From the doc: ' 1 KeyloggingKeylogging will not work immediatley. First, you must do this: 1. Connect to the target. 2. Open the File System. 3. Upload the keylogging DLL in your local NetSphere directory (khd2.dll) to their C:WINDOWSSYSTEM directory, or wherever their WINDOWSSYSTEM directory is. You can't rename this file. 4. After the upload has finished, go Target > Server > Restart Server. It is still a little buggy, and for some unknown reason, makes some games (namely Quake II) exit unexpectedly.2 Newbie Directions1. The target MUST run the server ("NetSphereServer.exe") on their computer. You can either run this on their computer yourself, or you can rename it to something and then trick them into running it. 2. Get their IP. There are many ways of doing this; the best way is with ICQ. Go to section 5 fore more detailed instructions. 3. Run the client (NetSphereClient.exe). Enter their IP into the "IP or DNS" box, and hit "Connect". Keep an eye on the status bar. Once it has connected, the "Target" button will become active. You can then do stuff to/on the remote computer. 3. When you're done, hit "Disconnect", or just close the client. 3 Client Parameters NetSphereClient.exe /connect (IP or DNS) You can directly connect to an IP with the /connect parameter. NetSphereClient.exe /debug You can have it display debug info (for your prying eyes) with the /debug parameter. If the client is behaving strangely, you may want to have it display various tidbits of information, to assist in tracking down your problem. NetSphereClient.exe /noannounce The client won't try to download the announcements from the NetSphere web server. This is usefull if you don't have internet access from where you are operating. 4 Server Parameters NetSphereServer.exe /visible You can run the server in Visible mode. You can then configure some extra features via the server's GUI. 5 Getting an IP from ICQ1. Right-click on one of your contacts, then select "Info" (near the bottom). 2. Their IP will be in the box labeled "Current/Last IP". 3. Right-click in the IP box, then select "Select All". 4. Right-click in the IP box (again), then select "Copy". 5. Open NetSphere Client. 6. Right-click inside the "IP or DNS" box, then select "Paste". 7. Click on "Connect".
Backdoor.NetSphere.127Backdoor.NetSphere.130 Backdoor.NetSphere.131Backdoor.NssKill
netsphere129.exenetsphereclient.exenetsphereserver.exenrsvr.exens.exeWindowssystem ssx.exe
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionun ssx