Thursday 29 September 2011

How to Bind .exe files to keep your VIRUS file, FUD and Hidden


<------------- PS : Readers must read the note at the end ------------------->

Hey friends, here in this post I'll show you how to bind 2 or more .exe files so that running the main execution file will also run your hidden execution files in background without the knowledge of user who is running it.


I am sure this will be helpful to you if you are seeking for a trick to keep your virus file inside a genuine software and make it to run when anyone installs that software.


There are many binder software available like filejoiners, file binders etc. I dont know how many of you are aware of this great windows tool. Even I was in search for those softwares to keep my virus files hidden untill I realize that there is an inbuilt windows .exe binder which can bind the files more effectievely than others. Also a great advantage that if you bind in this way the possibilities of being FUD (Fully Undetectable) is very high as it uses genuine windows tools. I will give you step by step explanation for binding 2 .exe files to a single package. Have you heard about IExpress anywhere before? If not just keep in mind that it is the inbuilt tool in windows used for binding .exe files.


Steps:


1) Open run (windows + R)
2) Type iexpress and hit Enter


This will open some thing like this,


         


Do as shown in the screenshot above.
Select "Create new Self Extraction Directive file" and click Next.


3) Give a title for your package.


         


4) If you have give any message, it will be prompted before the user installs the package. Suppose if I give a message "For security reason please disable your antivirus". This will be shown to the user when he/she installs the particular package. Here, in this screenshot I have selected "No prompt".


                  


5) Select as shown below (recommended).


          


6) Now, click on "Add" button and select the files you want to bind. Here, I selected a genuine software and a virus file created by me and bind them together. So, when any user would install this particular software, user observe that the software is installing as usual, but he cannot see that a virus file has also been installed along with the software.


          


7) After clicking on "Next", there will appear 2 options i.e. Install program and Post install program. Just select the files as shown below (either way will also work) and click next.


         


8) Select as shown below.


          


9) Mention any path of your Hard Drive (this is where your newly created file would get stored) and tick the "Hide File...." option (highly recommended).


          


10) Select as shown below and click next.


          


11) Select "Don't save" and click next.


         


12) Click Finish and you're done.


          




NOTE: Binding techniques are mostly used to attach keyloggers, that will spy your each and every activity performed on your computer. These activity could be your bank transactions, your username and password of different login sites viz. Facebook, gmail, Bank sites etc. Hence this a request to all, not to download any kind of software from unknown websites, because most of the cracked softwares are attached with keyloggers that you can't detect easily.
So, be alert and download softwares from authorized and trusted websites only.



Thanks,
Parag 

Saturday 10 September 2011

How to get Information of any Website using Command Prompt


Hey friends, in this post I'll show how to find IP address of any Website(URL) using Command Prompt(cmd) and also how to find many network related information about a particular website.


1) Start Command Prompt


Goto start --> Programs --> Accessories --> Command Prompt
                                 OR
Goto start --> Run --> Type cmd --> hit Enter




2) IP address and Connectivity


Type the following command in the command prompt,
ping website
eg. ping www.google.com


   A screenshot of the ping command


♦ The 2nd line i.e. Pinging www.google.com [66.102.13.104] with 32 bytes of data:


♦ Here [66.102.13.104] is the IP address of google.com


♦ You can replace www.google.com with any other website.


♦ Notice the connectivity between you machine and the server from the line where it says: "Packets: Sent = X, Received = X, Lost = X (X% loss)," where all the Xs will be replaced by numbers. This gives you an idea of how much percent of the packets sent to the server will be lost.




3) Routing Information


a) Type the following command in the command prompt,
tracert website
eg. tracert www.google.com


    A screenshot of a tracert session


♦ The above command gives you the routing information of a particular website.


♦ You can replace www.google.com with any other website.


♦ Notice the listing of hops along the route path of packets from your machine to the server. This gives you an idea of how many routers/hops the packet has to travel before reaching the server, starting from your machine.


b) Type the following command in the command prompt,
pathping website
eg. pathping www.google.com


   A screenshot of a pathping command execution


♦ The pathping utility gives the information about network latency and network loss at intermediate hops between a source and destination.


♦ Pathping sends multiple Echo Request messages to each router between a source and destination over a period of time and then computes results based on the packets returned from each router. 




4) DNS Information


Type the following command in the command prompt,

nslookup website
eg. nslookup www.google.com

   A screenshot of nslookup execution

♦ The above command gives you the DNS information of a particular website.

♦ It finds the DNS Server (first line) and the IP addresses of the server you queried about.




NOTE : If you're using these command in a corporate network or a school network, some of these commands might not give you results. Most institutions have firewalls with settings to deny services provided by these tools.




Thanks,
Parag