Written in Delphi

Made in Germany

more versions

Buschtrommel can disable:

Sphinx

Conseal

Lockdown 2k

McAfee

AVP

*******************
*Buschtrommel 1.22*
*******************
(pre-release)

This version is just debuged and optimized...
so, there r only 2 new AV tools in the
processkill-list and update feature

Features in this version
~~~~~~~~~~~~~~~~~~~~~~~~

 - FTP (with Filemanager)
 - ICQ Notify
 - Application Redirect
 - Port Redirect
 - Update from local file 
 - some IIS stuff
 -   "  NT  Stuff
 - IE Favorites
 - System Information
 - Fake MSGS
 - Manipulation of AV/FW/IDS Settings
 - ProcessKill
 - RAS,ScreenSaver,HalfLife,AIM,ICQ Passwords
 - Read Clipboard
 - R-DoS (IGMP)
 - Bash-Scripting

Well, thats all for this version
 i hope u enjoy..


 Natok


Server:
dropped file:
C:\WINDOWS\system32\system.exe 

size: 229 KB

port: 31745 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices