[7H3 3XP3R7]

Hi Guys

VanToM W0rm 1.1 , coded in Vb.net , stub depend on .Net 2.0

Stub is not Clean in the next version 1.2 soon will be FUD

Spread :

USB
RAR
SKYPE
Drives

The w0rm is spread in all hard drives in the system
You will find the name of the Firefox.exe

[img]http://up.dev-point.com/uploads/a7d09aa648ae8.png[/img]
[img]http://up.dev-point.com/uploads/9ac01f5fce7e3.png[/img]
[img]http://up.dev-point.com/uploads/5b09f19d7ff89.png[/img]
[img]http://up.dev-point.com/uploads/8424e5a3a2e81.png[/img]
[img]http://up.dev-point.com/uploads/113560e6f87e7.png[/img]

downloaded more than 3000 Times , i just Uploaded it again because the Real Upload link was in arabic 🤝

Vantom W0rm v1.1

i no have time for scanning it and post it here , some one scan it then post the scan result here

Thanks...

i just wanted to Add this

i Sell the Full Source for 150$ if you Like it Please PM me

[DarK-D3v!L]

Looks really nice with a lot of good features this is a good job :)
I will test it as soon for sure !
Thanks a lot for sharing that w0rm :)

best regards

[7H3 3XP3R7]

thanks dear friend give it a try ..

[7H3 3XP3R7]

i think that the link is dead man.. (35 chars op)

its work man no have problem :) problem from you

[d122002]

I'll try it out and see how it works. Thank you for sharing OP!

[7H3 3XP3R7]

thanks man hope you like it :D , there will be new update

[7H3 3XP3R7]

If I have this in a USB Will it auto execute or do I have to open the folder and execute it? 🤝

it will make short cut like other files in the USB

like Bind it self to them 😏😏

[Homothe]

Wait, is this a RAT or a worm (Spreader)?
The pictures that I see showing me that this is a RAT.

Could you explain a bit more about this?
Is it a worm (You put your download link to your infected server and it will execute when you click it)?

[7H3 3XP3R7]

You clearly have no idea what you are talking about

This is a worm Hence the name - VanToM W0rm -

Thanks for your reply to him 😏😏😏

---

Wait, is this a RAT or a worm (Spreader)?
The pictures that I see showing me that this is a RAT.

Could you explain a bit more about this?
Is it a worm (You put your download link to your infected server and it will execute when you click it)?

its w0rm but have Rat features too 😶

Is it a worm (You put your download link to your infected server and it will execute when you click it)? : -

no just like rats any file you need download it then double click on it

🤝

[7H3 3XP3R7]

Spread Skype not have options. Why ?

No need option built-in with stub 🤝🤝

[7H3 3XP3R7]

Infected myself and a few slaves.
I'm not seeing anything pop up in the Worm UI.
Edit: Double-checked IP and Ports. Working just fine.
I did crypt it, that may have corrupted it.
Edit 2: Created a new server file, didn't encrypt it, made IP local host. Still doesn't work.
Any explanation?

Edit 3: False alarm. I was using the same port I use for Dark Comet.
I don't know why I didn't think about that before.

Good job with the Worm btw. :>

1-try use the default Port
2-check the port in http://canyouseeme.org/ if open or not
3-dont use port , that you used it for another program
4-try Ccleaner & clean your PC

every thing should be fine

🤝🤝

[7H3 3XP3R7]

Well in a few days if the worm does it's job, and I see some new slaves;
I'll be sure to post back with my results.

Question, does it have it's own startup?

yes have own start up & stable

check the Install in application data

🤝

[PieWizidV2]

no time for scanning? sounds suspicous sniff.... probably a virus

[7H3 3XP3R7]

that scan report cant show its a virus or backdoo

all are dirt code known as virus or malware in real no have any effect on the PC

some of detected is show that the coder used some tools for protect the source so it say its virus

you can test under Vmware or sandibox

also see the connection when you run the Program

you will be sure there is no any out connection

[7H3 3XP3R7]

no time for scanning? sounds suspicous sniff.... probably a virus

before eating any shit , teach your self how to test a program when you afraid of it

that scan report cant show its a virus or backdoo

all are dirt code known as virus or malware in real no have any effect on the PC

some of detected is show that the coder used some tools for protect the source so it say its virus

you can test under Vmware or sandibox

also see the connection when you run the Program

you will be sure there is no any out connection