Irc Bot worms still in wild.!

(7:23:00 PM) *** May God rest your soul in peace Jahanzeb ***: dada do you know VB
(7:23:08 PM) Azeem: nops
(7:23:09 PM) Azeem: c#
(7:23:13 PM) Azeem: vb is lame
(7:23:16 PM) *** May God rest your soul in peace Jahanzeb ***: hmmm
(7:23:33 PM) Azeem: khair
(7:23:39 PM) Azeem: masla batain
(7:23:42 PM) Azeem: shayad i can help
(7:23:50 PM) *** May God rest your soul in peace Jahanzeb ***: I have an exploit
(7:23:55 PM) *** May God rest your soul in peace Jahanzeb ***: but I dot know how it works
(7:24:12 PM) Azeem: which one?
(7:24:15 PM) *** May God rest your soul in peace Jahanzeb *** is offering to send file 1.rar
(7:24:19 PM) *** May God rest your soul in peace Jahanzeb ***: check this out
(7:24:28 PM) Azeem: link bata dain
(7:24:30 PM) Azeem: :\
(7:24:35 PM) Azeem: yahan say nahi hoga
(7:24:36 PM) *** May God rest your soul in peace Jahanzeb ***: kaunsa link
(7:24:38 PM) *** May God rest your soul in peace Jahanzeb *** just sent you a Nudge!
(7:24:40 PM) Azeem: is ka link
(7:24:45 PM) Azeem: kahan say download kia hai
(7:24:48 PM) *** May God rest your soul in peace Jahanzeb ***: hmm email kardon?
(7:24:53 PM) Azeem: nahi hoga
(7:24:57 PM) Azeem: virus detect hojayega
(7:25:02 PM) *** May God rest your soul in peace Jahanzeb ***: achaa
(7:25:06 PM) *** May God rest your soul in peace Jahanzeb ***: I got it from a friend through MSN
(7:25:15 PM) Azeem: achan
(7:25:16 PM) Azeem: send it
(7:25:25 PM) *** May God rest your soul in peace Jahanzeb ***: ok let me email it to you
(7:25:30 PM) Azeem: nahi
(7:25:32 PM) Azeem: yaheen
(7:25:34 PM) Azeem: say send
(7:25:41 PM) Azeem: disabled anti virii
(7:25:50 PM) *** May God rest your soul in peace Jahanzeb *** is offering to send file 1.rar
(7:25:52 PM) *** May God rest your soul in peace Jahanzeb ***: ok
(7:26:14 PM) Starting transfer of 1.rar from *** May God rest your soul in peace Jahanzeb ***
(7:26:22 PM) Azeem: 1.79
(7:26:23 PM) Azeem: :\
(7:26:29 PM) Azeem: itna bara code to kisi ka nahi hota
(7:26:29 PM) Azeem: lol
(7:26:36 PM) *** May God rest your soul in peace Jahanzeb ***: LOL
(7:26:42 PM) *** May God rest your soul in peace Jahanzeb ***: dada it’s c++
(7:26:43 PM) *** May God rest your soul in peace Jahanzeb ***: and VB
(7:26:49 PM) *** May God rest your soul in peace Jahanzeb ***: its fulltime hard core shit
(7:26:49 PM) *** May God rest your soul in peace Jahanzeb ***: 😛
(7:26:55 PM) Azeem: cant be both
(7:27:04 PM) *** May God rest your soul in peace Jahanzeb ***: hmm
(7:27:15 PM) *** May God rest your soul in peace Jahanzeb ***: mujhey tu samaj nahi a raha
(7:27:19 PM) *** May God rest your soul in peace Jahanzeb ***: aap baray loag ho
(7:27:28 PM) *** May God rest your soul in peace Jahanzeb ***: apko samaj ajayega
(7:27:50 PM) Azeem: lol
(7:35:25 PM) Azeem: aaabay yaaar
(7:35:27 PM) Azeem: itna time
(7:35:30 PM) Azeem: kyon lay raha hai yeh
(7:35:40 PM) *** May God rest your soul in peace Jahanzeb ***: lol
(7:35:52 PM) *** May God rest your soul in peace Jahanzeb ***: dada C++ laita hai itna time
(7:35:58 PM) *** May God rest your soul in peace Jahanzeb ***: 😛
(7:35:59 PM) Azeem: lol
(7:36:02 PM) Azeem: aw achann
(7:36:18 PM) *** May God rest your soul in peace Jahanzeb ***: aba is calling me
(7:36:24 PM) *** May God rest your soul in peace Jahanzeb ***: i will be back bro
(7:36:28 PM) Azeem: k
(7:36:29 PM) *** May God rest your soul in peace Jahanzeb ***: jab tuk yeh download hojaye
(7:40:13 PM) Transfer of file 1.rar complete
(8:03:38 PM) *** May God rest your soul in peace Jahanzeb *** has signed off.

Ok.. now guess what the code was in C++ and What does it do ??!!

The opening comments of it showed what it can do.

/*| _ \ \ \/ / / |___ \ / _ \ TesT | \/ |/ _ \| _ \ \ \ / /___ \
| |_) | \ /_____| | __) | | | |_____| |\/| | | | | | | |____\ \ / / __) |
| _ < / \_____| |/ __/| |_| |_____| | | | |_| | |_| |_____\ V / / __/
|_| \_\/_/\_\ BuZ|_|_____|\___/ |_| |_|\___/|____/ BuZ \_/ |_____|
---------------------------------------------------------------------------
MYSQL-MSSQL-NTPASS-SYM06010-MS04007-MS06040-VNCBRUTE-PSTORE-FIREFOX-SP2PATCH
---------------------------------------------------------------------------
Greets To: THE REAL CODERS & The Ryan1918 Crew !!
*/

It exploits MYSQL-MSSQL-NTPASS-SYM06010-MS04007-MS06040-VNCBRUTE-PSTORE-FIREFOX-SP2PATCH

and spreads. The .rar contains dsp project file as well.. cool isnt it. :\

In pakistan it still works because every one have a pirated version of symantec.

Advertisements

~ by Azeem on September 28, 2007.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: