RePass 2.1
(Trojan-PSW.Win32.Delf.lc)

by drkdreams


RePass is a cover for MessenPass v1.06, that recovers:
- MSN Messenger 
- Windows Messenger (En Windows XP) 
- Yahoo Messenger (Versiones 5.x y 6.x) 
- ICQ Lite 4.x/2003 
- AOL Instant Messenger 
- AOL Instant Messenger/Netscape 7 
- Trillian 
- Miranda 
- GAIM 
It will inject a dll into the default browser, and then send 
the passwords to your email and/or php address.


How to Use PHP
--------------------------
1. You can set up a PHP site at lycos.
2. Then upload the included script (upload.php).
3. Then just set the php box on RePass to:
"http://members.lycos.co.uk/yoursitehere/upload.php?data="
4. Then go to the page called "victim.html" in the site directory.

Changes
-------------------
+ New GUI 
+ Form Style and Picture Changed
+ Edit to the email sending to make it faster



Server:
dropped files:
c:\WINDOWS\defit.sys    Size: 0 bytes 
c:\WINDOWS\get.exe      Size: 47,104 bytes 
c:\WINDOWS\msdev.dll    Size: 18,944 bytes 

tested on Windows XP
June 17, 2006

MegaSecurity