Undetected .dll injector

**CyberGenius** · 01-15-2010

Here is a .dll Injector wich is undetected by X-Trap i hope this is usefull
credits goto 1nixmzengs if this is usefull dont forget to say thanks!

Injector.rar - Jotti's malware scan

Virustotal. MD5: a7bf0661f5a8b8be179a1da8078c5a93 Riskware.Tool.inj.268800 probably a variant of Win32/Agent Win-Trojan/Poison.268800

This will come up with virus positives because of the nature of the injector!!!
Its Packed with themida to prevent it from being cracked!!!

**mokitown** · 01-16-2010

lol jsut take PerX it work great with the right hack XD

**CyberGenius** · 01-16-2010

Its not Perx you fking choobs!

**Greengo** · 01-16-2010

Originally Posted by ROUTE66

Its not Perx you fking choobs!

Dont need to say Bad Words.. Just say its not Perx thats all.

-Greengo-

**NextGen1** · 01-16-2010

Can I ask why this has been approved?

Code:

a-squared	4.5.0.50	2010.01.15	-
AhnLab-V3	5.0.0.2	2010.01.15	Win-Trojan/Poison.268800
AntiVir	7.9.1.142	2010.01.15	SPR/Tool.inj.268800
Antiy-AVL	2.0.3.7	2010.01.12	Backdoor/Win32.Poison.gen
Authentium	5.2.0.5	2010.01.15	-
Avast	4.8.1351.0	2010.01.15	-
AVG	9.0.0.730	2010.01.15	BackDoor.Generic12.DEJ
BitDefender	7.2	2010.01.15	-
CAT-QuickHeal	10.00	2010.01.15	Trojan.Agent.ATV
ClamAV	0.94.1	2010.01.15	Trojan.Poison-595
Comodo	3592	2010.01.15	VirTool.Win32.Hacktool.Agent.~B
DrWeb	5.0.1.12222	2010.01.15	BackDoor.Poison.2753
eSafe	7.0.17.0	2010.01.14	-
eTrust-Vet	35.2.7239	2010.01.15	-
F-Prot	4.5.1.85	2010.01.15	-
F-Secure	9.0.15370.0	2010.01.15	-
Fortinet	4.0.14.0	2010.01.15	PossibleThreat
GData	19	2010.01.15	-
Ikarus	T3.1.1.80.0	2010.01.15	Backdoor.Win32.Poison
Jiangmin	13.0.900	2010.01.15	Backdoor/Poison.err
K7AntiVirus	7.10.948	2010.01.15	Backdoor.Win32.Poison.axpt
Kaspersky	7.0.0.125	2010.01.15	Backdoor.Win32.Poison.bdmi
McAfee	5861	2010.01.14	Generic BackDoor!bsf
McAfee+Artemis	5861	2010.01.14	Generic BackDoor!bsf
McAfee-GW-Edition	6.8.5	2010.01.15	Riskware.Tool.inj.268800
Microsoft	1.5302	2010.01.15	-
NOD32	4775	2010.01.15	probably a variant of Win32/Agent
Norman	6.04.03	2010.01.14	-
nProtect	2009.1.8.0	2010.01.15	-
Panda	10.0.2.2	2010.01.15	Suspicious file
PCTools	7.0.3.5	2010.01.15	-
Prevx	3.0	2010.01.15	Medium Risk Malware
Rising	22.30.04.04	2010.01.15	-
Sophos	4.49.0	2010.01.15	Mal/Generic-A
Sunbelt	3.2.1858.2	2010.01.15	-
Symantec	20091.2.0.41	2010.01.15	-
TheHacker	6.5.0.4.151	2010.01.15	-
TrendMicro	9.120.0.1004	2010.01.15	-
VBA32	3.12.12.1	2010.01.15	Backdoor.Win32.Poison.axpt
ViRobot	2010.1.15.2138	2010.01.15	-
VirusBuster	5.0.21.0	2010.01.15	Backdoor.Poison.WKF

**greathamza** · 01-16-2010

Originally Posted by NextGen1

Can I ask why this has been approved?

Code:

a-squared	4.5.0.50	2010.01.15	-
AhnLab-V3	5.0.0.2	2010.01.15	Win-Trojan/Poison.268800
AntiVir	7.9.1.142	2010.01.15	SPR/Tool.inj.268800
Antiy-AVL	2.0.3.7	2010.01.12	Backdoor/Win32.Poison.gen
Authentium	5.2.0.5	2010.01.15	-
Avast	4.8.1351.0	2010.01.15	-
AVG	9.0.0.730	2010.01.15	BackDoor.Generic12.DEJ
BitDefender	7.2	2010.01.15	-
CAT-QuickHeal	10.00	2010.01.15	Trojan.Agent.ATV
ClamAV	0.94.1	2010.01.15	Trojan.Poison-595
Comodo	3592	2010.01.15	VirTool.Win32.Hacktool.Agent.~B
DrWeb	5.0.1.12222	2010.01.15	BackDoor.Poison.2753
eSafe	7.0.17.0	2010.01.14	-
eTrust-Vet	35.2.7239	2010.01.15	-
F-Prot	4.5.1.85	2010.01.15	-
F-Secure	9.0.15370.0	2010.01.15	-
Fortinet	4.0.14.0	2010.01.15	PossibleThreat
GData	19	2010.01.15	-
Ikarus	T3.1.1.80.0	2010.01.15	Backdoor.Win32.Poison
Jiangmin	13.0.900	2010.01.15	Backdoor/Poison.err
K7AntiVirus	7.10.948	2010.01.15	Backdoor.Win32.Poison.axpt
Kaspersky	7.0.0.125	2010.01.15	Backdoor.Win32.Poison.bdmi
McAfee	5861	2010.01.14	Generic BackDoor!bsf
McAfee+Artemis	5861	2010.01.14	Generic BackDoor!bsf
McAfee-GW-Edition	6.8.5	2010.01.15	Riskware.Tool.inj.268800
Microsoft	1.5302	2010.01.15	-
NOD32	4775	2010.01.15	probably a variant of Win32/Agent
Norman	6.04.03	2010.01.14	-
nProtect	2009.1.8.0	2010.01.15	-
Panda	10.0.2.2	2010.01.15	Suspicious file
PCTools	7.0.3.5	2010.01.15	-
Prevx	3.0	2010.01.15	Medium Risk Malware
Rising	22.30.04.04	2010.01.15	-
Sophos	4.49.0	2010.01.15	Mal/Generic-A
Sunbelt	3.2.1858.2	2010.01.15	-
Symantec	20091.2.0.41	2010.01.15	-
TheHacker	6.5.0.4.151	2010.01.15	-
TrendMicro	9.120.0.1004	2010.01.15	-
VBA32	3.12.12.1	2010.01.15	Backdoor.Win32.Poison.axpt
ViRobot	2010.1.15.2138	2010.01.15	-
VirusBuster	5.0.21.0	2010.01.15	Backdoor.Poison.WKF

so that you have something to ask about

**NextGen1** · 01-16-2010

Originally Posted by greathamza

so that you have something to ask about

..................?????

Yeah, MPGH.net has Minions who actually protect the user, and a Choob(newb) was allowed to upload a Injector that is flooded with redflags, considering it is not the typical to allow choobs to raise red flags, Im curious why it was allowed,....

**DeathHunter** · 01-16-2010

Originally Posted by NextGen1

..................?????

Yeah, MPGH.net has Minions who actually protect the user, and a Choob(newb) was allowed to upload a Injector that is flooded with redflags, considering it is not the typical to allow choobs to raise red flags, Im curious why it was allowed,....

That's because it's packed with Themidia/

**NextGen1** · 01-16-2010

at least that explains it

makes it hard to verify a legitimate threat though ,

the "company" who designed the software has been making cracks for a long time, and so far so (safe) good.

Just more curious as to how it got through

(I still say someone ollydbg it [IMO])

**respoesta1** · 01-16-2010

hi isn't this xinject just with the name changed

**noobybanana** · 01-16-2010

Originally Posted by respoesta1

hi isn't this xinject just with the name changed

NO.com

read everything that ask stupid questions -.-

**CyberGenius** · 01-17-2010

Originally Posted by NextGen1

Can I ask why this has been approved?

