Kryptonic Ghost 2.0 mini
(Backdoor.Win32.Kryptonic.2m)

by FLAMMABLE

Written in Visual Basic

Released in October 2004

more versions


error box by Kryptonic Ghost

KRYPTONIC GHOST V2

Kryptonic Ghost - Mini is a small version of Kryptonic Ghost 2 which is compatible with MSN 6.X. The purpose of Kryptonic Ghost - Mini is simply to give a taster of the power of the full version. The full version is not currently being released as at the time of writing, MSN Messenger 7 is due out on November 11th and it will most likely have different programming material than MSN Messenger 6 and so it would be a waste of time and effort to complete the final version for MSN Messenger 6 and instead i will wait until MSN Messenger 7 comes out to make the final version.

NOTE: RENAME SENDER.EXE TO ANYTHING YOU WANT ASLONG AS IT ENDS IN .exe and send it to your victim. YOU SHOULD NOT! OPEN SENDER.EXE.

Krytonic Ghost - Mini works by you, the controller, editing your nickname to commands the server (file you send to unsuspecting victim) recognises.

You must first send the victim the 'Sender.exe' file, you can rename it if you please, when they have opened it they will go offline then go online, they will also most likely tell you that they have encountered an error in opening the program (There is a fake error to make them think there is a bug in the program, but it will still be open.)

Commands:
Make your nickname the following codes to control your friends computer / msn.

If a setting is in brackets e.g. (contactemail), replace (contactemail) with the contact you want to delete, add etc.. from the victims list.

CONTROL MSN COMMANDS:

983629492283(contactemail) - Deletes the contact from the victims list.
9378210839(contactemail)   - Adds the contact to the victims list.
8376(newnickname)          - Changes the victims nickname.
36732737                   - Signs the victim out of msn
828728929 		   - Makes the victim login multiple times
 
83782989 		- Changes the victims status to  online
72849283 		- CHanges the victims status to  be right back
97387628 		- Changes the victims status to  Busy
84827383 		- Changes the victims status to  On the phone
93284743 		- Changes the victims status to  Out to lunch
73872039 		- Changes the victims status to  Away
84739839 		- changes the victims status to  Invisible


CONTROL PC COMMANDS:
018473492               - Shuts down victims computer
6379202            	- Reboots victims computer
092834949       	- Shows clock on victims computer
2039572058385(text) 	- Set clipboard text
16568929 		- Starts blackout
19845984 		- Ends blackout
80726402 		- Hides taskbar
23526492 		- Shows taskbar
578374332       	- Hides start button
76576335234     	- Shows start button
287964209 		- Hides taskbar Icons
99298282 		- Shows taskbar Icons
90298329 		- Disables windows XP Cntl - Alt - Del
81238010 		- Enables windows xp Cntl - Alt - Del
583939834 		- Disables pre-windows XP Cntl - Alt - Del
692382 			- Enables pre-windows XP Cntl - Alt- Del
8276327 		- Opens / closes Cd tray x5
2354374 		- Opens Cd Tray
124314523 		- Closes Cd tray
27607420 		- Minimises all windows
749(message) 		- Creates a popup message with designated text provided
3646336(website) 	- Opens up the website provided
49409683 		- Creates loads of folders on their desktop
6346368654 		- Ends server until they restart their PC
415637 			- Deletes the server of their computer

FLAMMABLE


dropped file:
c:\WINDOWS\svchost.exe
size: 155.648 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MSMSGS"
data: "C:\Program Files\Messenger\msmsgs.exe" /background 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
data: Explorer.exe svchost.exe 

tested on Windows XP

MegaSecurity