MSFN Forum: How can I get a trojan? - MSFN Forum

Jump to content


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

How can I get a trojan? Rate Topic: -----

#1 User is offline   milan777 

  • Newbie
  • Group: Members
  • Posts: 19
  • Joined: 31-January 10

Posted 19 July 2010 - 10:55 AM

Maybe it sounds crazy, but I am experimenting with viruses on VMware virtual machine. I need some viruses to do that so I was searching on internet how to get trojan and I've found a video on youtube:link
There are a lots of malwares and he showed a malicious websites on this video. It's working on his computer, but on my these sites are broken.
I thought that they are broken by security updates on Windows so I tried it on Linux, but it's not working. That means that they are removed.

Does anybody know working links of trojans like this or malicious sites?


#2 User is offline   iamtheky 

  • Friend of MSFN
  • PipPipPipPipPip
  • Group: Members
  • Posts: 866
  • Joined: 11-November 08

Posted 19 July 2010 - 11:24 AM

http://www.damnvulnerablelinux.org/

#3 User is offline   Tripredacus 

  • K-Mart-ian Legend
  • Group: Super Moderator
  • Posts: 8,665
  • Joined: 28-April 06
  • OS:Server 2012
  • Country: Country Flag

Posted 19 July 2010 - 11:49 AM

So you WANT to get a virus? Seems weird...

#4 User is online   -X- 

  • Member
  • Group: Patrons
  • Posts: 2,046
  • Joined: 08-January 04
  • OS:XP Pro x86
  • Country: Country Flag

Posted 19 July 2010 - 12:44 PM

Not weird. It's good to learn. Makes you safer.

I've too have tried but had little luck in finding exploits where the URLs are still functioning.

#5 User is offline   milan777 

  • Newbie
  • Group: Members
  • Posts: 19
  • Joined: 31-January 10

Posted 20 July 2010 - 03:10 AM

View Post-X-, on 19 July 2010 - 12:44 PM, said:

Not weird. It's good to learn. Makes you safer.

I've too have tried but had little luck in finding exploits where the URLs are still functioning.


So can you tell me that working URLs.

#6 User is online   -X- 

  • Member
  • Group: Patrons
  • Posts: 2,046
  • Joined: 08-January 04
  • OS:XP Pro x86
  • Country: Country Flag

Posted 20 July 2010 - 03:44 AM

Don't know of any.

#7 User is offline   milan777 

  • Newbie
  • Group: Members
  • Posts: 19
  • Joined: 31-January 10

Posted 20 July 2010 - 08:12 AM

View Post-X-, on 20 July 2010 - 03:44 AM, said:

Don't know of any.


I don't know how did roguewatch accessed all this URLs.

#8 User is offline   Tripredacus 

  • K-Mart-ian Legend
  • Group: Super Moderator
  • Posts: 8,665
  • Joined: 28-April 06
  • OS:Server 2012
  • Country: Country Flag

Posted 20 July 2010 - 09:24 AM

I've got a couple old ones hanging out on my email, like Sircam and Bagle, but they won't be any use unless you have an email setup that will let you receive them. I did a test to my work email, but our firewall stripped the virus out, and identified it to me as:

Quote

The attached message from was found to contain the virus "Worm.Bagle.BB".


#9 User is offline   VideoRipper 

  • CSI Eastwood City
  • PipPipPip
  • Group: Members
  • Posts: 329
  • Joined: 11-February 10
  • OS:none specified
  • Country: Country Flag

Posted 20 July 2010 - 09:32 AM

From experience I know it's best to visit some vague websites in the .ru, .cc and .ws TLD's :lol:

Another tip: Google for phrases like "Crack", "Hack" and "Keygen" and follow the sites
marked with "This website can be hazardous to your computer" ;)

#10 User is offline   milan777 

  • Newbie
  • Group: Members
  • Posts: 19
  • Joined: 31-January 10

Posted 22 July 2010 - 08:57 AM

How can I make google to show me only sites that can harm my computer?
I tried advanced search, but I didn't find anything.

#11 User is offline   VideoRipper 

  • CSI Eastwood City
  • PipPipPip
  • Group: Members
  • Posts: 329
  • Joined: 11-February 10
  • OS:none specified
  • Country: Country Flag

Posted 22 July 2010 - 06:37 PM

This is for your trojan/virus/spyware adventure I presume? :rolleyes:
(You should actually just continue in the thread you already started about
this when this is the case)


Google doesn't offer this "Service" (to my knowledge), but I guess
you'll get more "Lucky" if you switch off "SafeSearch".

Other than that, you can only search for "Questionable" content
like "Warez", "Keygens", "(Child) pr0n" and such.
Most of these sites marked are on .ru, .ws and .cn TLD's.

To be honest: I've just tried to search for "Warez" myself on
servers located in China and while I had about 81.000.000 hits,
I didn't see the warnings anymore :unsure:
Maybe they've switched them off or just reject them all now?

Greetz,

Peter.

#12 User is offline   dencorso 

  • Adiuvat plus qui nihil obstat
  • Group: Super Moderator
  • Posts: 4,860
  • Joined: 07-April 07
  • OS:98SE
  • Country: Country Flag

Posted 22 July 2010 - 09:25 PM

View PostVideoRipper, on 22 July 2010 - 06:37 PM, said:

This is for your trojan/virus/spyware adventure I presume? :rolleyes:
(You should actually just continue in the thread you already started about
this when this is the case)

Yes. That's what one should do.
Threads merged. Resulting thread moved. :yes:
@milan777: do *not* do that again! Posted Image
Consider yourself warned.

#13 User is offline   Tarun 

  • Area 5 Investigator
  • Group: Super Moderator
  • Posts: 3,080
  • Joined: 27-January 04
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 23 July 2010 - 05:38 PM

Surf all the websites you would typically avoid.

Also look at this topic: http://www.msfn.org/...g-secondary-pc/

#14 User is offline   Tripredacus 

  • K-Mart-ian Legend
  • Group: Super Moderator
  • Posts: 8,665
  • Joined: 28-April 06
  • OS:Server 2012
  • Country: Country Flag

Posted 26 July 2010 - 09:37 AM

Actually, here is a sure-fire way to get a trojan.

You need: a computer with a NIC and NO anti-virus installed (or disabled). Then you connect it directly to the internet and TURN OFF the Windows Firewall. Then just go to a website, although you probably will get something withing 5 seconds if you are lucky.

Also you can open Outlook Express and add an account into it. A lot of viruses (botnets) like to send emails through Outlook Express. You can STOP your PC from actually sending out said emails by setting the SMTP server to be an invalid address, so then the spam emails will just sit in your Outbox folder.

#15 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 11,208
  • Joined: 09-September 01
  • OS:Windows RT
  • Country: Country Flag

Posted 26 July 2010 - 09:42 AM

Seconded - if this is an XP machine, just install it (preferably SP1 or RTM, as they're more vulnerable out of the box) and attach it to the internet with no protection (also second settup up a bogus mail account). Especially if you're on a shared broadband network like cable, your machine will get dirty, and quickly.

#16 User is offline   VideoRipper 

  • CSI Eastwood City
  • PipPipPip
  • Group: Members
  • Posts: 329
  • Joined: 11-February 10
  • OS:none specified
  • Country: Country Flag

Posted 26 July 2010 - 12:18 PM

Not thirded :whistle:

Although I can't tell the risk when using XP SP1 (since I'm using SP3), my system
isn't running any virus-scanner and has it's firewall turned off. :angel
And overall I "Only" get infected 3 or 4 times a year (which I find acceptable for
a system that isn't waisting CPU-cycles on a resourcehungry scanner).

Being behind a router (which semi-doubles as a firewall... sort of...) I guess my
chances of getting infected are reduced dramatically, but the infections I do get
are being brought in by bugs/flaws/undocumented-features in IE and not at socket-
layer level (so badware is asked in rather than forced in). :unsure:

I don't use Outlook Express, so I can't comment on that... :no:

However, I don't recommend this way of "Having sex with the internet, without any
contraceptive"
if you don't know exactly what processes are supposed to be running.
I am prepared to take this risk on my faily old system and I'm not advising others
to do the same (unless they like to live adventurous) ;)

Apart from that all: make sure you always install the latest patches and updates
(Unless you're a guy like Milan and wants to get infected, of course). :rolleyes:

Greetz,

Peter.

#17 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 11,208
  • Joined: 09-September 01
  • OS:Windows RT
  • Country: Country Flag

Posted 26 July 2010 - 01:45 PM

Being behind a router, and not directly connected, *does* indeed increase the risk of infection, BY FAR. If you're trying to get infected, then this would most definitely be a bad idea, hence why the suggestion was to use no firewall, no router, and connect an XP RTM or SP1 box directly to the internet. That'll get you infected, probably within a few minutes, with all kinds of nastiness.

#18 User is offline   dencorso 

  • Adiuvat plus qui nihil obstat
  • Group: Super Moderator
  • Posts: 4,860
  • Joined: 07-April 07
  • OS:98SE
  • Country: Country Flag

Posted 26 July 2010 - 01:50 PM

Posted Image You surely meant to say:

View Postcluberti, on 26 July 2010 - 01:45 PM, said:

Being behind a router, and not directly connected, *does* indeed decrease the risk of infection, BY FAR.


#19 User is offline   VideoRipper 

  • CSI Eastwood City
  • PipPipPip
  • Group: Members
  • Posts: 329
  • Joined: 11-February 10
  • OS:none specified
  • Country: Country Flag

Posted 26 July 2010 - 02:55 PM

View Postdencorso, on 26 July 2010 - 01:50 PM, said:

You surely meant to say:

Hehehehe, I think you might be right ;)
And you're right as well Cluberti, I must have read over the "Direct connect to inet"-phrase :blushing:

Of course, you always have the chance that your ISP will filter out most
nasties coming in/out, so keep that in mind as well. :unsure:

#20 User is offline   cluberti 

  • Gustatus similis pullus
  • Group: Supervisor
  • Posts: 11,208
  • Joined: 09-September 01
  • OS:Windows RT
  • Country: Country Flag

Posted 26 July 2010 - 05:44 PM

View Postdencorso, on 26 July 2010 - 01:50 PM, said:

Posted Image You surely meant to say:

View Postcluberti, on 26 July 2010 - 01:45 PM, said:

Being behind a router, and not directly connected, *does* indeed decrease the risk of infection, BY FAR.
Doh! Oh well, can't always type what my mind is thinking :).


View PostVideoRipper, on 26 July 2010 - 02:55 PM, said:

Of course, you always have the chance that your ISP will filter out most nasties coming in/out, so keep that in mind as well. :unsure:
True, although I'm pretty sure this user's ISP is not one of those.

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

2 User(s) are reading this topic
0 members, 2 guests, 0 anonymous users



All trademarks mentioned on this page are the property of their respective owners
Copyright © 2001 - 2013 msfn.org
Privacy Policy