r22xc

August 2007

The proof of concept to bypass firewalls and antivirus.
This is an irc bot, it makes bypass to firewalls and antivirus for to try connect at irc.

This bot has been tested under ZoneAlarm7.

*Features

Main:
- Install as service
- Double injection
- Hide process (rootkit)
- Ultra Persistence

Shell Bot Commands:
.auth <password> * Authentication with the bot
.info * Version Information
.join <#channel> * Join #channel
.part <#channel> * Part #channel
.say <#channel> <msg> * Send Message to channel
.vcmd <command> * Virtual Command
.rcmd_start * Start Real Command
.rcmd_stop * Stop Real Command
.rcmd <command> * Real Command
.plg_start <Path Dll> * Load Dll Plugin
.plg_stop * Unload Dll Plugin
.plgcmd <function> <parameters> * Use function with parameters
.synconnect <host> <port> * Connect with Synapse Zombie Server
.synsend <paht file> * Send file to Synapse Zombie Server
.synclose * Close connection with Synapse Zombie Server

Movie Bot: