System33r Socks4 0.0.3
(Backdoor.System33.b)

by System33r (k0nsl)

Written in C & Visual Basic

Released in march 2004

more versions


Features:
- Subseven CGI Notification
- Dynamic DLL Injection
- Small ASM Loader
- C Stub
- Some Settings are Encrypted
- Server Builder is Compiled in Visual Basic 5
- Small Server Size. 9kb Compressed (UPX: latest unstable)

  KAV doesn't show the server as being packed when packing it with these parameters:
  %upxdir%\upx --best --all-methods --all-filters %EXE%

This version (v0.0.3) is STABLE. All features in the Editor is editable and it works 100% this far.
Thanks a bunch to r3l4x for making the Editor! The server editor will be given new GUI at the next release,
but right now i am focusing on improving the socks4 server.

The Server Builder (editor) has no error checking whatsoever, use common sense.

When i did beta testing on unsuspecting victims KAV tagged it as TrojanNotifier Win32 Haxor
hehe but now they gave it this lame tag indicating that it also was made in Visual Basic
which is very misleading.

In the next release i might include Static IP Notification, and probably more stuff!

ANY bugs found can be sent to k0nsl@msn so i can mend them for future release!

Use Advanced Process Manipulation by DiamondCS (http://diamondcs.au.com) to remove the DLL,
or boot into safemode and remove it that way.

SS4 version 0.0.3

Changes:

Cleanup in DLL Loader (Planning complete rewrite in C++)
Added more Debug messages in the Socks DLL
Sends only CGI Notification if User is Online

k0nsl


Server:
size: 19.456 bytes

MegaSecurity