Printable View
I've done many hours of research on subseven. Has anyone here had any personal experience with subseven? Were you infected w/it?....how did you get rid of it? Or....have you used it on someone? I'm interested in hearing details.......flamers need not reply. :2pick:
I'm the Sub7 master here at AO. What I usually do to have some fun is DCC on irc and infect them with a file. THen I get there e-mail get the ip from that and whala I've got another computer victim.
The essentials you need are a Sub7 full program, then get a Sub7 scanner that will scan for other infected computers and then you should be set.
Sending it in the e-mail is the best way to infect someone. I usually will get a mailbomber break into a spamming computer that has tons of addresses and sent it that way so I get like 50,000 infected computers.
If Shmoo is ever around he will help you out alot as well. I trained him on the arts of Sub7 hacking. He's like my student.
Exactly how many hours? I hope not too much..its very easy to use and remove.
I had been infected a few times. I infected my self with various editions of the server.
The most common of all of these is the Win.ini file.
[windows]
load=
run=server.exe
Another is the System.ini file
oemfonts.fon=vgaoem.fon
system.drv=system.drv
drivers=mmsystem.dll power.drv
shell=Explorer.exe\SERVER.EXE
user.exe=user.exe
gdi.exe=gdi.exe
also more experienced script kiddy will use registry entrys and you will have to search for them yourself as i do not have access to this info right now.
Anyways the removal is also easy.
1) Start>Run>msconfig.exe
2)check start up search for strange and unknown programs.
3)once server is located take the check out of the box that tells it to run upon winstart.
4)Restart Computer
5) Start>Find/Search>File's Folders>name of the server......"server.exe"
BTW The server automatally changes the name of the server to a random string of letters. example: dhbfjshb.exe unless changed from default setting by the script kiddy.
Also i have had used many times. But we wont talk about this now....
freeOn : >> Can you tell me more about how to use it without leaving yourself vulnerable to others?.....PM me if u want to teach me more about the sub7 or tell me more about personal use.....thank you very much. haraam77......:2pick:
I used to be big into sub7 a while back and I'd always plant backups in the victim like Dr Toker said ;)
My fav way of doing it was to either make a reg entry pointing to another server on their comp or download a prog they had set to run on start-up, bind my server to it and upload it again....very few peps check that their prog files are the same file size as when they first installed them :)
But those days are behind me now tho I do fiddle every now and then when I get bored but we'll not talk about that here......
v_Ln
haraam,
There is no real way to remain invulnerable while using sub7. Mobman imbedded in the client a virus of his own. Which is why your McAffe and Norton say it is infected. There was released a clean version of this program..however I have not seen it in ANY search. It was pretty underground.
I'v used Sub7 Loads of times, and been infected my self.....
One thing to be aware of is that the Client is also infected with a Trojan, but of a different nature, can't remember exactly which one, but it's kinda Ironic to ahve a Trojan server with a Trojan-client.... :p
One good way of getting rid of Sub 7 Is just pressing Ctrl+Alt+Del loads of times at start up, and simply shut down any unknown files..... Well, thats me any way...
The server when running, does not show up in the task manger. Also simply ending the task would not help much at all, seeing as how as soon as you restart your computer it will be ran again. But like i was saying, but cut myself off.
Find the server on your drive, after taking it out of your start up. Then delete it. Or you if you can somehow end the task, you COULD delete it then, with out restarting and messing with msconfig.
yeah yeah, i have used sub7 a lot as well, but as mentioned by others...the client is also infected with the trojan. good luck on finding an uninfected copy of sub7, haha. though i have found numerous versions of netbus in which the client was not infected. netbus is very similar to sub7, so if you have no luck with sub. try looking into other remote admin crap like netbus.
Laidher
About mobman infecting the client.
All mobman had to do was built a similar, yet not completely the same server.exe and embed it in the client. He would make some #channel in some unknown, or his own, server - and all ips of his #2 victims would be his. Then anybody that logged onto the internet even only opening the client...would be his.
