Nuclear Box - Malware Gallery

Informations

Author	BassReFLeX
Family	Nuclear Box
Category	Remote Access
Version	Nuclear Box
Released Date	Jul 2004, 20 years, 4 months ago.
Language	Visual Basic

Additional Information

Server:
size: 151.552 bytes

port: 6007 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Server"

Author Information / Description

This is probably biggest MSN Messenger related trojan ever released.
   It has extremly cool features like:
   
   (Server side)
    
    - After first manual start of Server.exe, it will start along with Windows
    - Invisible in task manager
    - Show victim's IP in MSN Messenger as an nickname

    (Known Bugs:)
    
    - When Disconnected from server, you can't connect again :( 
     
    --------------

    (Client side)

    - Sign victim out of MSN Messenger
    - Change victim's nickname in MSN Messenger
    - Add a contact in victim's MSN Messenger
    - Change victim's status in MSN Messenger
    - Best method of stealing victim's password (Might not work!)
    - Change victim's mouse coordinates (Change victim's mouse position)
    - Open/Close victim's CD-ROM 
    - Show/Remove an unmovable, unremovable, nasty, annoying picture in middle of victim's desktop
    - Minimize all windows
    - Log off (All applications get closed)
    - Hide desktop icons
    - Swap mousebuttons
    - Change victim's Internet Explorer start-page
    - Change victim's Internet Explorer title
    - Print text in victim's printer (If printer is powered on)
    - Send annoying 100 beep sounds, especially used to interrupt victim when listening music
    - Play music :P (Don't rename or remove from the folder 'sound.wav' file)

BassReFLeX