Мой троянчик..
Всем здарова!
Я не удержался сказать вам про мой первый троян..
( в ознакомительных целях :p )
Он очень похож на Pinch..
НЕ говорите что отстой и тд... Я первый раз написал такое...
Вот что пришло мне на мыло:
Цитата:
[General]
Application = InFoxRealTime, Version 1.0.0
Date = 02.05.2005
Time = 13:20:10
Computer Name = FOX
User Name = 1
[System]
Operating System = Microsoft Windows ME
Version = 4.90.73010104
Last boot state = Started in normal mode
Time since reboot = 01:36:04
[Directories]
WINDOWS Directory = C:\WINDOWS
SYSTEM Directory = C:\WINDOWS\SYSTEM
TEMP Directory = C:\WINDOWS\TEMP
PROGRAM FILES Directory = C:\Program Files
COMMON FILES Directory = C:\Program Files\Common Files
FONTS Folder = C:\WINDOWS\FONTS
User PROFILE Directory = C:\WINDOWS\Profiles\1
User START MENU Directory = C:\WINDOWS\цКЮБМНЕ ЛЕМЧ
User PROGRAM GROUPS Directory = C:\WINDOWS\цКЮБМНЕ ЛЕМЧ\оПНЦПЮЛЛШ
User STARTUP Directory = C:\WINDOWS\цКЮБМНЕ ЛЕМЧ\оПНЦПЮЛЛШ\юБРНГЮЦПСГЙ Ю
User DESKTOP Directory = C:\WINDOWS\пЮАНВХИ ЯРНК
User DOCUMENTS Directory = C:\лНХ ДНЙСЛЕМРШ
User Document TEMPLATES Directory = C:\WINDOWS\Templates
User RECENTLY used documents Directory = C:\WINDOWS\Recent
User SEND TO menu items Directory = C:\WINDOWS\SendTo
User APPLICATION DATA Directory = C:\WINDOWS\Profiles\1\Application Data
User FAVORITES Directory = C:\WINDOWS\хГАПЮММНЕ
[Environment]
SOUND=C:\PROGRA~1\CREATIVE\CTSND
MIDI=SYNTH:1 MAP:E
BLASTER=A220 I5 D1 H5 P330 T6
CTSYN=C:\WINDOWS
COMSPEC=C:\WINDOWS\COMMAND.COM
PROMPT=$p$g
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
PATH=C:\WINDOWS;C:\WINDOWS\COMMAND;C:\PROGRA~1\ATI TEC~1\ATICON~1
winbootdir=C:\WINDOWS
windir=C:\WINDOWS
[Region Locale]
Country Name = Russia
Country Native Name = пНЯЯХЪ
Language ID = 1049
Language Name = Russian
Language Native Name = ПСЯЯЙХИ
Date Format = dd.MM.yyyy
Time Format = H:mm:ss
Thousand Specifier =
Decimal Specifier = ,
Currency Specifier = П.
Positive Sign =
Negative Sign = -
[Resources]
Error Get_FreeResources
[CPU]
Processor type = 586
Number of procesors = 1
[Memory]
Physical Memory Total = 511 Mb
Physical Memory Available = 161 Mb
Virtual Memory Total = 2 044 Mb
Virtual Memory Available = 1 975 Mb
Page File Total = 1 537 Mb
Page File Available = 1 335 Mb
[Drives]
Drive A:
Drive Type = Floppy Disk
Drive is not ready
Drive C:
Drive Type = Hard Disk
File System Type = FAT32
File Serial Number = 880416497
Total Space = 2 048 Mb
Used Space = 0 Mb
Free Space = 2 048 Mb
Drive D:
Drive Type = CD-ROM
Drive is not ready
Drive E:
Drive Type = CD-ROM
File System Type = CDFS
File Serial Number = 1728861052
Total Space = 678 Mb
Used Space = 678 Mb
Free Space = 0 Mb
Drive H:
Drive Type = CD-ROM
Drive is not ready
Drive W:
Drive Type = CD-ROM
Drive is not ready
Drive Z:
Drive Type = Hard Disk
File System Type = FAT32
File Serial Number = 880416497
Total Space = 2 048 Mb
Used Space = 0 Mb
Free Space = 2 048 Mb
[Hard Disk]
HDD Total Size = 4 096 Mb
HDD Used Space = 0 Mb
HDD Free Space = 4 096 Mb
[Screen]
Device = RADEON 9800 PRO
Resolution = 1280x960
Bits per pixel = 32
[Sound]
Sound Out Device = Yes
Sound In Device = Yes
[Ports]
FILE: яНГДЮЕР ТЮИК МЮ ДХЯЙЕ (Write Type)
COM1: оНЯКЕДНБЮРЕКЭМШИ ОНПР (Write Type)
COM2: оНЯКЕДНБЮРЕКЭМШИ ОНПР (Write Type)
COM3: Lucent Win Modem (Write Type)
[Network]
Network present = Yes
IP Addres = 81.***.***.***
IP Host Name = FoX
Net User Name = 1
User Domain =
Logon Server =
[Printers]
Printer is not found
[connections] ( это от Windows Commander )
default=rally.h15.ru
2=slutberries.com
3=t1.astral.com.ru
4=sod.basdesign.ru
6=mlmoney.h15.ru
7=moneycap.h15.ru
8=cap.hut1.ru
9=moneycrack.h15.ru
10=rally.h15.ru
[default]
pasvmode=0
[slutberries.com]
host=ftp.slutberries.com
username=forum
password=*******
pasvmode=0
[t1.astral.com.ru]
host=ftp.masterhost.ru
username=u18976_2
password=*********
pasvmode=0
[sod.basdesign.ru]
host=ftp.grosha.majordomo.ru
username=basdesign.ru
password=*******
pasvmode=0
[mlmoney.h15.ru]
host=ftp.h15.ru
username=mlmoney5
password=******
directory=http://mlmoney.h15.ru
pasvmode=0
[moneycap.h15.ru]
host=ftp.h15.ru
username=moneyc15
password=******
pasvmode=0
directory=http://moneycap.h15.ru
и тд.
|
Берет много инфы и ворует pass Windows Commander
Потом создам icq кражу и pwl уже почти зделал...
Антивирусами не палиться!
Все! :) |
