muonlien gold and item dupe

[krotkin]

a-squared 4.0.0.101 2009.05.19 -
AhnLab-V3 5.0.0.2 2009.05.19 -
AntiVir 7.9.0.168 2009.05.19 -
Antiy-AVL 2.0.3.1 2009.05.19 -
Authentium 5.1.2.4 2009.05.19 -
Avast 4.8.1335.0 2009.05.18 -
AVG 8.5.0.336 2009.05.19 -
BitDefender 7.2 2009.05.19 -
CAT-QuickHeal 10.00 2009.05.15 -
ClamAV 0.94.1 2009.05.19 -
Comodo 1157 2009.05.08 -
DrWeb 5.0.0.12182 2009.05.19 -
eSafe 7.0.17.0 2009.05.18 Suspicious File
eTrust-Vet 31.6.6509 2009.05.18 -
F-Prot 4.4.4.56 2009.05.18 -
F-Secure 8.0.14470.0 2009.05.19 -
Fortinet 3.117.0.0 2009.05.19 -
GData 19 2009.05.19 -
Ikarus T3.1.1.49.0 2009.05.19 -
K7AntiVirus 7.10.737 2009.05.16 -
Kaspersky 7.0.0.125 2009.05.19 -
McAfee 5619 2009.05.18 -
McAfee+Artemis 5619 2009.05.18 -
McAfee-GW-Edition 6.7.6 2009.05.19 -
Microsoft 1.4602 2009.05.19 -
NOD32 4086 2009.05.19 -
Norman 6.01.05 2009.05.18 -
nProtect 2009.1.8.0 2009.05.19 -
Panda 10.0.0.14 2009.05.18 -
PCTools 4.4.2.0 2009.05.18 -
Prevx 3.0 2009.05.19 -
Rising 21.30.12.00 2009.05.19 -
Sophos 4.41.0 2009.05.19 -
Sunbelt 3.2.1858.2 2009.05.18 Trojan.Win32.Delf.abt
Symantec 1.4.4.12 2009.05.19 -
TheHacker 6.3.4.1.327 2009.05.19 -
TrendMicro 8.950.0.1092 2009.05.19 -
VBA32 3.12.10.5 2009.05.19 -
ViRobot 2009.5.19.1740 2009.05.19 -
VirusBuster 4.6.5.0 2009.05.18 -
Additional information
File size: 316770 bytes
MD5...: e7218e220a7ae2dde23b9e1a3efe0895
SHA1..: 6bc48794549a38ac7caedd46b770fff2b14496db
SHA256: cbc9f8864ed23b09d8cd79a65532de85f6c4bb465385ddae2a 9ab4df64b14d8a
SHA512: 8df7de2a63a86d44a38bb00eb5122313f35e2db22bc7c3dda4 81b1cbfd6ddfb6
553c4fdde966b2dcf38b25bf8af0fc4f703d38ac74260e295c 197d0ca037b78d
ssdeep: 3072:fRorGrobc/tZ3bHtrDJYR+WNc9xStgs7IzNagOMA7pGntMmiHLLHxwEjF:5
LrobWjDmRAs7pM3t6nH
PEiD..: -
TrID..: File type identification
Win32 Executable Generic (38.4%)
Win32 Dynamic Link Library (generic) (34.1%)
Win16/32 Executable Delphi generic (9.3%)
Generic Win/DOS Executable (9.0%)
DOS Executable Generic (9.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x96ca0
timedatestamp.....: 0x2a425e19 (Fri Jun 19 22:22:17 1992)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0x64000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0x65000 0x32000 0x32000 7.92 09944ba736a1d31ff2fe3b5882a6863a
.rsrc 0x97000 0x2000 0x1800 3.99 c88e9b284bdd3545262c0b7b6a13a1f8

( 10 imports )
> KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, ExitProcess
> advapi32.dll: RegCloseKey
> comctl32.dll: ImageList_Add
> comdlg32.dll: GetOpenFileNameA
> gdi32.dll: SaveDC
> IMAGEHLP.DLL: SymCleanup
> oleaut32.dll: VariantCopy
> shell32.dll: ShellExecuteA
> user32.dll: GetDC
> version.dll: VerQueryValueA

Download here:

scan before use it and as always use at your own risk =)
there is some false positives

[emjoy86]

Originally Posted by krotkin

Download here:

scan before use it and as always use at your own risk =)
there is some false positives

Threat Name: Trojan.Win32.Delf.abt
Summary: Trojan.Win32.Delf.abt is a Trojan downloader that can be installed through Internet Explorer exploits when victims visit malicious web sites.
Category: TrojanCategory information
Trojan is a general term for malicious software that is installed under false or deceptive pretenses or is installed without the user's full knowledge and consent. Most Trojans exhibit some form of malicious, hostile, or harmful functionality or behavior.
Level: HighLevel information
High risks are typically installed without user interaction through security exploits, and can severely compromise system security. Such risks may open illicit network connections, use polymorphic tactics to self-mutate, disable security software, modify system files, and install additional malware. These risks may also collect and transmit personally identifiable information (PII) without your consent and severely degrade the performance and stability of your computer.
Advice Remove
Description: Trojan.Win32.Delf.abt also might be installed by other Trojan downloaders or be included in software that the victim installs.

It has the capacity to download adware or other malware in addition to updates to itself, generally by HTTP.

Other names:
F-Secure: Trojan.Win32.Delf.abt
Kaspersky: Trojan.Win32.Delf.abt
McAfee: PWS-Tibia.gen.a
Symantec: Infostealer.Lineage

No Regrets dont be noob

[krotkin]

wtf where u get this info? i scaned it it have false positives only
Kaspersky: -
McAfee: -
Symantec: -
what detecet manshai or sujHujVchaj i dont care coz i thous are noob antivirus
use NOD32 or caspersky

u are idiot if u think i need your noob items on unknow noob server ^^

Sunbelt 3.2.1858.2 2009.05.18 Trojan.Win32.Delf.abt
what the hell is SunBelt? is this is antivirus or its cherypie?
trust only kaspersky and nod32

[xxmanowarxx]

weird.. its seems clean.... even with 10 diffrent scan with 5 different virus program and also online scan..

but its sending weirdos info ( its packed ) to weirdos non existing ip...

also the sound soooo good to be true for mu online lol..

be aware !

[krotkin]

i dint made this cheat
& its looks clean i believe its for old muonline version 97 + etc..

[emjoy86]

Originally Posted by krotkin

wtf where u get this info? i scaned it it have false positives only
Kaspersky: -
McAfee: -
Symantec: -
what detecet manshai or sujHujVchaj i dont care coz i thous are noob antivirus
use NOD32 or caspersky

u are idiot if u think i need your noob items on unknow noob server ^^

Sunbelt 3.2.1858.2 2009.05.18 Trojan.Win32.Delf.abt
what the hell is SunBelt? is this is antivirus or its cherypie?
trust only kaspersky and nod32

I base only on your own scan... And search about that trojan and post whats the result of my research.. Did I contradict on your uploaded files?
Don't be silly man. And don't teach me what AV to use. There's no perfect AV, I only refer my opinion on what happens to those who have been infected by that trojan... As u can see, I just search "Trojan.Win32.Delf.abt" and they define that as that ..

[BadjaoEngine]

im a little bit confused is that a virus that can really harm your computer??

and by the way is WPE Pro still working in mu onlinE?