21/03/2002

Dark Omen v1.3 Internal release (not internal now)

For detailed information on how to use this program read all the info on previous versions. Most of it still applies. 
For those people who are unfamiliar with this program and what it does read all this document.
 
This version currently only half complete and in the testing stages. Only the email part of this program can be configured using the wizard. 


INSTALL
simply run the setup in this zip and install the wizard on to your computer. THIS DOES NOT INSTALL THE KEYLOGGER. Run the wizard from your start menu. Follow the on-screen prompts and when asked to save the file save it to a place you can find. This file is the keylogger. All you do is double click the file when it is on your target machine. The exe will look as if it has done nothing. BUT it should install the keylogger to c:\windows\ActiveXUpd. The program will be automatically started. Using the settings you specified in the wizard.
If you want to use the client/server side of the program it has to be configured once installed. read below how to access the config screen.

This is only a test version so expect bugs. Please report then to me at

D0110101@hotmail.com

thank for your help. 

KNOWN BUGS

The error message setting on the wizard doesnt save if you do not use e-mailing in the program. By default no message is shown. Fixed next version.

when installing on an NT based machine if you dont have admin rights some required files dont get updated and the keylogger may error. Also if the registry is restricted you may need to create your own startup meathod.

Ive also had a few reports of keys not being logged on an NT machine.(need more info)

/////////////////////////////////////////////////////////////////////////////////////////////
--------------------------------------------------------------------------------------------
////////////////////////////////////////////////////////////////////////////////////////////

Dark Omen v1.1 beta

Ok whats new?
Decided to change to name.

Jumped to version 1.1 beta.

Added client/server options.
Have you ever wanted to log every node on an entire LAN?(local area network) Now you can. :-)

The program still has e-mail support for the log so nothings changed there.

Disable logging on local machine. (Good for when acting as a server)

The runtime files are now packed in with the logger into a single executable file. So you dont need to check for them on the target machine. file size is now approx 1.2 megs. small enough for a floppy.

ok....back to the client/server options. the keylogger can now be configured to act as a client or server. Which means you can install it on say 3 machines on a LAN and get two of them to upload their logs to one central server. (The third machine its installed on) the amount of clients is unlimited.(as far as I know) When the keylogger is installed you can configure it to act as a client or server but not both. If you configure it to act as a client every so many system re-boots the keylogger will upload its log to a server you specify.(the keylogger installed on another machine) You can also enable it to e-mail the log but I dont advise it. When the keylogger sends its log to a server or e-mails it, the log file is then deleted so you could end up with half a log by e-mail and the other by server. If the keylogger is acting as a client I suggest you dont enable e-mail support.
 
If you configure the keylogger to act as a server what it does is listen on a port you specify and wait for logs to be sent. When it receives a log the data is added to the main log file. you can enable e-mailing of the log file when the keylogger is acting as a server. you should have no problems doing this.

Both client and server options are built into the keylogger. NOTE the clients and servers can only talk to each other so dont try getting the client to upload to a http server or anything like that. The server you upload to should be the keylogger installed on another machine acting as a server not client. (just making sure you understand :-) ) 

When you set up the keylogger to act as a server you have the option of specifying what port it listens on. 
When set up as a client you MUST put in the server IP and port its listening on for obvious reasons.  

All options can be configured through the config screen. this is accessed by the keylogger being run with the "/show" command line switch. 

e.g. "C:/windows/logger.exe /show"  in a dos window. 

The logger can now detect its self running so you should not have multiple instances going now.

for those of you who cannot get into the config screen I have included a launcher. It should be included in a zip with this program named "launcher.zip" read the readme in it for instructions.

The logger is self-installing from a single executable named setup.exe. this can be renamed to anything. When the file is run all it does is ask for a path to install to. After install the logger is automatically launched with default settings. So I suggest you set it up.

The logger will not show up in the add/remove programs anymore so to uninstall do the following 

Delete the reg keys :-

HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices", "Win32SysTray"
HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "Win32SysTray"

re-boot and delete the loggers files.

I take no responsibility for ANY damage caused by this program or if it is miss-used in ANY way.
This program is a work in progress so please if you find any bugs please report them.(to me)

KNOWN BUGS 
When first installed on a machine you may receive a few empty logs/e-mails. (should be fixed in the next release)

IM sure there are more.


ok ............ I think thats everything. have fun. :-)

P.S anyone interested in writing a better set of instructions on how to use this program please contact me.(needs better instructions) 


/////////////////////////////////////////////////////////////////////////////////////////////
--------------------------------------------------------------------------------------------
////////////////////////////////////////////////////////////////////////////////////////////


This is the next release of stealth keylogger v0.9.1.

Added email support. The log file can now be mailed to a certain e-mail 
address every so many system reboots. Also config screen added. 
To access the config screen run the program with the command line switch "/show"

e.g. "C:/windows/logger.exe /show"  in a dos window. 

this should bring up a config screen for you to be able to alter the settings etc. When run in this mode the program will not edit the local machines reg so you dont have to worry about editing your own machine.

Included with this is a file called "Config201.ini" this is where all the config options for the logger are kept. DO NOT edit this file unless you know what your doing. when first run the program will look for this file in its current directory if the file is not found the program will just log keys like the first release. If it finds the file all the settings will be taked from this fileand used. so if you want to be able to email the log file this file needs to be included.

Have fun:)



///////////////////////////////////////////////////////////////////////
-----------------------------------------------------------------------
///////////////////////////////////////////////////////////////////////



This is a beta release v0.9 of a stealth keylogger.

If for any reason you are unable to get this program to start when windows starts
simply create a shortcut into the windows startup folder or any other way you can think of.

When first run on the remote computer it should automatically create the required reg enteries to run at startup BUT i have not been able to test this fully.

After installation from this setup package the program must be run once. After that it will be automatic.

Before running the program it must be in the folder its going to stay in. E.G the main windows directory.(C:\windows) and the file must be named whatever you want it to be. This is to ensure the reg enteries are correct. 
The log file created by this program is called dat.cab an is located in the same directory as the program executable. 

thats it

enjoy:)

  
bug reports, questions or if you just want to contact me e-mail  D0110101@hotmail.com