Another good idea would be that the client would be a twopart virus. Sending the IP of the user as well as whoever the user infected. I, myself, did extensive reasearch on Sub7, infecting my own computer and learning about it...doing all the commands. Obviously I cleaned everything out, using Dr.Toker's advice, plus an AV, and editing all my startup files.
The trojan is fun, I'll admit that...but BO2k can kick it's ass any day. Just because it's lamer-proof. :-P
where the hell you find all of these client/server progs???? i downloaded mine off of morepheaus, but i dont have the trojan, where can i find it? and bo2k is back orifice 2000 right? ive used net bus plenty of times... ive gotten kinda bored with it, i want new things...
bizzy...program your own, like my friends and I have. It's quite challanging...yet fun. Hours of fun...that never stops...
...unless you distribute. So don't...you will never get mine, and I shall never get yours. Keep it like that, and all is well.
Though I hate the idea of sub7 alltogether...I admire that the server has its own backdoor
you might call the original programmer Sauron, for he is the lord of the sub
I know this comment was stupid...but what can I say, I'm a middle earth fanatic
I thought this board was for *security* and to rpevent hacking. I have seen numerous flames against people saying "how do I sub7 my g/f" but now everyone is doing the opposite. This used to be a great place for security but ppl like u drag it down!
he was asking legitimate questions, asking for info on it, its potential downsides.....it is a security related program..
it's a matter of perspective, if he were to ask how he could infect his friends computer to read his personal agenda...now
that's another story, but to ask for more information, i.e to get a better understanding of it....then I respect that
Well I'd hate to admit it but i once was a script kiddie, maybe still am, i used to use bo2k, orignaly when i got in to computer secruity and hacking and such i jsut played around with my friend wed both put the server on out computers and jsut fool around and stuff. then i started using it on my home network it made things so easy with the bopeep plugin i don't have to walk upstairs to use my other computer. But anyway i see no reason why some shouldn't ask about sub 7, script kiddieness (if thats a word) is what got me in to computers in the first place
I remember the first time i used bo2k years ago, my friend was on the phone when he was just like "what the hell my computer just restarted." I was so amazed at what i had done. But now i've moved on to the real meaning of security and hacking. not just using some crappy programs other people wrote and having no idea what they were actually doing and how the worked. Now i'm working on learning to write programs in all diffrent languages, learning how a packet travels form one computer top another, how to set up a 500 computer network and keep other people out......
my suggestion is play around with sub 7, and if u haven't already try bo2k. its great to just run to computer next to each other and contorl the otehr one with bopeep. Just don't stay at that stage, i'm guessing ur interested in hacking so moveon and find out what hacking really is.
same here
ok something got posted before mine and put my last reply to far ahead... Same here was in responce to the post where the person said that he respects the starter of this thread because he was asking a question to better understand sub 7 and not how do i infect my friend / whoever with the trojan
First of all, if you are concerned about being infected, get a trojan scanner like the one from moo-soft. Secondly, don't hack with sub7.
Learn! Learn!
There is many sites on removing sub7 and if you where wanting to find sub7 try searching google with a search for mobman, but to tell you the truth the programs are missing files. Mobman put the virus on both sides so he could monitor your activities with his program. I guess he didnt want you to abuse his software so thats why he did it. I used sub 7 some time ago infact thats what inspired me to dig futher into the world of computers, But for me it was all just a learning tool not a way to get revenge on anyone or things like that. there are alot of different backdoor viruses out there to play with. What I did was look up my antivirus files and read all the different viruses out there and one by one I DL them and check them out. Oh by the way if you are wanting to put the virus on your site make sure your site is compatiable with Pearl otherwise it wont work. KNOWLEDGE IS POWER.
Thank u ...2 all those who replied w/s'thing helpful.......and to hell with the rest. :2pick:
I used sub 7 a long time ago it's a pretty good program I used to take over home computers with it.Quote:
I've done many hours of research on subseven. Has anyone here had any personal experience with subseven? Were you infected w/it?....how did you get rid of it? Or....have you used it on someone? I'm interested in hearing details.......flamers need
I have found many good sites on sub7....loads of info. Just curious though as to the personal experiences you may have had with it. :2pick:
I remember my first post here was regarding Sub7 and well it was basically a criticism of its uses I think.
