Evil VNC 1.0
(Backdoor.VBS.Sheller.b)

by Bubzuru

Released in February 2007

more versions


Evil VNC is a powerful, easy to use and free software that can display the screen of another computer (via internet or network) on your own screen.
The program allows you to use your mouse and keyboard to control the other PC remotely.
It means that you can work on a remote computer, as if you were sitting in front of it, right from your current location.

Key Features:

File transfer ,
Video driver ,
Text chat ,
Viewer Toolbar , 
Java Viewer with File Transfer , as well as Auto scaling and Server Side Scaling, Multiple-Monitors-support,Repeater/Proxy-support, Auto reconnection,
good performances and tons of other functionalities.

Evil VNC runs under Windows  operating systems (95, 98, Me, NT4, 2000, XP, 2003...).
Its embedded Java Viewer allows you to connect (and make File transfers) from a simple Web Browser on any Operating system supporting Java �  (Linux, Mac OS...) to an Evil VNC server.

Evil VNC server features a JavaViewer Applet that allows for remote control without a any viewer application installed !
Supports File transfer (same kind of GUI than in win32 Viewer, but simpler). 
It makes possible files transfers from virtually any OS supporting Java (Linux, Mac OS...) to Evil VNC servers running under Windows �.
Since this requires the JavaViewer to access the viewing machine's hard drive, you are prompted fo



Server
Dropped File:
c:\WINDOWS\Shell_Update\boot.vbs            Size: 758 bytes 
c:\WINDOWS\Shell_Update\install.reg         Size: 10,534 bytes 
c:\WINDOWS\Shell_Update\install.vbs         Size: 1,287 bytes 
c:\WINDOWS\Shell_Update\Shell_Update.exe    Size: 2,297,856 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Shell_Update.exe "(Default)"
Data: C:\WINDOWS\Shell_Update\Shell_Update.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Win32 Shell Update"
Data: C:\WINDOWS\Shell_Update\boot.vbs 
		
Port: 5800, 5900 TCP



Tested on Windows XP
September 10, 2008

MegaSecurity