.: NTbindshell :.
Released 18 years ago. Oct 2003By Christophe Devine
- Coded by: Christophe Devine
- Version: NTbindshell
- Released date: Oct 2003, 18 years ago.
- Coded in: C, Source included
- Family: NTbindshell
- Category: Remote Access
Server: size: 24.576 bytes port: 26103 TCP startup: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RSMSS
/* * Win32 RootKit - cmd.exe remote shell backdoor * (c) 2003 Christophe Devine * Distributed for educational purposes only! * * Before running ntbindshell.exe, rename it to * "rsmss.exe" and copy it into %windir%\system32. * This program will automatically register itself * as a system service the first time it is run, * provided it has the required privileges. * * To remove the service, start Regedit and delete * HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ * Services\RSMSS, then reboot the computer. * * Backdoor usage: * * normal (listen) mode: rsmss <port> * reverse-connect mode: rsmss <port> <host> */ Christophe Devine
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at email@example.com, thank you in advance.