Best Blackhat Forum

Instructions:

This bot is really simple to use. The only thing you need to know is that if you want to use proxies they must be paired with the accounts. You don't have to use proxies if you do want to, but its not gonna do much for voting up comments.

Load your accounts into the bot in any of the following formats...


This was created with UBot and due to the encryption AV's will show as a false positive.

Mediafire:



Virus total:

thanks. repped. is the "virus" in the VT a false positive because its a bot? just want to make sure its safe.

This is old and doesnt work.....

I also have plenty of UBOT programs that dont give any false positives, and for such a basic program theres no need for any false positives to be in it.

This has a nasty trojan, "Trojan.DownLoader10.14504"

Far from a false positive. DO NOT USE!

Trojan.DownLoader10.14504:

MALICIOUS FUNCTIONS:

To bypass firewall, removes or modifies the following registry keys:

• [\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardPr​ofile\AuthorizedApplications\List] '%APPDATA%\Mom.exe' = '%APPDATA%\Mom.exe:*:Enabled:Mom.exe'

Creates and executes the following:

• '%APPDATA%\Mom.exe'

Executes the following:

• '\netsh.exe' firewall add allowedprogram "%APPDATA%\Mom.exe" "Mom.exe" ENABLE

NETWORK ACTIVITY:

Connects to:

• 'za#####an.no-ip.info':1177

UDP:

• DNS ASK za#####an.no-ip.info

Modifies the following registry keys:

• [\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'dbef48c3ca5c5a9f2b7a7c3a0d6227a4' = '"%APPDATA%\Mom.exe" ..'
• [\Software\Microsoft\Windows\CurrentVersion\Run] 'dbef48c3ca5c5a9f2b7a7c3a0d6227a4' = '"%APPDATA%\Mom.exe" ..'

Creates or modifies the following files:

• %HOMEPATH%\Start Menu\Programs\Startup\dbef48c3ca5c5a9f2b7a7c3a0d6227a4.exe

Creates the following files on removable media:

• :\dbef48c3ca5c5a9f2b7a7c3a0d6227a4.exe

SOURCE: http://www.drwebhk.com/en/virus_techinfo....3383.html

MALICIOUS FILE!

thanks for the warning mike. will be removing my mirror and not install it.

Thanks for the warning dude!

Thanks for the warning !!

thanks for the warning bro!