__Andy__ Posted January 18, 2009 Report Posted January 18, 2009 Incercati asta.http://rapidshare.com/files/186045869/CrackMe.exe.html Quote
OrIaX Posted January 18, 2009 Report Posted January 18, 2009 Explica:Trojan.AutoIt.genW32/Autorun.worm.zf.gen Quote
__Andy__ Posted January 18, 2009 Author Report Posted January 18, 2009 (edited) http://www.autoitscript.com/forum/index.php?showtopic=34658Din cauza faptului ca multi virusi sunt facuti in AutoIt cele mai multe produse antivirus considera programele facute in AutoIt drept virusi. Daca considerati ca este virus un moderator sa stearga topicul. Daca vrei iti trimit sursa.ps: cum pot trimite un pm? Edited January 18, 2009 by __Andy__ Quote
OrIaX Posted January 18, 2009 Report Posted January 18, 2009 daca e sa sau nu virus pe mine nu ma intereseaza doar ca primul tau post pe rst este un Crackme . nu crezi ca era mai simplu sa te prezinti sa "te bagi si tu putin in seama" si dupa aia sa ai pretentii ca cineva sa "se joace" cu crackme-ul tau? Quote
__Andy__ Posted January 18, 2009 Author Report Posted January 18, 2009 (edited) @viruszFelicitari, a fost simplu. Daca ai timp poti sa imi trimti un pm sa imi spui cum ai rezolvat.@orIaXL-am scanat pe virustotal.comNu ar trebui sa ai probleme decat daca folosesti unul dintre astea:CAT-QuickHeal Trojan.AutoIt.geneSafe Suspicious FileMcAfee W32/Autorun.worm.zf.genMcAfee+Artemis W32/Autorun.worm.zf.genDupa cum am mai spus nu esti obligat sa il rulezi si dimpotriva nu tin sa ma bag in seama desi o sa trec si pe la prezentari. Edited January 18, 2009 by __Andy__ Quote
cmiN Posted January 18, 2009 Report Posted January 18, 2009 Iati autoit de la ei de pe site ca are un tool cu care covertesti din .exe in .au3 si te convingi din sursa ... si intelegi din start ca mi se pare mai simplu si ca batch ca limbaj si totusi poti face multe minuni cu el, pacat ca devine asa usor vulnerabil la av-uri :/. Quote
__Andy__ Posted January 18, 2009 Author Report Posted January 18, 2009 Pe versiunea 3 nu functioneaza decompilatorul, doar ceva versiuni facute de unii useri si nu sunt facute publice. Deci nu cred ca asta a fost metoda folosita de virusz. Quote
virusz Posted January 18, 2009 Report Posted January 18, 2009 no bine.. poate am ghicit.. ?sunt mai multe metode de a rezolva acest crackme, eu am facut cam asa:1. am rulat crackme.exe , cand am vazut ca e autoit, m-am gandit ca poate gasesc ceva prin temp....2. nu am gasit atunci am facut un mic script care arata cam asa:@echo offmd c:\crackmefilez:crif exist c:\crackmefiles\*.* exitstart crackme.execopy "C:\Documents and Settings\sexanal\Local Settings\Temp\*.tmp" c:\crackmefileztaskkill /F /IM crackme.exegoto cr3. am rulat scriptul si am gasit in crackmefilez 1 fisier, dupa care in temp altul care arata cam asa:437261636B204D65T5218[323030T5218[3830T5218[31T5218[31T5218[333832323035393532T5218[333835T5218[555345524E414D45T5218[35T5218[35T5218[313930T5218[3230T5218[31T5218[50415353574F5244T5218[35T5218[3330T5218[313930T5218[3230T5218[31T5218[3332T5218[434F4E4649524DT5218[3530T5218[3535T5218[313030T5218[3230T5218[4053575F53484F57T5218[31T5218[30T5218[437261636B204D65T5218[436F727265637420757365726E616D6520616E642070617373776F7264T5218[30T5218[437261636B204D65T5218[496E636F727265637420757365726E616D6520616E642070617373776F7264T5218[33T5218[3230T5218[4. de aici nu mai zic ca be simplu... scuze daca nu trebuia sa zic dar ziceti ca imediat editez , is si alte metode Quote
cmiN Posted January 18, 2009 Report Posted January 18, 2009 Pai crack-me asta e facut in v3 sau v2 ? Mie imi merge decompilatorul pt. orice script valid in v3.@Virusz: crackme asta face un .tmp cu parola encryptata si o verifica daca coincide cu cea inserata sau ceva de genu ?Banuiesc ca se poate si cu ollydbg... o sa incerc mai tarziu. Quote
virusz Posted January 18, 2009 Report Posted January 18, 2009 @cmin: ceva de genu... + click dreapta->version si vezi ca e v3si daca te referi la exe2aut , el poate decompila doar daca autorul nu a pus o parolama intreb.. oare asta se poate numi crackme? Quote
cmiN Posted January 18, 2009 Report Posted January 18, 2009 Da corect ... daca e v3 sigur poate fi decompilat doar daca userul a lasat sa poata fi. Quote
Hertz Posted January 22, 2009 Report Posted January 22, 2009 Rahat,cand vroiam sa il trec si eu : This file is neither allocated to a Premium Account, or a Collector's Account, and can therefore only be downloaded 10 times.This limit is reached.To download this file, the uploader either needs to transfer this file into his/her Collector's Account, or upload the file again. The file can later be moved to a Collector's Account. The uploader just needs to click the delete link of the file to get further information. Quote
virusz Posted January 22, 2009 Report Posted January 22, 2009 za link:http://www.testeweb.com/rst/ftp/virusz/CrackMe.rar Quote
