Showing posts with label Internet History. Show all posts
Showing posts with label Internet History. Show all posts

Monday, October 2, 2023

Sub7

Interview with Sub7 creator, Mobman:
https://twitter.com/DarkCoderSc/status/1681208015255379968
https://darkcodersc.medium.com/a-malware-retrospective-subseven-d86fed0c88bf

Born and raised in Craiova, Romania, Mobman was drawn to the world of software and malware at an early age. His fascination led him to the creation of the infamous SubSeven Remote Access Trojan, a feat achieved under a pseudonym inspired by his enduring favorite band, B.U.G. Mafia. As he reflected, “The nickname was inspired from my favorite band (still to this day!), the Romanian rap group called B.U.G. Mafia. I wanted to pick something mob-related and mobman just had a nice ring to it.”.

Sub7 fun fact: mobman used to write feature ideas in notebooks
https://twitter.com/xillwillx/status/1708766696985575772




Tuesday, July 25, 2023

Warez Wayback Machine

[WORK IN PROGRESS]

Starting points for Internet history research:

  • https://web.archive.org/web/20030801071523/http://www.thebugs.ws/ddl/
  • https://web.archive.org/web/20051101012155/http://crackz.ws/
  • https://web.archive.org/web/20040823015457/http://cracks.am/
  • https://web.archive.org/web/20051101005639/http://www.serials.ws/
  • https://web.archive.org/web/20040609203254/http://www.cracksearchengine.net/
  • https://web.archive.org/web/20040610162555/http://www.freeserials.com/
  • https://web.archive.org/web/20040729185658/http://phazeddl.com/
  • https://web.archive.org/web/20040804052535/http://astalavista.us/
  • https://web.archive.org/web/20051101010218/http://astalavista.box.sk/
  • https://web.archive.org/web/20040803110015if_/http://kickme.to:80/cosmocon/
  • https://web.archive.org/web/20040610083049/http://www.crackfound.com/
  • https://web.archive.org/web/20040608072032/http://directwarez.com/
  • https://web.archive.org/web/20071102080755/http://www.serialdevil.com/
  • https://web.archive.org/web/20051101010841/http://crackdb.com/
  • https://web.archive.org/web/20051022044438/http://nfodb.org/
  • https://web.archive.org/web/20051101013917/http://crackfind.com/
  • https://web.archive.org/web/20070719160119/http://piratebot.org/
  • https://web.archive.org/web/20060228174813/http://www.appzplanet.com/
  • https://web.archive.org/web/20070102233234/http://crackedappz.com/
  • https://web.archive.org/web/20050208083724/http://keygen.us/
  • https://web.archive.org/web/20070403022512if_/http://www.mylinkz.dl.am:80/
  • https://web.archive.org/web/20070503164157/http://quickstyle.ru/
  • https://web.archive.org/web/20070419043140/http://gfxworld.org/
  • https://web.archive.org/web/20050418104651/http://www.kiluminati.com/banner.htm
+
  • https://web.archive.org/web/20070614100729/http://www.logomaid.com/
  • https://web.archive.org/web/20070610031606/http://www.designgalaxy.net/
  • https://web.archive.org/web/20061106062333/http://www.hackersbook.com/index.php

BlaCk^D3v|L by maSSiccio

For researchers of internet history, here is the search for the "BlaCk^D3v|L by maSSiccio" mIRC script, popular in the early 2000s.

I.
A web search for "mIRC script devil by maSSiccio" returned:
http://web.tiscali.it/theblob/download-big.htm
https://web.archive.org/web/20170814170109/http://web.tiscali.it/theblob/download-big.htm


It links to "http://web.interpuntonet.it/bdevil/", which is available as archived in 2001:
https://web.archive.org/web/20010827101902/http://web.interpuntonet.it/bdevil/

This site has a download page for version 3.666, offering both an English and an Italian mirror, as well as an "addons and libraries" page, but no actual files are archived.

The Hotmail email address mentioned on the archived website is no longer active ("blackdevilscript").

II.
Another search result is, offering version 2.0
https://www.oocities.org/hhh2000_999/MIRC.htm
https://web.archive.org/web/20110627121411/https://www.oocities.org/hhh2000_999/MIRC.htm

The download URL "http://216.234.161.131/files/5.6/bdevil.zip" has not been archived.

III.
Another search result, offering version 1.666
http://thelords.scriptmania.com/scripts/
https://web.archive.org/web/20180814202040/http://thelords.scriptmania.com/scripts/


The download page "http://www.mircscripts.com/cgibin/download.cgi?s=bdevil.zip&v=5.6" has been archived, but the actual file is not available.

IV.
The script is mentioned in old IRC logs from 2002, themselves worth keeping as part of internet history:

[22:38] charless (~19@195.113.65.246) left irc: BlaCk^D3v|L 4.0 S´SRvG by maSSiccio, http://www.blackdevilscript.net

[source][archive]

[00:04] smallfly (~smallfly@ip4.ktvprerov.cz) left irc: BlaCk^D3v|L 3.666 by maSSiccio, http://www.blackdevilscript.com
[source][archive]

The mentioned URL ("blackdevilscript.com") is archived and redirects to "blackdevilscript.areanews24.com" (also archived):

Again, there is a download page:
https://web.archive.org/web/20020213084635/http://blackdevilscript.areanews24.com/bdevil/download.php

The main installer is listed as "bdevil_40.exe", "bdevil40.exe" or "Bdevil30.exe", depending on the version. There are three versions: 3.0, 3.666, 4.0.

The installers for versions 3.666 and 4.0 served by this website have been archived on the Wayback Machine:
https://web.archive.org/web/*/http://blackdevilscript.areanews24.com/bdevil/download/*

Note that antivirus software can mark these files as malicious, because they contain various tools used for offensive actions on IRC. They would be largely harmless today, but to stay on the safe side, and for the most authentic experience, you should only run these files safely inside a virtual machine.

VirusTotal reports: