Swordsman Bot 0.12

~~cabalassit~~ · 05/21/2009, 12:14

V0.12
update：

1、Yongan Alter Mann

*Zensiert*

Der-Eddy · 05/21/2009, 12:45

#doppelpost nächstes mal Edit button benutzen
#reportet
und wie funktioniert der Bot genau?

~~cabalassit~~ · 05/23/2009, 09:58

update:
*Zensiert*

~~cucumbamba~~ · 05/23/2009, 10:53

cabalassit are you chinese?

~~TaschenTücher007~~ · 05/23/2009, 15:00

find ich zu unsicher lieber net

*closed

~~Terencie Hawaii~~ · 05/23/2009, 15:04

Quote:

Originally Posted by TaschenTücher007

find ich zu unsicher lieber net

*closed

Nur weil du den Bot nicht gut findest, muss der Thread nicht gleich Closed sein.

Er hat doch nen Virentest gemacht, also sind sicherlich keine Viren drinne, und der Bot funkioniert. Kann mal jemand testen ?

~~TaschenTücher007~~ · 05/23/2009, 21:56

trotzdem zu unsicher aknn jeder hinschreiben virentest zu unsicher

Der-Eddy · 05/24/2009, 23:24

scheint clean (oder auch nicht) zu sein:

Code:

Antivirus Version letzte aktualisierung Ergebnis 
a-squared 4.0.0.101 2009.05.24 - 
AhnLab-V3 5.0.0.2 2009.05.24 - 
AntiVir 7.9.0.168 2009.05.24 - 
Antiy-AVL 2.0.3.1 2009.05.22 - 
Authentium 5.1.2.4 2009.05.24 - 
Avast 4.8.1335.0 2009.05.24 - 
AVG 8.5.0.339 2009.05.24 - 
BitDefender 7.2 2009.05.24 - 
CAT-QuickHeal 10.00 2009.05.23 - 
ClamAV 0.94.1 2009.05.24 - 
Comodo 1157 2009.05.08 - 
DrWeb 5.0.0.12182 2009.05.24 - 
eSafe 7.0.17.0 2009.05.24 - 
eTrust-Vet 31.6.6519 2009.05.23 - 
F-Prot 4.4.4.56 2009.05.24 - 
F-Secure 8.0.14470.0 2009.05.24 - 
Fortinet 3.117.0.0 2009.05.24 - 
GData 19 2009.05.24 - 
Ikarus T3.1.1.49.0 2009.05.24 - 
K7AntiVirus 7.10.741 2009.05.21 - 
Kaspersky 7.0.0.125 2009.05.24 - 
McAfee 5625 2009.05.24 - 
McAfee+Artemis 5625 2009.05.24 - 
McAfee-GW-Edition 6.7.6 2009.05.24 - 
Microsoft 1.4701 2009.05.24 - 
NOD32 4098 2009.05.22 - 
Norman 6.01.05 2009.05.22 - 
nProtect 2009.1.8.0 2009.05.24 - 
Panda 10.0.0.14 2009.05.24 - 
PCTools 4.4.2.0 2009.05.21 - 
Prevx 3.0 2009.05.24 - 
Rising 21.30.62.00 2009.05.24 - 
Sophos 4.42.0 2009.05.24 Sus/ComPack-C 
Sunbelt 3.2.1858.2 2009.05.24 - 
Symantec 1.4.4.12 2009.05.24 - 
TheHacker 6.3.4.3.331 2009.05.22 - 
TrendMicro 8.950.0.1092 2009.05.23 - 
VBA32 3.12.10.5 2009.05.24 - 
ViRobot 2009.5.23.1749 2009.05.23 - 
VirusBuster 4.6.5.0 2009.05.24 - 
weitere Informationen 
File size: 814080 bytes 
MD5...: 5e506f8869c89d0f726a65b263ceb769 
SHA1..: a97f5af344c5dcf8bd68ef624c8be1f53f6437ab 
SHA256: eae9b95fdc486ce78c5030985e5c050492a0638e9e04fdc638742cb445365cf9 
SHA512: 1774fd0b3b93c764a5516c61ff178d44e2c161bbf034921aeff214e3f78246fa
c8cac3ce466e6b391a8bac560b5fe82c7cee43adf12e07f07d2807615ce1061e 
ssdeep: 24576:0ybDDeVXS+hEoAKJ3TUlPa9ifh4MFruLUd4gQIknX:0yN+hE7K9TE2Wuyr
uoGggX
 
PEiD..: - 
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%) 
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x426e0
timedatestamp.....: 0x4a0d0787 (Fri May 15 06:11:19 2009)
machinetype.......: 0x14c (I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x4f333 0x4f400 6.36 7601d3c6690d9986b39f4844fa88f7b1
.rdata 0x51000 0x92d2 0x9400 6.24 0dff644fbe457b760bb618c40947a32d
.data 0x5b000 0x49ff4 0x7e00 3.67 24b7099f4813fec5e5527358964ff185
.rsrc 0xa5000 0x3010 0x3200 4.96 1f432337564267908c1106087397012d
.vmp0 0xa9000 0x62b71 0x62c00 7.98 e8ba5fb9a0b4ac56e81beb8b4e2e5da6
.reloc 0x10c000 0x210 0x400 3.58 bab50f008040520bb1c1f7bd466ab328

