alexalghisi Posted July 22, 2010 Report Share Posted July 22, 2010 (edited) It is made in VB.NET so it requires .NET framework to work!Screenshot:Download link:-DELETED-Password:NK8oWRTmdmduUmaRBvMgWadprcCnuuohEncrypted with: BASE-64 > TRIPO-5 > FERON-74.You should decrypt it with: FERON-74 > TRIPO-5 > BASE-64If you have troubles with the password, post here and I will help you. :)Have fun! L.E: virusat Edited July 22, 2010 by alexalghisi Quote Link to comment Share on other sites More sharing options...
zYztem Posted July 22, 2010 Report Share Posted July 22, 2010 (edited) Ciudat partea a doua din parola decryptata, revin cu un edit dupa test.Edit 1: Smechera parola Edit 2: Stealer dupa cate vad eu aici un Istealer cryptat cu crypterul lui BUNNN. Edited July 22, 2010 by zYztem Quote Link to comment Share on other sites More sharing options...
curiosul Posted July 22, 2010 Report Share Posted July 22, 2010 flAmingw0rmdaca asta este parola de ce nu merge? Quote Link to comment Share on other sites More sharing options...
zYztem Posted July 22, 2010 Report Share Posted July 22, 2010 Pentru ca parola care functioneza este cea cryptata in forma cryptata dar eu nu te sfatuiesc sa il folosesti petru ca are iStealerul implementat. Deci iti fura doar parolele, programul nu este functional iti da erroare ( fake ). Quote Link to comment Share on other sites More sharing options...
curiosul Posted July 22, 2010 Report Share Posted July 22, 2010 Multumesc, oricum il rulam in sandbox. Quote Link to comment Share on other sites More sharing options...
zYztem Posted July 22, 2010 Report Share Posted July 22, 2010 Cu placere. Totusi daca cineva are chef de joaca sa il analizeze cu wireshark sa vada unde trimite logurile, ciudat ce se vede in traffic Quote Link to comment Share on other sites More sharing options...
famouz Posted July 22, 2010 Report Share Posted July 22, 2010 mai devreme vroia sa ia legatura cu RUNNN Quote Link to comment Share on other sites More sharing options...
zYztem Posted July 22, 2010 Report Share Posted July 22, 2010 (edited) A reusit inseamna Cam toate stealerele fac aceiasi mizerie in loguri, stealerul lui bunnn crypteaza putin in traffic dar asta cum crypteaza este ciudat, n-am mai vazut asa ceva inainte. Poate uni care or mai verificat cacate de astea or vazut, care ati mai facut asa ceva uitativa peste el poate voi stiti ca eu nu mi-am dat seama unde e hostingul Edit: Ah.. poate nu e crypted doar FC Stealer V2. Pe ala nu l-am incercat inca..Edit 2 : Vad ca V2 are o buba Probabil omu era atat de grabit incat a uitat sa schimbe "PHP URL" -ul l-a lasat http://www.host.com/index.php asta si aparea in logurile wshark. Chiar ca n-am mai vazut asa ceva inainte! Dupa ce cacat infectezi ceva cu stealer daca nu il poti folosi la nimica.. Edited July 22, 2010 by zYztem Quote Link to comment Share on other sites More sharing options...
alexalghisi Posted July 22, 2010 Author Report Share Posted July 22, 2010 am observat si eu ca este stealer .... dar din cate am incercat sa-mi dau seama nu este nici FC Stealer nici Istealer ... cred ca este spam stealer imi pare rau ca nu am observat mai repede ,puteti sa stergeti topicu L.E.: sper sa nu se fi fraierit careva [cea mai buna solutie este sandboxie ] Quote Link to comment Share on other sites More sharing options...
zYztem Posted July 22, 2010 Report Share Posted July 22, 2010 (edited) Sau pentru paranoici VirtualBox > DeepFreeze > SandBoxie Stiu cazuri!Edit: alexalghisi da si tu un edit pana vine un admin la primul post si sterge adresa. Edited July 22, 2010 by zYztem Quote Link to comment Share on other sites More sharing options...
Guest Mosad Posted July 22, 2010 Report Share Posted July 22, 2010 eu am un steam stealer cryptat cu un crypter public de aprox. o luna si e inca fud.nu vreau sa-l supar pe bunnn dar mai alege-ti cumparatorii,ca dai un uber tool la ciutani de 14-15 ani care n-au ce face. Quote Link to comment Share on other sites More sharing options...
zYztem Posted July 22, 2010 Report Share Posted July 22, 2010 Sunt total deacord cu tine Mosad! Quote Link to comment Share on other sites More sharing options...
Andblood Posted July 22, 2010 Report Share Posted July 22, 2010 L-ai luat de pe hf ? Quote Link to comment Share on other sites More sharing options...
