Body or headshot aimbot (crossfire version)
Body or headshot aimbot (crossfire version)
closed
i dont trust it myself
i dont trust it myself
clapman send me the dl link please cus it isnt approved yet so i can test it
Dude, ur just gunna get it then bugger off, not test it at all, clap send him a virus pl0x? :3
Originally Posted by Wolf
Dude, ur just gunna get it then bugger off, not test it at all, clap send him a virus pl0x? :3
funny
btw this is leeched
Inside is an exe with the icon similar to MSN.
Inside is a dll file EXACTLY 100 bytes big, that means the hack is not in the dll and the EXE is the only way.
The hack was posted by a BANNED user of a different site.
Google shows only one result for this hack besides MPGH, the banned person who posted it.
This hack smells like a gigantic fake. I hope you're a good person, clapman
Edit: Another hack was released on a different website with the same file
Programfile.dll, this is what one user posted about it
If this doesn't work (and people say it DOESN'T) then clapman is a malicious user..
Virustotal results for the dll (likely fake, it's 100bytes big probably holds no data) https://www.virustotal.com/analisis/...7fe-1252521192
Virus total results for the EXE (Doesn't look suspicious, but it does behave like a trojan, one scanner says. Not all trojans are detected, you must realize this. I got one the other day that wasn't detected by ANYTHING. Managed to remove it. Copied itself to temp directory under multiple names and ran on startup.)
http://www.virustotal.com/analisis/c...4cb-1252516492
EDIT TROUBLE IS HERE, OPEN THE DLL IN TEXT EDITOR.
THIS IS IT'S CONTENTS.
FTP.DRIVEHQ.COM
user
pass
Failed to open. Please download NETFRAMEWORK 2.0
n
n
n
n
n
n
THIS IS LIKELY A TROJAN.
EDIT: BUSTED, ian_kbot@hotmail.com IS THE EMAIL USED TO SIGN UP ON DRIVEHQ.COM WITH THOSE ACCOUNT DETAILS FOUND IN THE DLL.
Inside is a dll file EXACTLY 100 bytes big, that means the hack is not in the dll and the EXE is the only way.
The hack was posted by a BANNED user of a different site.
Google shows only one result for this hack besides MPGH, the banned person who posted it.
This hack smells like a gigantic fake. I hope you're a good person, clapman
Edit: Another hack was released on a different website with the same file
Programfile.dll, this is what one user posted about it
Do not Download this is *Programfile.dll* Decoded
ftp.drivehq.com
anupneupane
529539
The application failed to initialize properly (0xc000007b). Click Ok to terminate the application.
y
00:00:00
n
y
y
y
********.com
y
taskmgr.exe
ftp.drivehq.com
anupneupane
529539
The application failed to initialize properly (0xc000007b). Click Ok to terminate the application.
y
00:00:00
n
y
y
y
********.com
y
taskmgr.exe
Virustotal results for the dll (likely fake, it's 100bytes big probably holds no data) https://www.virustotal.com/analisis/...7fe-1252521192
Virus total results for the EXE (Doesn't look suspicious, but it does behave like a trojan, one scanner says. Not all trojans are detected, you must realize this. I got one the other day that wasn't detected by ANYTHING. Managed to remove it. Copied itself to temp directory under multiple names and ran on startup.)
http://www.virustotal.com/analisis/c...4cb-1252516492
EDIT TROUBLE IS HERE, OPEN THE DLL IN TEXT EDITOR.
THIS IS IT'S CONTENTS.
FTP.DRIVEHQ.COM
user
pass
Failed to open. Please download NETFRAMEWORK 2.0
n
n
n
n
n
n
THIS IS LIKELY A TROJAN.
EDIT: BUSTED, ian_kbot@hotmail.com IS THE EMAIL USED TO SIGN UP ON DRIVEHQ.COM WITH THOSE ACCOUNT DETAILS FOUND IN THE DLL.
Originally Posted by Naka
Inside is an exe with the icon similar to MSN.
Inside is a dll file EXACTLY 100 bytes big, that means the hack is not in the dll and the EXE is the only way.
The hack was posted by a BANNED user of a different site.
Google shows only one result for this hack besides MPGH, the banned person who posted it.
This hack smells like a gigantic fake. I hope you're a good person, clapman
Edit: Another hack was released on a different website with the same file
Programfile.dll, this is what one user posted about it
If this doesn't work (and people say it DOESN'T) then clapman is a malicious user..
Inside is a dll file EXACTLY 100 bytes big, that means the hack is not in the dll and the EXE is the only way.
The hack was posted by a BANNED user of a different site.
Google shows only one result for this hack besides MPGH, the banned person who posted it.
