.: Shalan 1.05 :.
Released 16 years, 4 months ago. Jun 2005By Red Move
- Coded by: Red Move
- Version: Shalan 1.05
- Released date: Jun 2005, 16 years, 4 months ago.
- Coded in: Visual Basic, compressed with UPX
- Family: Shalan
- Category: Information Stealer
Server: dropped file: c:\WINDOWS\system32\Mscng.exe size: 13,874 bytes startup: HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" old data: "%1" %* new data: Mscng.exe opext "%1" %* tested on Windows XP June 23, 2005
Shalan is a pass sender that can send Yahoo Messenger & ICQ passwords to you. -------- Features -------- + Both email and cgi logger notificatDon. + Fake message at double click on server. + Run file at double click on server. + Able to change icon. + Binder. + Firewall bypassing. + Undetectable by anti viruses. + Not shown in msconfig. + Diabolic startup + Server size is about 13.5 KB Red Move
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at firstname.lastname@example.org, thank you in advance.