Simple Instalocker

02/28/2015 22:36 vovere326#1
Your tired of being not the first who writes ADC, mid, top.... then is this program the right choice for you
I quickly developed a simple Autopicker, It's not that well written but it does his job perfectly.

Functions:
-Auto detect Champion selection
-Post a custom text to your Team
-Instant select your Champion
-optional Instalock
-Optimize it to your PC-speed


Note: don't use auto-accept it's currently bugged.
If it doesn't work, run it as admin and try it again.

Download
**ATTACHEMENT REMOVED**
03/01/2015 23:25 lelpt#2
Virus.
03/04/2015 16:41 mininger#3
where is the virus scan ?
03/04/2015 16:46 ElectricalStorm#4
it seems clean [Only registered and activated users can see links. Click Here To Register...]
anyway pointless IMO
Edit btw thats just the dw link...
03/05/2015 13:22 RikTelner#5
[Only registered and activated users can see links. Click Here To Register...]

It's a virus, don't download.
03/23/2017 18:12 Bulibasa#6
rofl
03/24/2017 02:41 3isa#7
[Only registered and activated users can see links. Click Here To Register...]


[Only registered and activated users can see links. Click Here To Register...]
03/25/2017 16:54 Riceler#8
it worked fine
05/14/2017 12:23 T-Martin#9
VIRUS!! Don't download it maybe a keylogger,care guys!
06/10/2017 02:10 marki582#10
VIRUS ROLF
06/10/2017 02:44 florian0#11
Seriously. HOW IS THIS FILE STILL ONLINE?!?

Are you telling me an AutoIt Script will look like this?
[Only registered and activated users can see links. Click Here To Register...]

Or this?
[Only registered and activated users can see links. Click Here To Register...]


Lets have a look at the main executable.
[Only registered and activated users can see links. Click Here To Register...]

Ohh. A .NET Binary. So thats not our AutoIt Script, isn't it? Lets check what it does.

[Only registered and activated users can see links. Click Here To Register...]
Oh its obfuscated. Well, we don't care about that, dont we?

[Only registered and activated users can see links. Click Here To Register...]
Accesses Mozilla Logins ...

[Only registered and activated users can see links. Click Here To Register...]
And IMVU Account Data...


[Only registered and activated users can see links. Click Here To Register...]
Pidgin is supported, too :awesome:


[Only registered and activated users can see links. Click Here To Register...]
And Steam. But sadly, this doesn't work anymore. You need to steal the identifier or the Steam Guard will lock you out. The more you know.

Lets see what else we got
[Only registered and activated users can see links. Click Here To Register...]
Uhhh. Yahoo.


[Only registered and activated users can see links. Click Here To Register...]
Last but not least. It steals your Windows key. LUL.

According to this data
[Only registered and activated users can see links. Click Here To Register...]
We can see the URL the data is transmitted to. And we see some Mail-Related data that seems unused and some URL+Filename.exe that seems unused, too. This indicates that beside stealing your stuff via URL, it will also steal your stuff via Mail, probably add persistence for a keylogger and is capable of downloading a file from the net and execute it.


Edit: I gave it some useful names. Have fun.
[Only registered and activated users can see links. Click Here To Register...]
06/10/2017 12:50 psydinger#12
Quote:
Originally Posted by florian0 View Post
Seriously. HOW IS THIS FILE STILL ONLINE?!?

Are you telling me an AutoIt Script will look like this?
☐ rekt ☐ not rekt ☑ Tyrannosaurus rekt
06/10/2017 18:12 Nayunh#13
Attachement removed.
08/16/2017 18:21 SmurfmaniaLoL#14
rofl