Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

upload a trojan to mydoom infected computer

 
   Security Forums (Home) -> General Discussions RSS
Next:  PUP.exe Trojan?  
Author Message
Jorge J. P?rez

External


Since: Jan 31, 2004
Posts: 1



(Msg. 1) Posted: Sat Jan 31, 2004 7:21 am
Post subject: upload a trojan to mydoom infected computer
Archived from groups: alt>comp>virus (more info?)

i have an old 486 infected pc connected to other computer and i'm
playing with mydoom.a in order to can upload a file by the backdoor
and execute it. But all the trojans i probe cant be uploaded, i think
by restrictions with the size of the file.

I use necat:

nc -vv -p 3127 192.168.1.2 < file.exe (file is 27Kb)
sent: 8808 recv:0 CONNRESET


so... which trojan can be uploaded to a infected machine? none? or
only one...


thanks in advance.

 >> Stay informed about: upload a trojan to mydoom infected computer 
Back to top
Login to vote
FromTheRafters

External


Since: Sep 19, 2003
Posts: 1207



(Msg. 2) Posted: Sat Jan 31, 2004 8:50 pm
Post subject: Re: upload a trojan to mydoom infected computer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Jorge J. P?rez" <jorgejesus.TakeThisOut@terra.es> wrote in message news:2d80a141.0401310721.6895dbed@posting.google.com...
> i have an old 486 infected pc connected to other computer and i'm
> playing with mydoom.a in order to can upload a file by the backdoor
> and execute it. But all the trojans i probe cant be uploaded, i think
> by restrictions with the size of the file.
>
> I use necat:
>
> nc -vv -p 3127 192.168.1.2 < file.exe (file is 27Kb)
> sent: 8808 recv:0 CONNRESET
>
>
> so... which trojan can be uploaded to a infected machine? none? or
> only one...

I'm pretty sure that the backdoor server is needed to facilitate
reciept from the client. You would probably need to craft TCP
packets that the server can recognize as client sent with the EXE
embedded.

 >> Stay informed about: upload a trojan to mydoom infected computer 
Back to top
Login to vote
stadie

External


Since: Feb 10, 2004
Posts: 1



(Msg. 3) Posted: Tue Feb 10, 2004 4:09 am
Post subject: Re: upload a trojan to mydoom infected computer [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

jorgejesus.RemoveThis@terra.es (Jorge J. P?rez) wrote
> i have an old 486 infected pc connected to other computer and i'm
> playing with mydoom.a in order to can upload a file by the backdoor
> and execute it.

> I use necat:
>
> nc -vv -p 3127 192.168.1.2 < file.exe (file is 27Kb)
> sent: 8808 recv:0 CONNRESET

Try
nc -l -p 3127 -o binary.log -v

on the other machine.
So you should be able to log the activity of mydoom.

Greetings
Stadie
 >> Stay informed about: upload a trojan to mydoom infected computer 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Explorer.exe infected with Trojan.Virtualroot - Well, here it goes: While configuring the routing and remote access on a Win2K server at home, I received a warning from Norton Antivirus Corporate edition about a file in C:\ called explorer.exe being infected with Trojan.Virtualroot. I disconnected..

"Portal of Doom Trojan Horse" on my computer? - Greetings, all. Hoping to get some help on this, been hard to find specific information on this. I have a home network connected to my cable modem, using a LinkSys Wireless-B Broadband Router. 2 wireless point connected to home computers, Xbox hardwired...

New Trojan? - Not sure what's up with my machine, but the spousal unit was on Ebay the other night and may have picked up something. I've noticed since then, when I've used Hotmail as well as our bank's website, the on-screen chars. and the typing lags behind...

trojan.svc.a - my avg anti virus resident sheild has come up with constant warnings 'backdoor trojan svc.a detectected' I can find no inf on this one-i ran avg it said it detected and healed but i went away for a while came back then it said same message. What is this....

PUP.exe Trojan? - I have been having some odd problems lately with my PC which seem to indicate a Trojan in onboard. On startup I get a 'new' .exe appearing in my C:\windows\system32 directory ervery time. It always has a different name (tblfiltu.exe, ssecd.exe,..
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]