by Red Move
Written in Visual Basic, compressed with UPX
Released in September 2005
Shalan is a pass sender that can send Yahoo Messenger & ICQ passwords to you. -------- Features -------- + Both email and cgi logger notificatDon. + Fake message at double click on server. + Run file at double click on server. + Able to change icon. + Binder. + Firewall bypassing. + Undetectable by anti viruses. + Not shown in msconfig. + Diabolic startup + Server size is about 13.5 KB Version 1.06+ - September/19/2006 * Mail Sending bug fixed. * Final Release. Red Move Server: dropped file: c:\WINDOWS\system32\Mscng.exe size: 13,874 bytes startup: HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" old data: "%1" %* new data: Mscng.exe opext "%1" %* tested on Windows XP September 25, 2006MegaSecurity