PrivatePort 001a
(Backdoor.Izeburn for client & server)
(Trojan.PSW.TFC)
(TrojanDropper.Win32.RSP.a)

by Izeburn

Written in Visual Basic

Released in July 2000


server with animation


[Commands]
the  following  are the commands you must use on the client

userinput		: prompts the remote box for inputs i.e. passwords, email, etc.....
		   [syntax : userinput "put here the text that to be shown on remote box"
view		: view files on remote box, must also specify the full path
		   [syntax : view full:\path\here.txt] 				
webpage		: sends your victim to the website you specified
		   [syntax : webpage http://www.the site where you want him to go.com ]
*startapp		: starts an application or program on remote box 
		   [syntax : startapp c:\windows\notepad.exe, must also specify the full path]
msgbox		: shows a message box on remote computer
                                           [syntax : msgbox "your message goes here, but don't include the qoutes"
systemtime	: tells you the time on remote box
showimage	: lets you show an image to remote box  
hangup		: hangup the remote box, ( crashes the vitims box)
beepdead		: beeping nonstop, useful to annoy users on remote box
beep		: beep, that's just it... it beeps the pc speaker on remote box
taskhide		: hides  the taskbar, you know that cute little thingy on your desktop, with icons and stuff
taskshow		: undo the taskhide 
info		: get info on remote box
lockscreen	: locks the screen
unlockscreen	: reverses the action of lockscreen
bview		: you figure this one out!!!!!

[Info on Trojan Server]
	A. the trojan server has an icon like those found on shockwave icons, 
	     and it also shows a shockwave animation wheb activated so that your 
	     victim won't be alarmed instead they'll be amused with the animation.

	B. file is 72 kb (73,728 bytes) server only..without Trojan Dropper.

	C. file is 275 kb (281,598 bytes) Server with Shockwave animation and Password Ripper.
	     Executes the trojan server, password ripper both are hidden from user
                         only the shockwave animation is shown.  

	D. trojan (Client/Server) is UNDETECTABLE by ALL current  AV softwarez..... and if you 
                         want it to remain like that.... never ever forward this trojan to AV soft providers.

	E. more servers are available, and all are UNDETECTABLE !!! (all are Trojan server Dropper). 

Izeburn


Server:
size: 73.728 bytes

port: 7778 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Uninstaller" 

added:
c:\WINDOWS\PrivatePort v.001a 

MegaSecurity