Packet editing?

07/31/2005 01:53 andretii#16
i get the cant connect to conquer online account server error as well
07/31/2005 07:47 sniper__freak#17
sacnned my comp found shitload of viruses i suggest u ppl do the same
07/31/2005 08:51 andretii#18
i found a backdoor shit virus minutes ago, ffs i wont install programs or whatever that doesnt come from ppl in here
07/31/2005 09:47 chocoman4k#19
Looking at the code, for some reason Command1-Command6 (buttons) have different procedure offsets but all do the same job, output 1 messagebox and on the other click output another messagebox.
The .exe has got a lot of trash data probably to make users believe it really does something. (~360KB of it is trash data, whole file is 396KB)

An interesting unicode string I found: C:\Program Files\VB98\TUTS\h4x0r\client&# 092;Client2.vbp
This guy was probably learning how to write clients which send data to the server. So he thought why not coding some kind of CO keylogger :P

It tries to connect to 145.53.103.67 port 1337... why would TQ run the account server on port 1337?
And second, 145.53.103.67 resolves to ip91356743.adsl-surfen.hetnet.nl, probably that guy's home machine. Doubt TQ would host their server on an ADSL line.

It's also got key names for keys other than 1-9 and A-Z/a-z, which makes me think this is a keylogger.
07/31/2005 09:54 DeathWalker#20
The website have virus? I know the proggy had a virus, too good to be true.And it asks you to execute it then LOGIN lol.
07/31/2005 10:44 andretii#21
any tips for removing this backdoor or keylogger, cuz the antivirus detected it and said it removed it, but i was searching files and found 2 files inside Windows folder named forcystus extention df, or pf dont remember...
07/31/2005 14:36 DeathWalker#22
I did download it, but didnt open it.
07/31/2005 16:13 sniper__freak#23
i have mcafee, it found a shitload of them, and i installed trend micro gonna scanmycomp with that aswell
07/31/2005 19:43 andretii#24
i use Kaspersky
07/31/2005 19:46 xSourcex#25
[Only registered and activated users can see links. Click Here To Register...] if u look on that printscrren QuickCut send thats my print i sen it to a friend who sended it to him and that fucker sends it on co forum omfg i will kick his ass -.-
08/01/2005 00:49 DeathWalker#26
lol pockets.Here's the link too that so called "super hack" known as Forcystus.
[Only registered and activated users can see links. Click Here To Register...]

Please dont be retarded and try download it......it dosent work all it does is put a keylogger on your comp lol...
"The .exe has got a lot of trash data probably to make users believe it really does something. (~360KB of it is trash data, whole file is 396KB)"
08/01/2005 01:13 sutte#27
Hey, please tell me the location "The .exe" installed.
I have to remove it. lol :(
08/01/2005 11:43 Peach#28
the site itself has a virus dont u all get it
08/01/2005 13:07 DeathWalker#29
What virus?I didnt get the virus 0.o My firewall blocked osmething.
08/01/2005 15:39 silv3r123#30
woiahh chocoman4k is leet
damn....u sexy ass
let me have your children XD
I WANT TO SEX YOU!!
jkz