From the doc: 'Why his name is Acid koR? Well, because i learned a lot from the Acid Shivers Source code and with it, i wrote my own, better (you can say it so: several new functions added, like transfer files, msgboxes, replayable msgboxes etc.) than Acid Shivers. And it won't be caught nor from any AV, nor from any Anti-Trojan (like The Cleaner).' from the doc: ' Well, here it is at last, Acid koR Why his name is Acid koR? Well, because i learned a lot from the Acid Shivers Source code and with it, i wrote my own, better (you can say it so: several new functions added, like transfer files, msgboxes, replayable msgboxes etc.) than Acid Shivers. And it won't be caught nor from any AV, nor from any Anti-Trojan (like The Cleaner).Sorry guys, i didnt make it, to let it run on a negativ port. The port is 20002. To be used with TelNet. When you want transfer files, youll need the File GUI included in the package! Im too lazy to write help here, so open AcidkoR, connect with loopback to it, and write "HELP" if you want to know anything and you have a victim. Use AsPack to compress the AcidkoR server. It isnt good code :( Well, im modifiing it, and i work hardly on a ICQ Notifification (dont included in the AcidkoR). Bye, koR4.4.2kSince i did not resolve the problems with how to rename the files, i decided that when you send a file to the victim, it will be saved in windowsfile64.exe I decided .exe, because normally you dont send other files (think so) The server size is now ~75 kb. I used the new AsPack to reduce it. Added a new function, to copy: msvbvm60.dll mswinsck.ocx comctl32.ocx comdlg32.ocx automatticaly in the winsystem dir. (the runtimes the prog needs) Ideal for a .zip file The program is still a little buggy, send any info to: [email protected] Commans:DIR - List Contents of Current DirectoryLS - List Contents of Current DirectoryCD - Change To Specified Directory/DriveCLS - Clear ScreenKILL - Kill Process by PID (Shown in PS)PS - Shows Running ProcessesDEL - Deletes Specified FilesPORT <#> - Change Port Acid koR Listens on (Until Next Reboot)DESK - Change to default Windows Desktop folderRECENT - Change to Windows Recent folderWSFTP - Change to default WS FTP folderVERSION - Show Version Number of Acid koRDRIVES - Show physical, RAM, CD-ROM, and Network drivesBOUNCE - Relay connection to host on port, Control + C to abort.S - Sendkeys to active windowMACADDR - Show ethernet stats and physical addressNAME - Rename the users computerENV - Shows DOS Environment variablesBEEP <#> - Beeps the specified number of timesCDROM - Type 'CDROM' for more informationDIE - Terminate Acid koRLABEL - Rename a specified disk driveSHUTDOWN - Type 'Shutdown' for more informationDRIVE - Retrives information on specified driveKS - Disconnect a session by socket index show in 'STATUS'TIME - Shows users current system timeDATE - Shows users current system dateINFO - Shows some general system information about host and userSTATUS - Show the state of all sockets used since last rebootCAT - Retrieve specified fileGET - Retrieve specified fileBCAT - Retrieve specified file in hex formBGET - Retrieve specified file in hex formCMD - Run the specified shell commandSH - Run the specified command and display results (may lock up).MKDIR - Make a new directoryRMDIR - Remove a directory and all files and subdirectories inside.CP - copy file1 to file2COPY - copy file1 to file2HIDE - Hide a task from control + alt + delete.SHOW - Show a task from control + alt + delete.RMSG - inputbox (you will receive the reply)MSG - Message BoxSend a file through the File GUI - SEND c:pathoffile.exeListens for the File GUI - LISTENRECV - You cannot receive through telnet. go into the file GUI
Backdoor.AcidShiver.kor
Windowsmsgsvr64.exe