Trojan & worm Lab Anyalysis
Database
This is an exelent freeware database containing info on most Trojans out there
Able Killer 1.1
Removes Able 1.x
Progenic Trojan Scanner
Think you have a trojan on your system? Hate waiting for that trojan scanner to look
through every .exe on your system? Well then, this is the program for you. This will scan
for trojans at rocketing speeds. The .dat files will be updated periodically and will
start with only a few trojans but will increase with time.
Progenic Trojan Dat Files
You need these to run the Trojan Scanner. .
June 1st Dat Files
Unzip these into your trojanscan folder and run the trojan scan program. That's all.
Shotgun
nice program that scans through your ports telling you which ones are open ,open ports can
indicate trojans
Jammer 1.7
New features added:
TCP port scanning detection. Now you will be able to detect scanning for 95% Trojans, ICQ
Personal Web Server security hole, scanning for NetBios, Legion scanning, Ogre scanning
Registry monitoring.
Process view (including hidden processes).
Connections monitor (based on netstat). Check what ports are active on your PC and who are
connected to you.
Do not send message to hacker feature (stealth monitoring).
Author: Jammer Developers Team
AntiGen v1.02
Fixed the bugs from the previous version.
Backwork v2
Detects and removes45 trojans .
BO Eliminator
Removes back orifice.
Bus Jack
Removes all known versions of netbus, including 2.
NOBO v1.2
Watches for connections to your bo port.
Netbuster Buster
Destroys Netbuster .
Toilet Paper
Quickly wipes back orifice from your system .
Liberator v1.01
Detection and removal of installed Back Orifice v1.2x servers Detected BO's are analysed
to reveal their full configuration Directory and hard disk scanner All port/password
combinations from found trojans are monitored Detection and logging of attacks and their
originating IP Sending a customisable message to the attackers BO-Client screen Full log
including time-zone info, ideal for reporting attack.
The Trojan Cow Remover 1
A Trojan remover,for the Cow Trojan program.
Lockdown 2000 v 2.54
Some features are: detects and removes the Happy99- SKA Trojan virus, ignore button for
detected Trojans, main display log, logs hacker's IP address. Also looks out for BO and
Netbus.
Universe- Millenium edition ver 1.0
Cleaner for the newest trojans. First edition of Universe is Millenium edition. It deletes
Millenium trojan.
Universe- Leentech BO edition ver 1.0
This is the Second edition of Universe the Leentech BO edition.
Netbus detective 5.1
print hacking attempts.
Anti-Back Door
similair to netbuster and nobo but it's against BackDoor users.
Trojan Cleaner
Cleaner 2, cleans most common trojans.
BO Freeze
Here's a nifty tool to get back at Back Orifice abusers. BO Freeze will stall the Back
Orifice client of the attacker if he pings you.
Trojanlar, trojan tarayicilari, trojan siliciler
| Welcome to the Trojans, detectors, cleaners Section. | |||
 |
|||
|
|||
| Filename | Downloads | File Size | Last Modified |
| RAT | --- | 512 | Sep 3 15:18:45 1999 |
| Directory: RAT - Remote Administration Tool (UNIX --> Windows). | |||
| bo | --- | 2048 | Sep 2 17:07:58 1999 |
| Directory: Back Orifice | |||
| donalddick | --- | 512 | Oct 11 17:42:00 1999 |
| Directory: Donald Dick (client/server spy for Windows 95/98/NT) | |||
| 9x_int09.zip | 2502 | 10203 | Aug 16 17:14:53 1999 |
| 9x INT09 moniter is a routine that will moniter ALL key strokes typed after loaded. The best feature of this keystroke logger is its small size: 732 bytes compiled. By 9x. | |||
| 9x_logn.zip | 1913 | 21813 | Aug 16 17:14:58 1999 |
| This is a Login'd trojan that is the same size or very close to the size of the real login program. To use just type whatever you want for the user and pass and wait for root shell. By Bosplaya of 9x. | |||
| AbelKiller.zip | 1403 | 74801 | Aug 16 17:14:59 1999 |
| Abel Service Remover. Coded in VC++. By Break-Dance. | |||
| Anti-BD.exe | 1831 | 28672 | Aug 16 17:14:48 1999 |
| Anti-BackDoor - BackDoor trojan cleaner/remover. Download at your own risk. | |||
| BackFire131.exe | 4271 | 3098207 | Aug 16 17:14:53 1999 |
| BackFire v1.31 - Anti-Back Orifice tool that fakes a BO server, intercepting all BO commands sent and logging the remote IPs, and has offensive option enabling you to freeze the remote BO GUI. 3098k. Sound file for BackFire 68k, Backfire readme. By Lee Brothers. | |||
| BusConquerer13.exe | 4968 | 3978738 | Aug 16 17:14:55 1999 |
| Bus Conquerer v 1.3 - Bus Conquerer is a client application which automates the backdoor process of changing the password on a NetBus server to allow access. InstallShield version. By The Lee Brothers. | |||
| BusDrive.zip | 2952 | 1513126 | Aug 16 17:14:47 1999 |
| Drive The Bus v1.0 - NetBus Backdoor Automation Tool - Drive The Bus is a client application which automates the backdoor process of changing the password on a NetBus server to allow access. | |||
| DRaT_Remote_RaT_R1.z..> | 2480 | 89201 | Nov 16 11:58:34 1999 |
| Darats Remote Admin Tool. Windows backdoor which runs on TCP port 48. By Derat | |||
| Hackyou.tgz | 3286 | 2586103 | Jan 21 15:50:48 2000 |
| Utility to send a trojan to any unpatched IIS 4.0 system by exploiting a buffer overflow. (Without SP6). Exploit by Dark Spyrit. Trojan by NedoDarkseed | |||
| Le_Guardien.zip | 2163 | 1191016 | Feb 28 15:50:32 2000 |
| Le Guardian is a new Windows trojan written in VB6 with many remote control functions. Uses TCP port 1001 for communication. By Gilles Houssar | |||
| NB20Pro.exe | 16504 | 1761183 | Aug 16 17:14:57 1999 |
| NetBusPro v2.0 (final release) - Screenshot. The infamous trojan for Windows 95/98/NT includes the following features now: Host list integration with network neighbourhood, Server setup and administration (close server, restrict IP access, TCP-port, password, visibilty, access mode, autostart), General system information and cached passwords, Message manager, Window manager (full control over all windows), Registry manager (list keys, fields and values, create keys and delete keys, change values among others), Sound system (raise and lower volumes), Plugin manager (run plugins that extend the capabilities of NetBus), Port redirect (simple proxy support), Application redirect (e.g. allows you to interact with MS-DOS prompts remotely, which gives you powerful access to the computer), File actions (execute executable files, show image files, play audio files, open document files and print document files), Spy functions (includes listen keyboard, get screen capture, record audio from microphone and get webcamera image, File manager (explorer, upload and download files, delete files and folders, create folders and share folders, Exit Windows (reboot system, shutdown system or power down system), Cool functions (Client chat, open and close CD-ROM, disable keys, key click, swap mouse buttons, Goto URL, Send text), NetBus scanner, fast port scanner, Host scheduler, predefine time to run scripts at hosts, Command broadcaster, broadcasts commands to multiple hosts, Multi-language support, extendable to more languages than just english, Skin support (transparent backgrounds), InstallWizard and Online help manual. By Carl-Fredrik Neikter, www.netbus.nu. | |||
| NB2ProBeta.zip | 4003 | 1497983 | Aug 16 17:14:56 1999 |
| NetBus v2.0 Pro Beta - Latest version of the infamous NetBus trojan - now with better GUI, proxy support, enhanced file manager, chat feature, web-cam capture ability, complete window manager, registry manager, plugin manager, host scheduler, enhanced system info, much more. By Carl-Fredrik Neikter. | |||
| NBProScreen.jpg | 0 | 25472 | Aug 16 17:14:56 1999 |
| Sorry, a description is unavailable. | |||
| NBhaX0rP.zip | 2617 | 14339 | Aug 16 17:14:46 1999 |
| Netbus Pw HaX0r v2.1 - "Hacks" In to the Netbus Server and changes the password. By Legion2000. | |||
| NetB153.zip | 1517 | 518063 | Aug 16 17:14:46 1999 |
| See below. | |||
| NetB160.zip | 3458 | 525602 | Aug 16 17:14:46 1999 |
| NetBus v.1.60 - THE remote administration/hacking/trojan tool for Windows95/98/NT. | |||
| NetBus170.zip | 10418 | 548808 | Aug 16 17:14:48 1999 |
| The latest release of the infamous Win96/98/NT trojan. New features include: Ultra-fast Port scanner, Port Redirect, Advanced Server setup, Application Redirect, Advanced Access Restriction, much more. By Carl-Fredrik Neikter. | |||
| Netconfig.zip | 1807 | 5680 | Aug 16 17:14:59 1999 |
| Netware Trojan v1.0 is a login trojan for Netware + Win9x/NT that forces the user to enter their password a second time, after giving them a login error message, and saves the logins/passwds to a file. By NullString. | |||
| ROOTKIT.ZIP | 1586 | 79041 | Aug 16 17:15:01 1999 |
| Sorry, a description is unavailable. | |||
| SetupTrojan.zip | 2473 | 18338 | Aug 16 17:14:44 1999 |
| A tiny program called Setup.EXE which adds a full read/write hidden System-Share to the victim's C:\ drive. Takes less than a second to run and will then call a REAL setup.exe. Includes VC++ source code. By Enigma. | |||
| Srv_gIrC1_8.zip | 274 | 56565 | Mar 29 23:13:40 2000 |
| IRC Bot plugin for BO2K v1.0 - It is an IRC client, Channel Bot style. Is fully customizable and once logged into an IRC server, it is remotely administrable through the IRC /msg or /query commands. The bot will rejoin any channel where get kicked, reconnect on disconnect, generate random nicks on raw 432 or 433, can delete, list, copy, spawn files on remote machine through irc. Homepage here. By RazboiniK | |||
| Srv_gIrC1_81.zip | 0 | 60912 | May 9 13:52:14 2000 |
| IRC plugin for BO2K v1.0. It is an IRC client, Channel Bot style. Is fully customizable and once logged into an IRC server, it is remotely administrable through the IRC /msg or /query commands. The bot will rejoin any channel where get kicked, reconnect on disconnect, generate random nicks on raw 432 or 433, can delete, list, copy, spawn files on remote machine through irc... Homepage here. By RazboiniK | |||
| TFAK.zip | 2388 | 2459765 | Apr 3 19:33:22 2000 |
| TFAK v2.0 is a client for 19 remote access trojans, and removes 141 remote access trojans. This is the first and only trojan scanner which is able to find new, unknown trojans. Homepage here. By SnakeByte | |||
| TFAK3.zip | 1132 | 2011804 | Apr 27 15:49:07 2000 |
| TFAK v3.0 is a client for the detection of 257 different remote access trojans. This is the first and only trojan scanner which is able to find new, unknown trojans. Homepage here. By SnakeByte | |||
| TopScanV1-2-inst.exe | 1268 | 34070 | Aug 16 17:14:59 1999 |
| TopScan v1.2 is a program designed to scan for all files bound with the Teflon Oil Patch program. By DaRaT. | |||
| TopV4.exe | 2324 | 44894 | Aug 16 17:14:59 1999 |
| Teflon Oil Patch v4.1 is a program used to bind trojans (or viruses) to any files you specify, defeating virus/trojan detection programs in most cases. This latest release includes lots of kickass new options. Warning: AV software will eroniously flag this as a virus. By DaRaT. | |||
| Topbv1.zip | 1422 | 11076 | Aug 16 17:14:58 1999 |
| TOP (Teflon Oil Patch) is a program used to bind trojans (or viruses) to any files you specify, defeating virus/trojan detection programs in most, if not all, cases. By Darattys. | |||
| Trojan_Ports_List.r_..> | 3831 | 3374 | Dec 2 14:52:23 1999 |
| Trojan port list which covers 171 remote trojans. By Evil Dead | |||
| Trojans.txt | 4077 | 1696 | Oct 26 13:17:16 1999 |
| A list of the TCP ports which trojans use. Homepage here. By int_13h. | |||
| Trojans213.zip | 294 | 4490 | Apr 5 13:03:00 2000 |
| Trojans213.zip is a list of 213 remote access windows trojans, with the default port numbers they use. Also contains a list formatted for use with superscan 2.0*. By Evil_dead | |||
| abelkiller.zip | 1068 | 74801 | Aug 16 17:14:59 1999 |
| Abel Service Remover, for use with Cain v1.51 and Abel v1.1. Coded in VC++. By Break-Dance. | |||
| achtung.zip | 2361 | 159407 | Aug 16 17:14:47 1999 |
| Achtung! - Keystroke logger. By Codex Data Systems. | |||
| antisocket.zip | 1228 | 161736 | Aug 16 17:14:49 1999 |
| Anti Sockets de Troie v2.5 - Deletes Sockets de Troie trojan. Download at your own risk. | |||
| apache.c | 1578 | 1717 | Aug 16 17:14:59 1999 |
| How many times have you wanted to burn the hell out of a damn script kiddie? According to the header, apache.c is a "remote apache 1.3.4 root exploit", but if you know C and take a look at the shellcode, you'll quickly realize that apache.c actually creates a local account called 'hakr' (uid0/nopass). Time to nail a couple script kiddies? | |||
| backfire.lsm | 0 | 3350 | Aug 16 17:14:51 1999 |
| Sorry, a description is unavailable. | |||
| backwork2.zip | 2281 | 443271 | Aug 16 17:14:56 1999 |
| Backwork v2.0 - Yet another "trojan cleaner", but this one claims to be able to scan for, identify and remove over 45 different varieties of trojans. This one is included here because it comes from "legitimate sources" (security.pine.nl and xs4all.nl ISP). Backwork web site. | |||
| bconqpatch.zip | 1364 | 239 | Aug 16 17:14:51 1999 |
| Bus Conquerer Password Patch - Enable Changing Password feature on Bus Conquerer. By Lee Brothers. | |||
| bd202.zip | 1677 | 95768 | Aug 16 17:14:49 1999 |
| BackDoor v2.02 - Backdoor trojan with lots of features. Download at your own risk. By Dark Eclipse Software. | |||
| bd203.zip | 2300 | 113466 | Aug 16 17:14:51 1999 |
| BackDoor v2.03 - Remote access/admin tool and trojan. vb-runtime files needed. 1399k. By Dark Eclipse Software. | |||
| bluedisk.zip | 1792 | 23882 | Aug 16 17:14:47 1999 |
| This is a very convincing Blue Screen of Death Screen saver. Send your friends the BSOD (Blue Screen of Death). Thanks Eric. Download at your own risk. | |||
| bo120p07.zip | 2797 | 285870 | Oct 13 10:05:58 1999 |
| Patched version of back oriface which is not detected by DrWeb 4.x,sPIDER, AVP 3.0, or Norton Antivirus 5.0 win (base 18.11.98). BO version 1.20 patch 7. By b@$t sh()t and su1d sh3ll of UnlG | |||
| bo120p08.zip | 1786 | 285897 | Feb 25 13:40:43 2000 |
| Back Oriface 1.20 (Patch 8) - Patched to avoid detection by Drweb, Avp, and Norton Antivirus. Homepage here. | |||
| boping.zip | 631 | 16272 | Nov 2 21:27:10 1999 |
| A scanner for the infamous Back Orifice program. This is many times faster than the ping sweeper built in to the original client program. I have included the ability to notify detected victims by sending them a BO messagebox message directly from within the program. This is intended as a vigilante tool to notify victims who unknowingly have the trojan on their system. Homepage here. | |||
| busconq.zip | 1714 | 224823 | Aug 16 17:14:49 1999 |
| Bus Conquerer v 1.2 (includes VB runtime files) - NetBus trojan password cracker. Scans IP blocks for NetBus trojans and changes passwords to password of your choice so you can gain exclusive control. Download at your own risk. By Lee Brothers. | |||
| buscoq12.zip | 2213 | 29934 | Aug 16 17:14:49 1999 |
| NetBus trojan password cracker. Scans IP blocks for NetBus trojans and changes passwords to password of your choice so you can gain exclusive control. Bus Conquerer v 1.2 (w/out needed DLLs). Download at your own risk. By Lee Brothers. | |||
| busjack10.exe | 1446 | 426702 | Aug 16 17:14:56 1999 |
| BusJack v1.0 - BusJack is a "NetBus trojan cleaner" that can stop all versions of NetBus from running on the spot, without the need for a reboot, disabling, halting, and destroying NetBus versions 1.x AND 2.x, and then tracking the source/cause of the NetBus "infection". By Fresh Software. | |||
| busjack11.exe | 1454 | 419421 | Aug 16 17:14:58 1999 |
| See description above. | |||
| cain15.zip | 2946 | 592627 | Aug 16 17:14:59 1999 |
| Cain v1.5 and Abel v1.0 - Cain v1.5 displays all cached passwords on your system, and can crack any Windows password. It can also display/change/remove the screen saver password, show local shares, show remote shares, and many many other useful features. Also includes Abel 1.0 which is a program you send to people and then you can access their passwords from your computer. Specifically, Abel is an invisible socket server that works with Cain in order to recover remote machine (only Windows 9x) passwords over an IP network. Abel listens on TCP port 666, acts as a system service, and like NetBus and Back Orifice, it doesn't show itself in the task list. Coded in VC++. By Break-Dance. | |||
| cain151.zip | 9825 | 622446 | Aug 16 17:14:59 1999 |
