[Release]GreYFoX NoDC 1.141 Beta 2 (Memory Patch)

[jugeernaut]

but, i dont get it to work lol.
could i get a little, "how to use" ?

[takelook]

Its Not Clean

[vrk]

nice greyfox

[ihavenoname]

Originally Posted by antares

nformation about the Sohanad Worm(detected in Analysis of the file GreYFoX_NoDC_1.141_Beta_2_Memory_):

Sohanad is a worm. The worm will infect Windows systems and spreads through Yahoo! Messenger, a popular instant messaging application.

The worm arrives as a downloaded file via Yahoo! Messenger.

Upon execution, this worm copies itself as SVHOST32.EXE and SVHOST.EXE in the Windows folder.

The worm modifies registry at the following location to load itself during each startup.

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentV ersionRun

It also creates the following registry keys to modify the settings of Yahoo! Messenger.

HKEY_CURRENT_USERSoftwareYahoopagerViewYMSGR_buzz
HKEY_CURRENT_USERSoftwareYahoopagerViewYMSGR_Launc hcast

The worm also modifies the registry to disable Registry Editor and Task Manager.

It also changes the Internet Explorer (IE) home page to;



This worm propagates via Yahoo! Messenger by sending an instant message to all the contacts of an active user. This message contains a link to a remote copy of itself. When the recipient clicks the link, a copy of this worm is downloaded and executed on the recipients' system.

The details of the message sent out by this worm are;

Do you realize who is in this image: http://{BLOCKED}coolpics.net/who.jpg . Just think for a moment and tell me soon )
who is beside you in this pic so good-looking
the page cannot be displayed http://{BLOCKED}coolpics.net/error.jpg Something was wrong !!! Check it again and tell me later. THanks
Images shot in Iraq _ The war will never end http://{BLOCKED}coolpics.net/Iraqwar.jpg <<
Miss World 2006: http://{BLOCKED}coolpics.net/MissWorld.jpg !! <<
oh my god , i've won a 20000 usd lottery :O http://{BLOCKED}coolpics.net/mylottery.jpg <<

It also attempts to connect to the following website to download and execute some malicious files.

http://{BLOCKED}vey-sales.com/ipn/transactions/en.exe
http://{BLOCKED}vey-sales.com/ipn/transactions/link-en.exe

The worm tries to terminate some of the security related processes.

This worm first appeared on November 12, 2006.

Blueball Other names of Sohanad Worm:

This Worm is also known as WORM_SOHANAD.AE.

Man, if you cannot trust him, leave epvp.

[BOBAH]

can someone plz tell me what tbot do i need i ve tried 1113 and 1107 and i tried with TServer. But nothing works someone plz tell me what should i do.

Thanks a lot

[Aliosa]

thx grey for nice and helpful things

[killzone]

Can someone re-mirrored the file(s) to somewhere else? I hate both Rapishare & Megaupload.
try:

[yahya]

if u dont trust greyfox just use the NOdc client i posted it works 100%
link:

[revolg]

honestly... if. greyfoXx wanted to hack someone is as easy as hacking Sro Databank which im sure they know how to do it and if not, they know how to find a way to. GreyFoXx is old guy from ProjectHax who was gain the respect of everyone and i think its disrespectfull that his doin something for everyone and u miss accuse him cuz u see a wierd thing whatever it does. he has gain the trust of many, if u dont want to use it ten dont but dont miss accuse someone that is bringin a client for u to make ur login easier.

[pungporn]

lmao really.. you noobs really **** me off, if you ever used a NoDC client, it must be one of GreYFoX once again you did a good job GreYFoX ! Now I can finally use NoDC with my bot

[ncera]

Originally Posted by jugeernaut

but, i dont get it to work lol.
could i get a little, "how to use" ?

Yeah please i would like to know how to use it too, and i also want to know what does it do.

Thanks in advance

[BOBAH]

Yeah sreuosly Grey!!!
there is a lot of people ask you how to use i from step one.
If its not hard please post the full explonation or someone who knows how to start it..

PPPPPPLLLLLLEEEEEEEAAAAAAAAASSSSSSSSSEEEEEEE

[John Dread]

posted a instruction in this thread

[vanja123]

thx

[dd4eva]

lol if ya'll wanna get hacked just keeping using this ****... just use the loader and u will b safe... Wow grey u became a bad man now... well too bad **** u then!!