[ahsanciit]

got this frm hf
some one tel me itz wrking or nt??

and plz cnvrt me itz link in mediafre if itz wrking///

You can earn money by selling credits too. I am sharing this free to this community..

Here are the ScreenShots:



Just for my effort, please use spam link... I ask nothing else.

Thankyou..



Download Here:
-snip-

[heroatpeace]

keylogger
zzz...are we tht foolish?

[bspro]

If it Is a keylogger pls refrain from downloading it

[kingofjail]

wew...hey mate try to share nice tool without keylogger....

[wallykillaz]

lol sharecash and its a key logger

[bspro]

Request thread locked for infecting

[♠J0K3R♠]

Indeed a Backdoor/keylogger.

Inspecting further now.

Request lock and remove link please.

Spoiler: Anubis:

Files Created:
C:\Documents and Settings\Administrator\Local Settings\Temp\wmpnetk.exe

- Files Modified:
C:\Documents and Settings\Administrator\Local Settings\Temp\wmpnetk.exe
PIPE\lsarpc

Processes Created:
Executable Command Line
C:\Documents and Settings\Administrator\Local Settings\Temp\wmpnetk.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\wmpnetk.exe

- Registry Values Modified:
Key Name New Value
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders Common Desktop C:\​Documents and Settings\​All Users\​Desktop
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders Common Documents C:\​Documents and Settings\​All Users\​Documents
HKU\​S-1-5-21-842925246-1425521274-308236825-500\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​MountPoints2\​{a1094da8-30a0-11dd-817b-806d6172696f}\​ BaseClass Drive
HKU\​S-1-5-21-842925246-1425521274-308236825-500\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​MountPoints2\​{a1094daa-30a0-11dd-817b-806d6172696f}\​ BaseClass Drive
HKU\​S-1-5-21-842925246-1425521274-308236825-500\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders Cache C:\​Documents and Settings\​Administrator\​Local Settings\​Temporary Internet Files
HKU\​S-1-5-21-842925246-1425521274-308236825-500\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders Desktop C:\​Documents and Settings\​Administrator\​Desktop
HKU\​S-1-5-21-842925246-1425521274-308236825-500\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders History C:\​Documents and Settings\​Administrator\​Local Settings\​History
HKU\​S-1-5-21-842925246-1425521274-308236825-500\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders Personal C:\​Documents and Settings\​Administrator\​My Documents
HKU\​S-1-5-21-842925246-1425521274-308236825-500\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders Recent C:\​Documents and Settings\​Administrator\​Recent
HKU\​S-1-5-21-842925246-1425521274-308236825-500\​Software\​Microsoft\​Windows\​ShellNoRoam\​MUICache\​ C:\​WINDOWS\​system32\​NOTEPAD.EXE Notepad

Monitored Registry Keys:
Key Name Watch subtree Notify Filter Count
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5 0 Key Change 1
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9

- Files Created:
C:\Documents and Settings\Administrator\Application Data\The tool.txt
C:\Documents and Settings\Administrator\Application Data\chrtmp


[link=http://anubis.iseclab.org/?action=result&task_id=1f0864da9235a1a64453f911386456233]Scan report[/link]

[bspro]

I already made zzzz lol
Backdoor zzz read the rules dude

[ahsanciit]

thxs all 4 teling me read ma full thread im asking wit u abt this...

[helpme12312]

good job :o

msgtooshort..