| Cain v1.51 and Abel v1.1 - Cain v1.51 is a password recovery tool for Windows 95/98 operating systems. It allows to recover Logon passwords, Share passwords (local and remote), Screen Saver passwords, DialUp passwords, Link passwords and any other application defined passwords cached in your system or in external .PWL and registry files. With Cain these passwords can also be modified quickly. This program demonstrates that Windows 95/98 Password Caching and Share-Level Access Control could be security problems. If you are using Windows 95/98 you should disable Password Caching and use User-Level Access Control for your shared resources. Also includes Abel 1.1 which is a program you send to people and then you can access their passwords from your computer. Specifically, Abel is an socket server that works with Cain in order to recover remote machine (only Windows 9x) passwords over an IP network. Abel listens on TCP port 666, acts as a system service, like NetBus and Back Orifice. Coded in VC++. By Break-Dance. | |||
| chupacabra.zip | 236 | 122749 | Apr 5 13:04:00 2000 |
| chupacabra is a remote access trojan created by Dark Side Industries. The trojan has the common remote access trojan fuctions and also a nice design. Homepage here. By Dark Side Industries | |||
| control-trojan.zip | 2222 | 237115 | Aug 16 17:14:46 1999 |
| Yet another trojan to play with. Password: 666 C/S JCzic... | |||
| dnsscan | 1286 | 3254 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| elitewrap.zip | 1918 | 11526 | Aug 16 17:14:59 1999 |
| eLiTeWrap v1.03 is an EXE wrapper, used to pack files into an archive executable that can extract and execute them in specified ways when the packfile is run. Features: Programs in the packfile can be extracted without starting, Unlike many EXE wrappers, files can be automatically extracted into a temporary directory, from where other programs in the packfile or on the user's system can manipulate them, Programs inside the packfile and on the user's system can be automatically started, Unlike many self-extractor utilities, eLiTeWrap has the ability to start any number of programs, contained in the packfile, or existing on the user's system, Programs (packed and external) can be started visibly, or hidden from the user, Programs that do not require user input can be started completely hidden from the user, Programs can be started synchronously or asynchronously, The packfile can be made to wait for a program to finish before the rest of the files are processed, Script files can be written to automate the creation of packfiles, much more. By eLiTe. | |||
| errsourc.zip | 0 | 7757 | Aug 16 17:14:49 1999 |
| Sorry, a description is unavailable. | |||
| evdsb7re.zip | 3483 | 53351 | Dec 3 10:56:17 1999 |
| This program lets you comfigure and remove a SubSeven server, including some of its hidden features. Main purpose is changing settings that server editor and client dont allow you to alter. Works with SubSeven 2.1, 2.1b, and 2.0. Shows notification info (uin, email, irc). Homepage here. By Zyklon B | |||
| fake_freeav.zip | 2032 | 9895 | Jan 10 13:55:18 2000 |
| This program is a fake logon screen for Altavista's Free Internet Service (FreeAV). It automaticly logs the password and username and date in a log file. Screenshot here. Homepage here. By Icer | |||
| fatalerr.zip | 1573 | 89891 | Aug 16 17:14:49 1999 |
| Fake Network Error Trojan - This is a fake error message that prompts for the username and password. These are then stored in a file called c:\os32779.sys source code. By ManiC. | |||
| fatalerr2.zip | 170 | 89891 | Apr 5 13:04:00 2000 |
| Fatal Network Error Trojan - This trojan Outputs a message box to the screen saying that a fatal network error has occoured and prompts for username and password. Writes this info to c:\os32779.sys in plain text. Homepage here. By ManiacX | |||
| fbsdrootkit.tar.gz | 976 | 370925 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| ftp.zip | 2711 | 206820 | Aug 16 17:14:53 1999 |
| Invisible FTP Server 1.00 - just what the program title says. For Win95/98/NT. By Dark Eclipse Software. | |||
| gf.txt | 1980 | 5094 | Aug 16 17:14:51 1999 |
| Detailed description of Girl Friend v1.35 functions and uses. | |||
| gf135-source.zip | 2092 | 64974 | Aug 16 17:14:51 1999 |
| Source code for Girl Friend version 1.35 (Delphi 4.0) | |||
| gf135.zip | 4095 | 573408 | Aug 16 17:14:51 1999 |
| GirlFriend 1.35 - Girlfriend is a trojan which allows you to get information on applications running on remote PC, especially passwords. Has many options, similar to NetBus or Back Orifice. By General Failure. | |||
| gf_p02.zip | 1635 | 391933 | Feb 25 13:38:27 2000 |
| Girlfriend remote control trojan - Patched to avoid detection by Drweb, Avp, and Norton Antivirus. Homepage here. | |||
| godmessage.zip | 2744 | 23247 | Nov 8 16:09:14 1999 |
| Exploit of the Microsoft script lib bug and reg wiz control buffer overflow allow very evil code to be executed when this html is viewed. A very large number of systems are at risk. By Osioniusx | |||
| grabem.c | 1161 | 5350 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| grlogin.c | 1197 | 15072 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| hacking_unix.txt | 1424 | 41819 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| icqtrp01.zip | 2983 | 38212 | Nov 3 19:35:34 1999 |
| patched version(v1) of ICQ Trogen for win platform. Remote control that AVP 3.0 will not detect. By b@$t sh()t of UnlG | |||
| icqtrp02.zip | 1637 | 38317 | Feb 25 13:39:58 2000 |
| ICQ trojan - Patched to avoid detection by Drweb, Avp, and Norton Antivirus. Homepage here. | |||
| idiot.zip | 2681 | 111479 | Aug 16 17:14:47 1999 |
| A joke program that says there's been an error and asks if you're an idiot, won't take no for an answer. | |||
| ik97.zip | 3079 | 788634 | Aug 16 17:14:49 1999 |
| Invisible keystroke logger '97. (zipped file) By Amecisco. | |||
| ik97v12s.exe | 1598 | 801706 | Aug 16 17:14:50 1999 |
| See above. (exe file) | |||
| iksnt10d.exe | 1164 | 625382 | Aug 16 17:14:50 1999 |
| See above. This is a demo version for WinNT. | |||
| iksv12d.exe | 1280 | 735412 | Aug 16 17:14:50 1999 |
| See above. This is a demo version for Win95/98. | |||
| insane.zip | 1550 | 42121 | Jan 20 13:25:30 2000 |
| Windows trojan based on Xtcp, written in C++ (binary only). Homepage here. By Suid Flow. | |||
| intruderf.c | 1154 | 5533 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| iv-nbp11.xip.ZIP | 1467 | 126409 | Aug 16 17:14:48 1999 |
| TIYP NetBus Patcher 1.1. By IV Productions. | |||
| jammer101f.exe | 1888 | 1464541 | Aug 16 17:14:58 1999 |
| Jammer v1.01 is a tool that complete protection against all versions of Back Orifice and NetBus, including modified 3rd party releases. Jammer monitors all services, ports, and protocols, and also functions as a low-level network sniffer and real-time packet analyzer. Additional features: decrypts Back Orifice packets and encryption keys, sends messages to remote attackers using trojan clients, logs IPs of attackers, sends customizable complaint/report emails to the attacker's system administrators and ISPs, automatically deletes Back Orifice and NetBus servers, much, much more. By Jammersoft Corp. Check out the registered version that includes even more features at the Jammersoft Corp web site. | |||
| jammer17f.exe | 4921 | 1690215 | Aug 16 17:15:01 1999 |
| Jammer v1.7 is a tool that offers complete protection against all versions of Back Orifice and NetBus, including modified 3rd party releases. Jammer monitors all services, ports, and protocols, and also functions as a low-level network sniffer and real-time packet analyzer. Additional features: decrypts Back Orifice packets and encryption keys, sends messages to remote attackers using trojan clients, logs IPs of attackers, sends customizable complaint/report emails to the attacker's system administrators and ISPs, automatically deletes Back Orifice and NetBus servers, much, much more. Changes and new features: TCP port scanning detection. Now you will be able to detect scanning for 95% Trojans, ICQ Personal Web Server security hole, scanning for NetBios, Legion scanning, Ogre scanning; Registry monitoring; Process view (including hidden processes); Connections monitor (based on netstat). Check what ports are active on your PC and who is connected to you; Stealth monitoring; bugfixes. By Jammersoft Corp. Check out the registered version that includes even more features at the Jammersoft Corp web site. | |||
| keycopy.zip | 1328 | 3802 | Aug 16 17:14:46 1999 |
| Sorry, a description is unavailable. | |||
