Kronical Fire
(Not detected by KAV on March 02, 2008)

by Ghost & flamz

Written in Visual Basic

Released in January 2004

more versions


************************************************************
************************Kronical Fire***********************
************************************************************

Kronical Fire Auto Transfer Service!

*KFaT Is A Auto Transfer Program When You Send The User a file the program accepts it for u!
*KFat Also Deletes All Known AntiVirus And Firewall Software!
*Over 20 AntiVirus And FireWalls Stored!

Including:
(AntiVirus)
"Norton AntiVirus"
"Mcafee AntiVirus"
"AvG AntiVirus"
"PC-cillin AntiVirus"
"LANDesk"
"ANYWHERE"
"Tauscan"
and more....

(FireWalls)
"Norton Personal FireWall"
"PC-cillin FireWall" 
"Mcafee FireWall"
"Black ICE"
"ZoneAlarm"
"OutPost"
and more....



*Rename KFaT To Something like pic1.exe

*Send Your Victim KFaT!

*Type This in to your Msn Messenger Convo Window ...:S... then press enter if the victim has
opened KFaT It Will display and successfully opened message!

*Once You Have Sucessfully Infected The User With KFaT Send Them KF-Trojan!

*Type /OPENFILE once the file has been sent!

*Open The Commander and Scan Victim! NOW YOU CAN HAVE FUN!

(If Auto Transfer Is Not Enabled But User Is Infected Wit KFaT,
Manually Enable it by Typing /TRANSFER")

-----------------------------------------------------------------------


Kronical Fire - Trojan.exe

This is the file which you send to your victim
Once your Victim has opened this file, go into the Client
and Scan them, this server cannot be deleted unless the user 
reformat's their Computer. SilverSpark.com, the host or anybody
/anything related to SilverSpark.com cannot take responsibility
for anything that you foolishly do with this program, it is very powerful
and can destroy important work which we cannot also take responsibily for.

------------------------------------------------------------------------

Kronical Fire - Commander.exe

This is the file which you control your victim with, this does not harm your Computer
but many Anti-Virus Programs such as Norton or McAfee may say that this file is a virus
/trojan but it is not and it is safe to open. 

------------------------------------------------------------------------

ghost


Server:
dropped files:
c:\WINDOWS\sislogere.exe                                  Size: 290,816 bytes 
c:\WINDOWS\Connection Wizard\Kronical Fire [Trojan].exe   Size: 290,816 bytes 
c:\WINDOWS\Help\Kronical Fire [Trojan].exe                Size: 290,816 bytes 
c:\WINDOWS\Registration\Kronical Fire [Trojan].exe        Size: 290,816 bytes 
c:\WINDOWS\Resources\Kronical Fire [Trojan].exe           Size: 290,816 bytes 
c:\WINDOWS\security\Kronical Fire [Trojan].exe            Size: 290,816 bytes 
c:\WINDOWS\system\Kronical Fire [Trojan].exe              Size: 290,816 bytes 
c:\WINDOWS\system\scandsisk.exe                           Size: 290,816 bytes 
c:\WINDOWS\Windows Update\Kronical Fire [Trojan].exe      Size: 290,816 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Kronical Fire [Trojan]"

changed:
c:\AUTOEXEC.BAT
c:\CONFIG.SYS
c:\WINDOWS\win.ini 


tested on Windows XP
July 05, 2005

MegaSecurity