Skip to content
AlMA PRO LEADER edited this page May 28, 2017 · 16 revisions

Welcome to the AlMA.PRO.SPY wiki!

What is it?

AlMA.PRO.SPY is an open-source botnet developed by A.R.M-Y H4CK3RZ. This botnet is capable of alot of things. Check functions

How to use it

Simply you download the source code, set your settings, compile it and hack the planet.

How to set settings

You'll need to know which settings are yours. Visit this wiki page

Commands

There are many commands and they're common across connections. Check APSSH, IRC and C&C server.

How to remove it

We've had this question before!

In case you've set something wrong and tested it on your device noticing it won't connect to C&C server, you have two solutions:

  • Erase it manually:
  1. Make sure the bot's process is killed.
  2. Navigate to HKEY_CURRENT_USER\Software\APS with registry editor and delete it completely.
    3.Use one of the following:
  • A - Navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce with registry editor and delete the value with bot's id name (in case there is a one. otherwise, use B).
  • B - Open up start menu and search for sch (if using English) or run C:\Windows\system32\taskschd.msc from the run prompt (Win+R).
    Now click on Task Scheduler Library and wait for few seconds and then delete the task with the bot's id as name.
  1. Erase the executable from your device and you're fresh as fish.
  • Compile another version with the right settings and run it:
  1. Make sure the bot's process is killed.
  2. use one of the following:
  • A - Set the settings to your local IP and run the CPanel on it (No need for internet).
  • B - Set the settings to your server.
  1. Run it in an empty folder (the step 5 will make the bot erase every file in the directory).
  2. Wait for the bot to connect.
  3. Once connected click on it from the CPanel and choose the tab CCC in the Live Control and click Delete bot!.
  4. Terminate the process running the bot and run it again.
    You should see it removing itself automatically.
Clone this wiki locally