Archive A Reconstructed © MegaSecurity Database
Excalibur
Released 27 years ago. April 1999
Copyright © MegaSecurity
By Matrim & Angel of Death
Informations
| Author | Matrim & Angel of Death |
| Family | Excalibur |
| Category | Remote Access |
| Version | Excalibur |
| Released Date | Apr 1999, 27 years ago. |
| Language | Visual Basic |
Additional Information
Server:
c:\windows\system\sys23.dll
startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
Author Information / Description
------------------
- Excalibur -
------------------
ToC
1 - Disclamer
2 - News
3 - Features
3.1 - Installer
3.2 - Main Functions
3.3 - DoS Functions
4 - Version Updates
5 - Contacting
====== 1 ======
* Disclamer *
===============
Don't kill anyone with this program.
Its not our fault if you get in trouble for using this program.
====== 2 ======
* News *
===============
v1.0 Alpha
NEW RELEASE!!! A few new features and massive stability.
Also, we have an anti-virus to remove it from your computer if you
accidentally infect yourself. Read below!
v0.1 Alpha
Well, Matrim [thats me] and AoD [Angel of Death] started a group together,
and this is our first release.
It has all the features that I've always wanted to see in a backdoor program.
As we go, we'll be adding on new features and making the program run more quickly and reliably.
We don't have a group name, but that is just fluff, we want to churn out some
quality programs before we worry about becoming 31337 proggie makers or anything.
We're currently setting up a website for this program and any that we will release in the future.
Next release [most likely] will have our URL.
====== 3 ======
* Features *
===============
Excalibur is a new backdoor virus program with several advantages over the other backdoor programs available.
1: It is not yet detected by virusscanners
2: It automatically hides itself very well from any type of detection
3: It has built-in DoS capibilities, such as Ping Bomb [think of pingbomb from 10 computers!] or Nuking.
4: It uses a little-known way of running itself on bootup, making it difficult to detect
5: Much more!
--- 3.1 ---
*Installer*
-----------
After running install.exe, there should be a zip file in the directory with the client.
1. Download any program [or use one that you have handy].
Make sure that it has an install program built in.
Then, rename the install program
[most likely install.exe or setup.exe] to "install.___" [no quotes].
Those _ marks are NOT spaces, they are underscores.
2. Copy all of the files from install.zip to the same place as this other program.
There should now be a new 'install.exe' [the one from install.zip].
3. Recompress and send to your victom!
When the run 'install.exe' it will set up the virus and run the original install program.
Your victom won't notice a thing!
--- 3.2 ---
*OtherFucn*
-----------
This is a list of the 'other' functions [buttons], i.e. not the DoS functions,
and what they do. Obviously, you need to be connected to a virused computer first.
Alt-Ctrl-Del off = Disables Alt-Ctrl-Del, click again to enable
Run Program = Runs program on remote computer
Crash Explorer [win98 only] = When enabled,
will crash Explorer [NOT IE] on any computer running Win98. Very nasty!
Comptuer Takedown = Completly destroies a computer. BE CAREFUL WITH THIS FUNCTION.
Set WallPaper = Set the computer's wallpaper
Annoying Mouse... = Whenever the user moves the mouse, a messagebox will be displayed.
Switch Mouse Buttons = Self-explanitory. Just plain annoying!
--- 3.3 ---
*DoS Funct*
-----------
This is a list of the DoS functions [buttons], and what they do.
Obviously, you need to be connected to a virused computer first.
PingBomb = Has the virused computer pingbomb an IP for aprox. 5 min.
Very effective if multiple clients are using it, and none of it gets traced back to you!
====== 4 ======
*Ver. Updates *
===============
v1.0 - A lot of new stuff, look up!
v0.1 - First Release!
This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized the Malware Gallery to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.