Blue Eye BOT 2.0
(Backdoor.Win32.Agent.ds)

by b1ackh0le

Written in Microsoft Visual C++

Released in October 2004

more versions



			Blue Eye IRC Bot V 2.0
			---------------------------

Features
----------------

1)No Process Visible inject into explorer.exe and exiting the parent
2)Active Setup Startup
3)Custom packeting syn,udp,ping ddos
4)Sniffer for finding FTP,other botnets passwords
5)socks 4 Server
6) Protucted storage,cashed passwords


Commands

`hl password -- Login to bots
`lo - logout 
`who -will display the current loged users
`kall - kills all threads ,the syn or irc flood threads
`r -restart the bot
`c_qall -quit all irc clones
`s -status of bot
`t - Threds lists
`pass -display all passes including PS,cashed
`lgs -display the loged urls that r trying to hack our bots
`ni - network info ,ip and stuff
`si -system info os ,ie and other stuff
`s0ksstop -stop socks server
`s0ks port -start socks server
`j #chanel -will join the chanel in same server
`k threadno - kill that thred
`v - visits the url invisibliy
`mom - chaneg the mode
`syn  - send syn packet to that ip
`u - send udp packet
`pi -send ping packet
`emb -send email bomb
 
Useage , Open the editor create the bot exe 

b1ackh0le


Server:
dropped files:
c:\WINDOWS\system32\mscidaemon.com    size: 28.056 bytes 
c:\WINDOWS\system32\mscidaemon.dll    size: 20.992 bytes 
c:\WINDOWS\system32\mscidaemon.exe    size: 28.056 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{L9IW2QB23-CD-EDF-2-22d2-9CBD-00WSFS8AR6-9QER21QAJPM} "StubPath"
data: C:\WINDOWS\System32\mscidaemon.com 

tested on Windows XP

MegaSecurity