readme.txt

一个外国的木马哦,功能挺多的

RECUB Features.
1 RC4 Encripted Reverce connect Shell for XP,2k,2003.
2 Bypass Firewalls by starting new instance of Internet explorer and injecting code
3 Activate throw Encrypted ICMP request
5 No listning ports
6 No Process visible,injects into Explorer.exe on startup and exiting
6 Activex startup
7 Empty All Event Logs After exiting the shell.
8 We can use Netcat also for remote shell.
9 EXE size only 5.39 KB

Install

Copy to any folder like windows of system32 and run once

Uninstall
Just delete the exe file 
and this key at
HKEY_LOCAL_MACHINE\Software\\Microsoft\\Active Setup\\Installed Components\\{H9I12RB03-AB-B70-7-11d2-9CBD-0O00FS7AH6-9E2121BHJLK}

HKEY_CURRENT_USER\Software\\Microsoft\\Active Setup\\Installed Components\\{H9I12RB03-AB-B70-7-11d2-9CBD-0O00FS7AH6-9E2121BHJLK}

By
Hirosh

www.hirosh.net

www.eos-india.net

Bugs mail me - [e-mail]


Thanks for starch at http://mir-os.sourceforge.net/recub.htm  For the idea,I started this by 
porting his version in linux to win32,after some time i stoped porting bc i prefer
a small EXE heheh..,and thanks to NC source too..									 //