Archive Helmet Icon Archive A Reconstructed © MegaSecurity Database

Theef 2.01

Released 21 years, 11 months ago. May 2004

Copyright © MegaSecurity

By tt


Informations
Author tt
Family Theef
Category Remote Access
Version Theef 2.01
Released Date May 2004, 21 years, 11 months ago.
Language Delphi
Additional Information
Server:
port: 6703, 2968 TCP

dropped files:
c:\WINDOWS\_wincd32.drv     size: 61 bytes 
c:\WINDOWS\msie-autoud.exe  size: 697.347 bytes 
c:\WINDOWS\wmmov32.drv      size: 0 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MSIEUpdate"
data: C:\WINDOWS\msie-autoud.exe

Author Information / Description
Changes;
 
 + New; Keylog parser
 + New; Detailed drive info
 + Editserver; meltserver and new keylogger settings
 + Improved file transfer window view (time taken/remaining, etc)
 + Fix; multiple (+10) local filename download bug
 + Fix; upload transfer speed recording
 + Fix; event manager OnInstall event should work better ;)
 + Improved event manager classes
 + Client layout tweaks

From previous readme; (yea, I'm lazy ... )

 + Compatibility; server should work on all Windows OS's

 + File caching; improves speed of file browser by only re-requesting the contents
   of a directory if it has actually changed, saving time and bandwidth

 + Hugely improved file management system, as well as file caching, there's local 
   icon caching, network browsing, integration with search/edit/transfer, fast
   access straight to common folders (desktop / documents)

 + Event manager; schedule events to happen at certain times, allowing you to
   automate server actions without needing to be connected to it

 + Plugin manager; extend the functionality of the server by creating/installing 
   plugins, which can also be used alongside the event manager

 + Keylogger; write all keys that are typed into specific window to a seperate file
   for easy password lookup


tt

This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized the Malware Gallery to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.