( 12 imports ) 
> KERNEL32.dll: HeapAlloc, FlushInstructionCache, GetCurrentProcess, GetModuleHandleA, FreeLibrary, SizeofResource, LoadResource, FindResourceA, LoadLibraryExA, lstrcpynA, IsDBCSLeadByte, FindClose, FindFirstFileA, CreateDirectoryA, MapViewOfFile, CreateFileMappingA, GetCurrentProcessId, CloseHandle, UnmapViewOfFile, LockResource, GetProcAddress, LoadLibraryA, WriteProcessMemory, ResumeThread, CreateRemoteThread, VirtualAllocEx, CreateProcessA, GetExitCodeThread, TerminateProcess, GetStartupInfoA, Process32Next, lstrcatA, GetWindowsDirectoryA, OpenProcess, Process32First, CreateToolhelp32Snapshot, VirtualProtect, ExitProcess, SetEndOfFile, IsBadCodePtr, IsBadReadPtr, CreateFileA, LeaveCriticalSection, GetStringTypeA, GetCPInfo, GetOEMCP, GetSystemTimeAsFileTime, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, SetStdHandle, FlushFileBuffers, ReadFile, WriteFile, SetFilePointer, GetFileType, GetStdHandle, SetHandleCount, SetUnhandledExceptionFilter, HeapSize, IsBadWritePtr, VirtualFree, HeapCreate, HeapDestroy, LCMapStringW, LCMapStringA, UnhandledExceptionFilter, TlsGetValue, TlsSetValue, TlsFree, SetLastError, TlsAlloc, GetCommandLineA, RtlUnwind, VirtualQuery, GetSystemInfo, VirtualAlloc, HeapReAlloc, CreateThread, ExitThread, EnterCriticalSection, CompareStringA, lstrcpyA, InterlockedIncrement, InitializeCriticalSection, GetModuleFileNameA, MulDiv, GetLastError, WideCharToMultiByte, lstrcmpA, lstrlenW, lstrcmpiA, MultiByteToWideChar, GlobalAlloc, GlobalLock, GlobalUnlock, lstrlenA, GetProcessHeap, DeleteFileA, HeapFree, RaiseException, DeleteCriticalSection, InterlockedDecrement, GetCurrentThreadId, GetTickCount, SleepEx, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, GetStringTypeW, GetVersionExA
> USER32.dll: TranslateMessage, IsWindowVisible, GetKeyState, IsDialogMessageA, GetDlgItemTextA, SetDlgItemTextA, DispatchMessageA, IsDlgButtonChecked, CheckDlgButton, SetDlgItemInt, EnableWindow, MessageBoxA, DialogBoxParamA, UnregisterClassA, GetDlgItemInt, FindWindowExA, GetMessageA, PeekMessageA, ShowWindow, DefWindowProcA, DestroyWindow, SetRectEmpty, DestroyCursor, CreateDialogParamA, IsWindow, BeginPaint, EndPaint, InvalidateRect, SetCursor, PtInRect, UpdateWindow, FindWindowA, LoadIconA, SetTimer, EndDialog, KillTimer, ExitWindowsEx, MapWindowPoints, SystemParametersInfoA, GetWindowRect, LoadStringA, PostQuitMessage, MessageBeep, wsprintfA, DrawTextA, DrawFocusRect, CreateDialogIndirectParamA, SetCapture, GetWindowThreadProcessId, SetFocus, ReleaseCapture, GetCapture, GetCursorPos, ScreenToClient, RegisterClassExA, LoadCursorA, OffsetRect, CreateWindowExA, CallWindowProcA, GetDlgItem, InvalidateRgn, CreateAcceleratorTableA, GetDC, ReleaseDC, GetDesktopWindow, CharNextA, RedrawWindow, FillRect, IsChild, GetWindow, DestroyAcceleratorTable, IsWindowEnabled, GetSysColor, GetFocus, GetClientRect, SetWindowPos, GetClassNameA, CreateCursor, GetDlgCtrlID, GetParent, SendMessageA, GetWindowTextLengthA, GetWindowTextA, SetWindowTextA, GetWindowLongA, SetWindowLongA, RegisterWindowMessageA, GetClassInfoExA
> GDI32.dll: CreateFontA, SetTextColor, SetBkMode, GetObjectA, GetDeviceCaps, CreateSolidBrush, CreateCompatibleBitmap, CreateCompatibleDC, SelectObject, BitBlt, GetStockObject, CreateFontIndirectA, DeleteObject, DeleteDC
> comdlg32.dll: GetOpenFileNameA
> ADVAPI32.dll: RegOpenKeyExA, RegQueryValueExA, RegDeleteKeyA, OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges, RegQueryInfoKeyA, RegSetValueExA, RegEnumKeyExA, RegCreateKeyExA, RegDeleteValueA, RegCloseKey
> SHELL32.dll: ShellExecuteA
> ole32.dll: OleLockRunning, CoTaskMemAlloc, CoCreateInstance, CLSIDFromString, CoTaskMemFree, CoGetClassObject, OleInitialize, CreateStreamOnHGlobal, OleUninitialize, CoInitialize, CoUninitialize, CLSIDFromProgID, CoTaskMemRealloc, StringFromGUID2
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -
> COMCTL32.dll: _TrackMouseEvent, InitCommonControlsEx
> PSAPI.DLL: GetModuleFileNameExA
> WININET.dll: InternetReadFile, InternetOpenUrlA, InternetOpenA, InternetCloseHandle
> WS2_32.dll: -, -, -

( 0 exports ) 
 
PDFiD.: - 
RDS...: NSRL Reference Data Set
-

wurde jedenfalls nicht mit autoit programmiert

~~cucumbamba~~ · 05/25/2009, 12:42

der kerl is auch ein chinese is normal

~~cabalassit~~ · 05/31/2009, 12:10

release 0.12,please to use

THEGO90 · 05/31/2009, 18:09

also kp ich würd denn nich benutzten....

Walkhorn · 05/31/2009, 18:45

Accountdaten werden an den Autor weitergeleitet.

-> Closed.

Gruß,
Traky