[TETYYSs]

I am searching for that tool, of course without binded malware. I noticed that Xilytol uses it.

[Xylitol]

http://alienvault-labs-garage.googlecod ... _binary.py
or the original tool of the coder is in attach.

[funct10n]

Xylitol, Have you seen any variance in the key?

[Xylitol]

nope

[aaSSfxxx]

The key changes depending of the version of darkcomet.

For a darkcomet 4, the key will be #KCMDDC4#-890, for darkcomet 5, it's #KCMDDC5#-890 and for darkcomet >= 5.1, the key becomes #KCMDDC51#-890