Firstly, This was created to assist people who bot with Mr.Fishit in hiding their process, and further more making Wow.exe from being able to detect it!!
Step one.
Download the rootkit from [Only registered and activated users can see links. Click Here To Register...]
(Easy right?) The problem is, most Anti-virus's will detect this as a Trojan. Because, technically it is. This is a good Trojan though, because it will hide what you want, and not do anything unwanted. So, most likely you will need to create an exception for your antivirus so it wont delete your precious files.
Step two.
So, you downloaded the rar, and now your wondering what to do.
Extract the rar file(You only need the files inside the folder EXE to save you more time, and specifically, "msdirectx.sys" and "FU.exe" to anywhere you want. After you have extracted the files, take the files "msdirectx.sys" and "FU.exe" and move them directly into MR.Fishits directory. This is what it should look like (Excluding the hidemeplease.exe name, which will be whatever you named mr.fishit, and the Bat file)
Step Three
Download the attached file, and extract it to your Mr.Fishit Directory. Right click on it and Edit. in the notepad window that opens, you ill see this
Start HIDETHISPLEASE.exe
FOR /F "tokens=3 delims=:" %%a in ('FU -pl 100 ^| FIND /I "hidethisplease"' do set P1D=%%a
Change HIDETHISPLEASE to the name of your Mrfishit.exe (I would recommend renaming it to something else, make sure that its not the same as anything that may run)
Step Four.
Double click Epic.bat and this do stuff as your normally would with mr.fishit.
Step Five(Extra)
To ensure it was hidden properly, Press "Ctrl+Shift+esc" then select applications find your Mrfishit window name and right click > Go to process. It should take you to the processes tab, but nothing should be highlighted. If there is something highlighted, you failed, try again.
RECAP.
1.rootkit.com
2."msdirectx.sys" and "FU.exe" in your Mrfishit directory
3.Download attached file
4.Extract to Mr.fishit directory
5.Edit and replace all instances of HIDETHISPLEASE with exe's name
6.Doubleclick the Batch file
7.Taskmanager, Go to process. Shouldnt exist.
ps: repost aus fremder quelle
Step one.
Download the rootkit from [Only registered and activated users can see links. Click Here To Register...]
(Easy right?) The problem is, most Anti-virus's will detect this as a Trojan. Because, technically it is. This is a good Trojan though, because it will hide what you want, and not do anything unwanted. So, most likely you will need to create an exception for your antivirus so it wont delete your precious files.
Step two.
So, you downloaded the rar, and now your wondering what to do.
Extract the rar file(You only need the files inside the folder EXE to save you more time, and specifically, "msdirectx.sys" and "FU.exe" to anywhere you want. After you have extracted the files, take the files "msdirectx.sys" and "FU.exe" and move them directly into MR.Fishits directory. This is what it should look like (Excluding the hidemeplease.exe name, which will be whatever you named mr.fishit, and the Bat file)
Step Three
Download the attached file, and extract it to your Mr.Fishit Directory. Right click on it and Edit. in the notepad window that opens, you ill see this
Start HIDETHISPLEASE.exe
FOR /F "tokens=3 delims=:" %%a in ('FU -pl 100 ^| FIND /I "hidethisplease"' do set P1D=%%a
Change HIDETHISPLEASE to the name of your Mrfishit.exe (I would recommend renaming it to something else, make sure that its not the same as anything that may run)
Step Four.
Double click Epic.bat and this do stuff as your normally would with mr.fishit.
Step Five(Extra)
To ensure it was hidden properly, Press "Ctrl+Shift+esc" then select applications find your Mrfishit window name and right click > Go to process. It should take you to the processes tab, but nothing should be highlighted. If there is something highlighted, you failed, try again.
RECAP.
1.rootkit.com
2."msdirectx.sys" and "FU.exe" in your Mrfishit directory
3.Download attached file
4.Extract to Mr.fishit directory
5.Edit and replace all instances of HIDETHISPLEASE with exe's name
6.Doubleclick the Batch file
7.Taskmanager, Go to process. Shouldnt exist.
ps: repost aus fremder quelle
