Excalibur

Released 25 years, 7 months ago. April 1999

Copyright © MegaSecurity

By Matrim & Angel of Death


Excalibur
Informations
Author Matrim & Angel of Death
Family Excalibur
Category Remote Access
Version Excalibur
Released Date Apr 1999, 25 years, 7 months ago.
Language Visual Basic
Additional Information
Server:
c:\windows\system\sys23.dll 

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

Author Information / Description
------------------
- Excalibur      -
------------------

ToC
1 - Disclamer
2 - News
3 - Features
 3.1 - Installer
 3.2 - Main Functions
 3.3 - DoS Functions
4 - Version Updates
5 - Contacting

====== 1 ======
* Disclamer   *
===============
Don't kill anyone with this program.
Its not our fault if you get in trouble for using this program.

====== 2 ======
* News        *
===============

v1.0 Alpha

NEW RELEASE!!!  A few new features and massive stability. 
Also, we have an anti-virus to remove it from your computer if you
accidentally infect yourself.  Read below!

v0.1 Alpha

Well, Matrim [thats me] and AoD [Angel of Death] started a group together,
and this is our first release. 
It has all the features that I've always wanted to see in a backdoor program. 
As we go, we'll be adding on new features and making the program run more quickly and reliably.
We don't have a group name, but that is just fluff, we want to churn out some
quality programs before we worry about becoming 31337 proggie makers or anything.

We're currently setting up a website for this program and any that we will release in the future. 
Next release [most likely] will have our URL.

====== 3 ======
* Features    *
===============

Excalibur is a new backdoor virus program with several advantages over the other backdoor programs available.

1: It is not yet detected by virusscanners
2: It automatically hides itself very well from any type of detection
3: It has built-in DoS capibilities, such as Ping Bomb [think of pingbomb from 10 computers!] or Nuking.
4: It uses a little-known way of running itself on bootup, making it difficult to detect
5: Much more!

 --- 3.1 ---
 *Installer*
 -----------

After running install.exe, there should be a zip file in the directory with the client.

 1. Download any program [or use one that you have handy]. 
    Make sure that it has an install program built in.
    Then, rename the install program
    [most likely install.exe or setup.exe] to "install.___" [no quotes]. 
    Those _ marks are NOT spaces, they are underscores.

 2. Copy all of the files from install.zip to the same place as this other program.
    There should now be a new 'install.exe' [the one from install.zip].

 3. Recompress and send to your victom! 
    When the run 'install.exe' it will set up the virus and run the original install program.
    Your victom won't notice a thing!

 --- 3.2 ---
 *OtherFucn*
 -----------

This is a list of the 'other' functions [buttons], i.e. not the DoS functions,
and what they do.  Obviously, you need to be connected to a virused computer first.

 Alt-Ctrl-Del off  = Disables Alt-Ctrl-Del, click again to enable
 Run Program       = Runs program on remote computer
 Crash Explorer [win98 only] = When enabled,
 will crash Explorer [NOT IE] on any computer running Win98.  Very nasty!
 Comptuer Takedown = Completly destroies a computer.  BE CAREFUL WITH THIS FUNCTION.
 Set WallPaper     = Set the computer's wallpaper
 Annoying Mouse... = Whenever the user moves the mouse, a messagebox will be displayed.
 Switch Mouse Buttons = Self-explanitory.  Just plain annoying!

 --- 3.3 ---
 *DoS Funct*
 -----------

This is a list of the DoS functions [buttons], and what they do.
Obviously, you need to be connected to a virused computer first.

PingBomb = Has the virused computer pingbomb an IP for aprox. 5 min.
Very effective if multiple clients are using it, and none of it gets traced back to you!


====== 4 ======
*Ver. Updates *
===============

v1.0 - A lot of new stuff, look up!
v0.1 - First Release!

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.