| keylog2_.zip | 1503 | 39259 | Aug 16 17:14:48 1999 |
| Sorry, a description is unavailable. | |||
| keylog95.zip | 1686 | 36911 | Aug 16 17:14:46 1999 |
| Sorry, a description is unavailable. | |||
| keyrec.zip | 1362 | 14336 | Aug 16 17:14:48 1999 |
| Sorry, a description is unavailable. | |||
| keytrap1.zip | 1196 | 9207 | Aug 16 17:14:48 1999 |
| Sorry, a description is unavailable. | |||
| keytrap2.zip | 1124 | 7569 | Aug 16 17:14:48 1999 |
| Sorry, a description is unavailable. | |||
| keytrap3.zip | 1332 | 6179 | Aug 16 17:14:48 1999 |
| Sorry, a description is unavailable. | |||
| log.zip | 2899 | 40808 | Aug 16 17:14:48 1999 |
| keystroke logger | |||
| mastpara-trojan.zip | 1616 | 1067992 | Aug 16 17:14:45 1999 |
| Master's Paradise trojan, old version. | |||
| mastpara98v9.7b.zip | 2354 | 993409 | Aug 16 17:14:45 1999 |
| Master's Paradise 98 Beta 9.7 - Trojan that accesses a specific port on an exploited system. Also contains a game file which you can send to your victim to get their port open. | |||
| mp98b.exe | 1453 | 567786 | Aug 16 17:14:44 1999 |
| Master's Paradise v9.8beta - (exploit yourself at your own risk) | |||
| nb16_p04.zip | 2049 | 527689 | Feb 25 13:41:40 2000 |
| NetBus 1.6 (Patch 4) - Patched to avoid detection by Spider, Drweb, Avp, and Norton Antivirus. Homepage here. | |||
| nbpro201.exe | 2320 | 1783014 | Aug 16 17:15:00 1999 |
| NetBus v2.01 Pro | |||
| nbpro210.exe | 6691 | 2072959 | Sep 22 13:28:11 1999 |
| Netbus Pro v2.10 Remote Administration Tool. See netbus.org | |||
| netbuster1_12.zip | 1233 | 266318 | Aug 16 17:14:47 1999 |
| NetBuster simulates NetBus server on your computer, so "attackers" think that you have NetBus installed. It logs every connection to it, and it could send arbitary files to the "attacker" (like you can send him a fake screenshot or fake waw files). Netbuster web site. | |||
| netbuster1_30.zip | 1339 | 546159 | Aug 16 17:14:48 1999 |
| Now with support for NetBus v1.70! NetBuster simulates NetBus server on your computer, so "attackers" think that you have NetBus installed. It logs every connection to it, and it could send arbitary files to the "attacker" (like you can send him a fake screenshot or fake waw files). Netbuster web site. | |||
| netbuster1_31.zip | 2508 | 546591 | Aug 16 17:14:48 1999 |
| NetBuster simulates NetBus server on your computer, so "attackers" think that you have NetBus installed. It logs every connection to it, and it could send arbitary files to the "attacker" (like you can send him a fake screenshot or fake waw files). Function upgrade over last version. By Håkan Bergström. | |||
| netbusterkill.zip | 0 | 76971 | Aug 16 17:14:51 1999 |
| Sorry, a description is unavailable. | |||
| netraider0.0.zip | 2167 | 186923 | Jan 10 11:17:13 2000 |
| NetRaider - Remote W9x/2000 Administration Tool. Homepage here. By Spirit | |||
| nil-0.1b.tar.gz | 960 | 8156 | Aug 16 17:15:01 1999 |
| NIL 0.1b - NIL is a simple Netbus client with a clean interface for Linux. Changes: Initial release. By David Tuvin. | |||
| nnb.zip | 1125 | 8681 | Aug 16 17:14:50 1999 |
| No Netbus v1.0 - NetBus scanner and remover. Download at your own risk. | |||
| nnports.html | 126 | 23440 | Aug 16 17:14:43 1999 |
| A list of trojan port numbers that Nuke Nabber uses. Homepage here. | |||
| nps16.zip | 1269 | 91422 | Aug 16 17:14:49 1999 |
| NetBus Protection System! v1.6 - NetBus Protection System! v1.6 sits in your system tray, and actively scans for local NetBus installations and attempts. | |||
| pcpro21a.exe | 2275 | 75609 | Aug 16 17:14:47 1999 |
| PC#Protect Keystroke Logger - Stealth-type keystroke logger that runs invisibly in background and logs all keystrokes to encrypted textfile. For Win95/NT. | |||
| phantom2.zip | 1912 | 32878 | Aug 16 17:14:48 1999 |
| key logger | |||
| playback19c.zip | 1022 | 30738 | Aug 16 17:14:46 1999 |
| Sorry, a description is unavailable. | |||
| rmtoolkit.zip | 2378 | 150163 | Oct 25 11:43:53 1999 |
| Gives you access to the registry, dos, display properties etc' (control panel too in the next version). Homepage here. By Raven. | |||
