.: RePass 2.1 :.

Additional Details

• Coded by: drkdreams
• Version: RePass 2.1
• Family: RePass 2.1
• Category: Information Stealer

MegaSecurity Notes

Server:
dropped files:
c:\WINDOWS\defit.sys    Size: 0 bytes 
c:\WINDOWS\get.exe      Size: 47,104 bytes 
c:\WINDOWS\msdev.dll    Size: 18,944 bytes 

tested on Windows XP
June 17, 2006

Author Words

RePass is a cover for MessenPass v1.06, that recovers:
- MSN Messenger 
- Windows Messenger (En Windows XP) 
- Yahoo Messenger (Versiones 5.x y 6.x) 
- ICQ Lite 4.x/2003 
- AOL Instant Messenger 
- AOL Instant Messenger/Netscape 7 
- Trillian 
- Miranda 
- GAIM 
It will inject a dll into the default browser, and then send 
the passwords to your email and/or php address.


How to Use PHP
--------------------------
1. You can set up a PHP site at lycos.
2. Then upload the included script (upload.php).
3. Then just set the php box on RePass to:
"--/URL REDACTED BY SUB7CREW.ORG FOR YOUR SAFETY\--"
4. Then go to the page called "victim.html" in the site directory.

Changes
-------------------
+ New GUI 
+ Form Style and Picture Changed
+ Edit to the email sending to make it faster