This hack smells like a gigantic fake. I hope you're a good person, clapman
Edit: Another hack was released on a different website with the same file
Programfile.dll, this is what one user posted about it
If this doesn't work (and people say it DOESN'T) then clapman is a malicious user..
Originally Posted by clapman2k9
thanks for telling me
If this email matches up to somebody, he should be banned immediately. Whose email does match up to that likely is the culprit here.
Clapman2k9, you said in your post that this hack worked. To me it looks like a pile of shit, and I doubt there's a hack packaged in with it. If this is confirmed fake, I hope you're banned for your blatant lies.
Note to administrator: Admin, check his post edit, if you can see him claim this works and it doesn't, clapman has been a very bad boy, or mistakenly copypasted it from another forum which claimed it worked. If the email matches up to a forum user, be suspicious of him, this is the email I found linked to the FTP account found in the DLL.
Originally Posted by Naka
Yeah well, I updated my post. I logged in to the FTP account with the username and pass shown in the DLL file (actually just a text file.) I changed the password of the account, and found the email ian_kbot@hotmail.com was used to register this FTP account that is likely used by the trojan to send keylogging logs.
If this email matches up to somebody, he should be banned immediately. Whose email does match up to that likely is the culprit here.
Clapman2k9, you said in your post that this hack worked. To me it looks like a pile of shit, and I doubt there's a hack packaged in with it. If this is confirmed fake, I hope you're banned for your blatant lies.
Note to administrator: Admin, check his post edit, if you can see him claim this works and it doesn't, clapman has been a very bad boy, or mistakenly copypasted it from another forum which claimed it worked. If the email matches up to a forum user, be suspicious of him, this is the email I found linked to the FTP account found in the DLL.
If this email matches up to somebody, he should be banned immediately. Whose email does match up to that likely is the culprit here.
Clapman2k9, you said in your post that this hack worked. To me it looks like a pile of shit, and I doubt there's a hack packaged in with it. If this is confirmed fake, I hope you're banned for your blatant lies.
Note to administrator: Admin, check his post edit, if you can see him claim this works and it doesn't, clapman has been a very bad boy, or mistakenly copypasted it from another forum which claimed it worked. If the email matches up to a forum user, be suspicious of him, this is the email I found linked to the FTP account found in the DLL.
Originally Posted by Kev
LOLz I agree
Yeah, I changed the password and email to the FTP account. Lul.
Here's an example of his keylogs
----------- New Tab - Google Chrome (9/5/2009 4:08:36 PM) ------------
mib[BSpace]nin
----------- Mininova : The ultimate BitTorrent source! - Google Chrome (9/5/2009 4:08:54 PM) ------------
autocad 2010
----------- New Tab - Google Chrome (9/5/2009 4:10:12 PM) ------------
google
----------- Google - Google Chrome (9/5/2009 4:10:32 PM) ------------
[DEL]pro 9[BSpace]
----------- ForumW.org :: Applications - Google Chrome (9/5/2009 4:11:04 PM) ------------
[LArrow][LArrow][LArrow][LArrow][LArrow][DEL]9
[END]
[LArrow][LArrow][LArrow][LArrow][BSpace][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL]
----------- macromedia flash pro 9 - Google Search - Google Chrome (9/5/2009 4:11:57 PM) ------------
tamilwire[CTRL]
[/CTRL]
mib[BSpace]nin
----------- Mininova : The ultimate BitTorrent source! - Google Chrome (9/5/2009 4:08:54 PM) ------------
autocad 2010
----------- New Tab - Google Chrome (9/5/2009 4:10:12 PM) ------------
----------- Google - Google Chrome (9/5/2009 4:10:32 PM) ------------
[DEL]pro 9[BSpace]
----------- ForumW.org :: Applications - Google Chrome (9/5/2009 4:11:04 PM) ------------
[LArrow][LArrow][LArrow][LArrow][LArrow][DEL]9
[END]
[LArrow][LArrow][LArrow][LArrow][BSpace][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL][DEL]
----------- macromedia flash pro 9 - Google Search - Google Chrome (9/5/2009 4:11:57 PM) ------------
tamilwire[CTRL]
[/CTRL]
And also this into googletalk: muthu.avs [TAB]muthuavs*****[SHFT]*[/SHFT]
If someone wants to add him, or his friend, tell him he's being keylogged or has been keylogged. He will probably thank you for it.
Naka niceeee thanks.
Mmk.
This should get closed pretty fast, gonna get spammed like hell.
This should get closed pretty fast, gonna get spammed like hell.
They should Close this now because now this is useless
He got pwnt.
But he leeched it even if it doesnt work he leeched from another site and he should know if it works or not.
/closed :_
This thread is closed for replies.