Code:

a-squared	4.5.0.50	2010.01.15	-
AhnLab-V3	5.0.0.2	2010.01.15	Win-Trojan/Poison.268800
AntiVir	7.9.1.142	2010.01.15	SPR/Tool.inj.268800
Antiy-AVL	2.0.3.7	2010.01.12	Backdoor/Win32.Poison.gen
Authentium	5.2.0.5	2010.01.15	-
Avast	4.8.1351.0	2010.01.15	-
AVG	9.0.0.730	2010.01.15	BackDoor.Generic12.DEJ
BitDefender	7.2	2010.01.15	-
CAT-QuickHeal	10.00	2010.01.15	Trojan.Agent.ATV
ClamAV	0.94.1	2010.01.15	Trojan.Poison-595
Comodo	3592	2010.01.15	VirTool.Win32.Hacktool.Agent.~B
DrWeb	5.0.1.12222	2010.01.15	BackDoor.Poison.2753
eSafe	7.0.17.0	2010.01.14	-
eTrust-Vet	35.2.7239	2010.01.15	-
F-Prot	4.5.1.85	2010.01.15	-
F-Secure	9.0.15370.0	2010.01.15	-
Fortinet	4.0.14.0	2010.01.15	PossibleThreat
GData	19	2010.01.15	-
Ikarus	T3.1.1.80.0	2010.01.15	Backdoor.Win32.Poison
Jiangmin	13.0.900	2010.01.15	Backdoor/Poison.err
K7AntiVirus	7.10.948	2010.01.15	Backdoor.Win32.Poison.axpt
Kaspersky	7.0.0.125	2010.01.15	Backdoor.Win32.Poison.bdmi
McAfee	5861	2010.01.14	Generic BackDoor!bsf
McAfee+Artemis	5861	2010.01.14	Generic BackDoor!bsf
McAfee-GW-Edition	6.8.5	2010.01.15	Riskware.Tool.inj.268800
Microsoft	1.5302	2010.01.15	-
NOD32	4775	2010.01.15	probably a variant of Win32/Agent
Norman	6.04.03	2010.01.14	-
nProtect	2009.1.8.0	2010.01.15	-
Panda	10.0.2.2	2010.01.15	Suspicious file
PCTools	7.0.3.5	2010.01.15	-
Prevx	3.0	2010.01.15	Medium Risk Malware
Rising	22.30.04.04	2010.01.15	-
Sophos	4.49.0	2010.01.15	Mal/Generic-A
Sunbelt	3.2.1858.2	2010.01.15	-
Symantec	20091.2.0.41	2010.01.15	-
TheHacker	6.5.0.4.151	2010.01.15	-
TrendMicro	9.120.0.1004	2010.01.15	-
VBA32	3.12.12.1	2010.01.15	Backdoor.Win32.Poison.axpt
ViRobot	2010.1.15.2138	2010.01.15	-
VirusBuster	5.0.21.0	2010.01.15	Backdoor.Poison.WKF

Ban the choob!!!

**henky21** · 01-17-2010

DOESN'T FUCKING WORK, my com sais that I ain't got the rights wdf.

**NextGen1** · 01-17-2010

Originally Posted by ROUTE66

Ban the choob!!!

[IMG]https://i111.photobucke*****m/albums/n121/golmor/noobalert-1.jpg[/IMG]

'Bans Newbs
Private Function (ROUTE66)(ByVal noob As username , ByVal report_post As report)
If check_the_post(noob,report_post,BREAKING_RULES) = True Then
Return BAN_THE_NOOB(noob)
End If
'Nothing
Return Nothing
End Function

Debugging.......
check_the_post(noob,report_post,BREAKING_RULES) returned true at location
https://www.mpgh.net/forum/175-crossf...ml#post1455920
Route66 = Troll
BAN_THE_NOOB

A. I'm respected and well known in the community
B. I'm questioning it for a legitimate reason, your a choob posting crap which sends up red flags, we don't know you
C. Ha ha, Like I would get banned , I've been nothing but helpful at mpgh.net
D. Everything may be ok, I just don't trust anything that's Packed with themida because it is used alot to mask virus' and your still a newb.

**CyberGenius** · 01-17-2010

Originally Posted by henky21

DOESN'T FUCKING WORK, my com sais that I ain't got the rights wdf.

You may need to run as admin!!! hope this helps

**greathamza** · 01-17-2010

Originally Posted by henky21

DOESN'T FUCKING WORK, my com sais that I ain't got the rights wdf.

turnt off your AV

Thread: Undetected .dll injector

Thread Tools

Display

Undetected dll injector

The Following 33 Users Say Thank You to CyberGenius For This Useful Post:

The Following User Says Thank You to CyberGenius For This Useful Post:

The Following 2 Users Say Thank You to CyberGenius For This Useful Post:

The Following User Says Thank You to henky21 For This Useful Post:

The Following User Says Thank You to CyberGenius For This Useful Post:

Similar Threads

Is There Any Undetected DLL Injectors For Vindictus

.dll injector

~ DLL Injector Source Code ~

How to create a DLL Injector in VB6 ?

dll injector