| rootkit.zip | 1000 | 79041 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| rootkitLinux.tgz | 1080 | 74555 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| rootkitSunOS.tgz | 921 | 69919 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| screen_freeav.jpg | 0 | 22817 | Jan 10 13:54:16 2000 |
| Sorry, a description is unavailable. | |||
| socdmini.c | 1149 | 1383 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| sockets-de-troie.zip | 3595 | 457422 | Aug 16 17:14:44 1999 |
| Trojan that accesses a specific port on an exploited system. Also contains a domain scanner, finger, icmper, icq stuff, ip converter, mail bomber, port bomber, port scanner, a search registry net, and telnet. | |||
| softwarst.exe | 2803 | 357738 | Jan 25 11:43:59 2000 |
| Softwar "Shadow Thief" is a Win 9X remote control trojan. The server is coded in pure ASM and is only 8k! Has over 30 features. Current AV products do not pick it up. Screenshots here. Homepage here. By True Real | |||
| sol24.zip | 936 | 5949 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| sol25.zip | 969 | 7882 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| soundpack1.zip | 0 | 67856 | Aug 16 17:14:53 1999 |
| Sorry, a description is unavailable. | |||
| spoofedlogin.c | 1236 | 4760 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| sshdx.c | 359 | 6688 | Aug 16 17:14:59 1999 |
| Trojan that attempts to backdoor you, if you look in the shellcode. It pretends to be an exploit. | |||
| su.c | 1308 | 536 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| sub72remover.zip | 7176 | 219671 | Nov 10 11:34:06 1999 |
| This program does what NAI, MCAFEE claim to be impossible, it detects _all_ versions (crypted, compressed) of Subseven 2 and cleans them from memory, from the hardisk, and removes _all_ autostart methods implented. Homepage here. By Int 13h | |||
| subseven-2.1.txt | 3069 | 1154 | Dec 3 10:56:17 1999 |
| Information on the removal of Subseven 2.1. By Acidtracers | |||
| sun-5.5.1.zip | 1048 | 14587 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| sutrojan.c | 1349 | 3708 | Aug 16 17:14:43 1999 |
| Sorry, a description is unavailable. | |||
| tbg.zip | 1900 | 330378 | Aug 16 17:14:59 1999 |
| Trojan B' Gone (Beta 1.00 Build 12) is a program designed to scan and monitor your computer for trojans. Features: scans for trojans 4 different ways for effectiveness and speed, scans ports for trojan activity, monitors all programs loading with Windows or running in memory, monitors ports for trojan server scans/probes, allows you to create your own trojan plugins with our plugin creator. Initial public release. By Dark Eclipse Software. | |||
| tlfaq.htm | 5669 | 126529 | Oct 26 13:21:22 1999 |
| FAQ on removing many different trojans. Updated frequently. Homepage here. By int_13h. | |||
| tro_port.zip | 2368 | 53776 | Jan 6 17:14:37 2000 |
| List of trojans and the ports they run on. Word 97 format. By Bodo Sgattoni | |||
| trojan.ports.txt | 2583 | 3525 | Aug 16 17:15:00 1999 |
| An excellent and thorough listing of all known trojans and the ports that they commonly use. By Joakim von Braun. | |||
| udp-backdoor-v2.0.tg..> | 1157 | 7591 | Sep 28 10:51:59 1999 |
| UDP backdoor v2.0 for UNIX by {MANIAC}. | |||
| whackjob.zip | 1238 | 309520 | Aug 16 17:14:44 1999 |
| Whack Job v1.1 - trojan front-end application for NetBus v1.60. By Ecoli. | |||
| whackjob17.readme | 1641 | 3787 | Aug 16 17:14:51 1999 |
| Sorry, a description is unavailable. | |||
| whackjob17.zip | 2285 | 646564 | Aug 16 17:14:51 1999 |
| whackjob v1.7 - Latest release of the whackjob trojan that binds a netbus1.7 server to a game program, enabling the user of whackjob to install a netbus server on a remote computer in a stealth-like manner. Uses customized ports and passwords. Check out the whackjob17.readme. By Ecoli. | |||
| worm_src_tar.gz | 1474 | 23918 | Aug 16 17:14:50 1999 |
| Source code to the infamous Morris Internet Worm of Nov 2, 1988. | |||
| wpack1.2b.zip | 1179 | 176635 | Feb 28 16:23:46 2000 |
| The WC Remote Administration Tool (v1.2b) is a Windows remote control trojan coded in Delphi. The client is in C and runs on unix. Includes a tool (LookItUp.c) to test a host for infection. By Wildcoyote | |||
|
|||
