indoz Posted July 7, 2006 Report Share Posted July 7, 2006 daca aveti un trojan.exe ar fi mai usor sa convingeti victima sa il ruleze incercand astfel :1) Redenumesti Trojan.exe in Trojan.txt.pif (evident nu mai lasi numele trojan) si el va deveni trojan.txt cu icoana de PIF;2) Run -> Write , drag Trojan.exe in spatiul de scris, click dreapta pe pachetul care apare [trojan.exe] Copy si Paste intr-un folder; se creeaza un Scrap care cu un nume atractiv gen : Crack Yahoo Pass sau ceva lamo va fi executat instantaneu3*)ORIGINAL METHOD > Dai share pe retea la un foler (de ex TEST) in care ai Trojan.exe; Creezi un shortcut cu sursa TESTTrojan.exe pe care o poti trimite "tovarasilor" din retea sau careia ii poti da share in alt folder.4) Binder : Binderul este un program care uneste 2 executabile. De exemplu ai facut rost de un joc nou. "Binduiesti" joc.exe cu trojan.exe si obtii un joc.exe infectat cu trojan pe care il poti da mai departe 5) JavaScript ... problema e ca nu stiu javascript si am uitat care e codul sa deschizi un executabil ... in fine... 6) Faci un cd cu un Autorun.bat ce executa Trojan.exe dp CD ....7) Pui la trojan.exe icoana de .jpg sau .avi ... multi nu au activata optiunea view file extensions iar un .exe cu icoana de .jpg si numele PIC023 e destul de camunflat cand nu se vede extensia!... probabil ca mai sunt ... Quote Link to comment Share on other sites More sharing options...
koltzu Posted July 7, 2006 Report Share Posted July 7, 2006 cam umflat nuh :@ Quote Link to comment Share on other sites More sharing options...
indoz Posted July 7, 2006 Author Report Share Posted July 7, 2006 Quote Link to comment Share on other sites More sharing options...
nos Posted July 7, 2006 Report Share Posted July 7, 2006 da dar pe mess apare extensie chiar daca nu ai activata optiunea daca e destept se prinde daca e lamer nu prea se prinde.... Quote Link to comment Share on other sites More sharing options...
koltzu Posted July 7, 2006 Report Share Posted July 7, 2006 pai uite-te: pt. lameri Quote Link to comment Share on other sites More sharing options...
eddie47 Posted July 7, 2006 Report Share Posted July 7, 2006 Mda...Pretty useful ! Quote Link to comment Share on other sites More sharing options...
Criminal Posted July 7, 2006 Report Share Posted July 7, 2006 nos faza era pt cd k are autorun....cum draq trimiti tu un cd .iso sau .nrg pe mess? e restrictiie de 200 mb omule Quote Link to comment Share on other sites More sharing options...
DarkSpider Posted July 7, 2006 Report Share Posted July 7, 2006 <div class='quotetop'>QUOTE("Criminal")</div>nos faza era pt cd k are autorun....cum draq trimiti tu un cd .iso sau .nrg pe mess? e restrictiie de 200 mb omule1)la ultima versiune de mess poti trimite pana la 1gb.2)pai faci tu un cd in care ii pui trojanul cu autorun si imprumuti cd-ul la toata lumea. Quote Link to comment Share on other sites More sharing options...
Criminal Posted July 7, 2006 Report Share Posted July 7, 2006 da man stiu....nos nu stia ...si nu tre sal imprumuti...il poti face .iso si sharui pe direct conect si aia knd il monteaza...are autorun Quote Link to comment Share on other sites More sharing options...
indoz Posted July 8, 2006 Author Report Share Posted July 8, 2006 Quote Link to comment Share on other sites More sharing options...
Guest Nemessis Posted July 8, 2006 Report Share Posted July 8, 2006 Pe Yahoo messenger se poate ascunde extensia originala. Nu se poate schimba iconita de la preview dar se poate ascunde extensia originala. Quote Link to comment Share on other sites More sharing options...
indoz Posted July 8, 2006 Author Report Share Posted July 8, 2006 <div class='quotetop'>QUOTE("Nemessis")</div>Pe Yahoo messenger se poate ascunde extensia originala. Nu se poate schimba iconita de la preview dar se poate ascunde extensia originala.mh... :@ :@ Quote Link to comment Share on other sites More sharing options...
eddie47 Posted July 8, 2006 Report Share Posted July 8, 2006 <div class='quotetop'>QUOTE("Nemessis")</div>Pe Yahoo messenger se poate ascunde extensia originala. Nu se poate schimba iconita de la preview dar se poate ascunde extensia originala.Ne imparti si 9 din cunostintele tale ? Quote Link to comment Share on other sites More sharing options...
Guest Nemessis Posted July 8, 2006 Report Share Posted July 8, 2006 http://www.xss-watch.org/phpBB/viewtopic.php?t=1434 . Allready done Quote Link to comment Share on other sites More sharing options...
Criminal Posted July 8, 2006 Report Share Posted July 8, 2006 mersiiii super Quote Link to comment Share on other sites More sharing options...
toxic_man Posted August 7, 2006 Report Share Posted August 7, 2006 si daca virusul meu e detectabbil'? cum mai ascund? Quote Link to comment Share on other sites More sharing options...
DarkSpider Posted August 7, 2006 Report Share Posted August 7, 2006 <div class='quotetop'>QUOTE("toxic_man")</div>si daca virusul meu e detectabbil'? cum mai ascund?:@ :@ :@ In halul asta ajunge RST ? Sa se puna la un topic care se numeste .exe hiding o intrebare ca asta?? Quote Link to comment Share on other sites More sharing options...
Guest Nemessis Posted August 7, 2006 Report Share Posted August 7, 2006 si daca virusul meu e detectabbil'? cum mai ascund?Acopera-l cu o patura sau baga-l in san. Quote Link to comment Share on other sites More sharing options...
linux2009 Posted March 7, 2009 Report Share Posted March 7, 2009 Si daca are optiunea activata view e degeaba .Asa facusem eu o arhiva sfx cu o ico atragator (arata ca o felicitare de 8 martie) .Cand dadeai click pe ea se instala hidden pe c si executa un script batch care iti stergea fisierele incepand cu o litera din calc ,deschizand in acelasi timp o poza jpg.Ideea e sa-l faci hidden pe .exe indiferent daca are sau nu activata optiunea. Quote Link to comment Share on other sites More sharing options...