ZXBotV2.0 + zoom hack by Se7en.

se7en. · 03/07/2009, 10:12

Instructions:

1. set elementclient.exe to 800x600 resolution

2. open elementclient.exe

3. run ZXBotV2.0BySE7EN.exe, and Config_OffSet.ini will appear

4. configure bot settings

Notes:

*please can bot first at http://www.virustotal.com/

*bot only runs under 32 bit xp

*if the bot fails to run please intstall .NET framework at

*Bot runs on Tru Tien Online , ZX TH and ZX PH

Updates:

* Screenshot 1

* Screenshot 2

Virus total results:

Red results are falsed positives

Zip password:

Code:

se7en777

zarimier · 03/07/2009, 12:45

so??? who's gona try it first???? any volunteer ^^

Nacirema · 03/07/2009, 13:02

What does this mean?

se7en. · 03/07/2009, 14:54

Quote:

Originally Posted by Nacirema

What does this mean?

run elementclient.exe first before executing the bot

keile · 03/07/2009, 15:55

Quote:

Originally Posted by se7en.

run elementclient.exe first before executing the bot

Still doesn't work. Same old message.

ColdFire_ · 03/08/2009, 01:43

Going to try this on MY-EN (Malaysia English) version later. hope it works

harvzliar · 03/08/2009, 04:01

The message still appears

keile · 03/08/2009, 04:56

**** you se7en!!!!

GUYS DON'T TRY THIS!!

This contains a keylogger.. the reason that popup opens is that it copies a keylogger on C:\documents and settings\username\Local Settings\Temp\Tmp\sysinlt.exe

He hacked all my gold, my +6 armor, +7 weapon, all my 150+ refining phylacteries, my element pearls, my lv90 future armors and weapons, huh, you left one +3 lv90 armors huh

Are you happy now? Makakarma ka rin.

se7en. · 03/08/2009, 05:23

Quote:

Originally Posted by keile

**** you se7en!!!!

GUYS DON'T TRY THIS!!

This contains a keylogger.. the reason that popup opens is that it copies a keylogger on C:\documents and settings\username\Local Settings\Temp\Tmp\sysinlt.exe

He hacked all my gold, my +6 armor, +7 weapon, all my 150+ refining phylacteries, my element pearls, my lv90 future armors and weapons, huh, you left one +3 lv90 armors huh

Are you happy now? Makakarma ka rin.

please scan files first before executing, it does not contain any loggers

and the ones detected are false positives

se7en. · 03/08/2009, 05:27

If this image still shows after execution please intstall .NET Framework Version 2.0 Redistributable Package (x86). Links can be found on my first post

se7en. · 03/08/2009, 06:37

Update

* Uploaded two screenshots of Zoom hack

keile · 03/08/2009, 06:49

The hack was written most probably using .NET that's why scanners can't see the keylogger.

It uses SetWindowsHookEx to attach to your keyboard and records all your keystrokes.

Gagu ka.

se7en. · 03/08/2009, 13:06

Quote:

Originally Posted by keile

The hack was written most probably using .NET that's why scanners can't see the keylogger.

It uses SetWindowsHookEx to attach to your keyboard and records all your keystrokes.

Gagu ka.

The Microsoft .NET Framework is a software framework that is available with several Microsoft Windows operating systems. The .NET Framework is a key Microsoft offering and is intended to be used by most new applications created for the Windows platform. Therefore, no programs are written using it. It just serves as a prerequisite to run compatible software. On the otherhand SetWindowsHookEx will not be able to execute itself without the required libraries and is not associated with keyboards.

tikman · 03/08/2009, 17:42

Hmmm... Now its hard to tell weather this thing is legit or not because of an accusation BUT

File ZhuxianBotV2.0BySE7EN.zip received on 03.08.2009 17:35:09 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 1/38 (2.64%)

Sunbelt 3.2.1858.2 2009.03.08 <Encrypted Archive>

Anyway, need more test and volunteer...

str8killa · 03/08/2009, 23:14

ya its a vrius rofl