All I wanna say is that if you promote/use/enjoy this 'product' you are childish/foolish/wasting your damn time. How this topic has gotten up to two pages is beyond me.
It is very rare I get annoyed at these forums, hell my last flame was about 500 posts ago but this has got to stop.
Remember SECURITY! not SUB7 USERS unite!
So sub7 Huh? I`m used to y3k and well i`m a script kiddie / craker/ hacker whatever you want to call me i had lots of fun with y3k never tried sub7 :p
anyway gata run c-ya later :duh:
uhgg
how many hours can you put into it nearly every site has it its really really easy to use thats why its so popular yet most kiddies cant get it to work hmmmm whats wrong wit them but yeah i spent a while in dos deleteing the stupid thing how they got it on 7 times i still dont know stupid sister ohh well just sit their and wait then use netstat and have some fun heheh i mean who attacks another computer and not expect a retaliation stupid kids get a firewall if u going to atack my sister hehe well thats it im going to school cya rioterQuote:
[i] I've done many hours of research on subseven. Has anyone here had any personal experience with subseven?
Yeah this is to all that actually took my post seriously and gave me negative points. I would like to say that if your going to give out points even negative ones put your ****ing NAME on it be a man not a pussy. And also I do realize that my since of humor is was maybe to sarcastic and people may not be able to pick it up. (Don't ask my why but I thought it was pretty obvious) anyway. Basically everything I said was common sense and a joke especially the stupid IRC thing.
mmkay well I hope things chill out.
i agree with freeOn put your name on it most of the time i get them for wrong thing and i wanna correct them but can i noooo cuase ur chickens i can understand why jp doesnt make you put your name but seriously put your name on them makes my life eaiser specially when people give them cause they took the article the wrong way etc so as many have said before
put ur name on the end
reason - name
please!?
RiOtEr
How about a respected remote administration application, check out VNC from ATT, it's free, powerfull and lightweight.
http://www.uk.research.att.com/vnc/
Hey people out there,can u give me some links where i can get a powerfull scanner for trojans(and sub7 ,bo2k).But my biggest problem is how can i crack the password from sub7???Does anyone know ??Has anyone tried it out?
And...uff...it seems pretty scary the think with the client infected,but i have a question.This is not a permanent trojan or it is?I mean you are not all the time infected with it,only when you are using the client,right?
i've just been using sub 7 on my schools computers... to get my friends pissed off... but thats about my experiences from sub7
Sub7 and HDKP
According to some sources, and what I have found out, HDKP 4 is embedded into the recent versions of Sub7. The codes are in the software, and the Hard Drive Killing function is only accessible if you have the Master Password for Sub7. The Sub7 crew admitted to using HDKP with Sub7 regularly, therefore, I wouldn't be surprised if the rumours are correct.
Lemme run a search and see if I can find anything eles......
hmmmm check this website
http://www.subseven.de/s2/index2.html
well that's all?anyone can tell the master password or can give a link to where i can find it?i didn't catch too mutch of HDKP ,anyway is this a permanent trojan or not?
Quote:
haraam,
There is no real way to remain invulnerable while using sub7. Mobman imbedded in the client a virus of his own. Which is why your McAffe and Norton say it is infected. There was released a clean version of this program..however I have not seen it in ANY search. It was pretty underground.
LOL you really need to get your facts right.
Anti Virus detects the client by its signature not because its a virus lmao
p.s master pass is 14438136782715101980
the idea was scrapped.
also, to use a good scanner to scan for virus or open ports on your machine and to find ports on other machines use superscan, download from http://www.sub7world.com/board/download.php?id=7 also if you want to crack a pass for sub7 server there are programs available to crack them its called sub7 pass crack but not available on any sub7 website as they dont like that.
when you scan with superscan if you get pings they are all non firewall PCs
p.s not sure if i am allowed to post links, if this is wrong delete the url and accept my aplogies I dont wanna be a spammer and i respect your forum rules of course.
this thread was a bloody 4 years ago lol
think they've forgotten about it by now