Nostale Malware !! Attention !!

[Kingrap]

Legery already released my chat with Trollface..

 Spoiler

[26/05/2013 20.47.52] -energy165-: i wrote a nostale remote administration tool, wich infect computer etc
[26/05/2013 20.47.52] -energy165-:
[26/05/2013 20.47.58] -energy165-: with*
[26/05/2013 20.48.05] -energy165-: have some it people lvl 90
[26/05/2013 20.48.09] -energy165-: with 100kk gold et
[26/05/2013 20.48.11] -energy165-: c
[26/05/2013 20.48.12] -[???g?a]-: nostale RAT? XD
[26/05/2013 20.48.12] -energy165-:
[26/05/2013 20.48.18] -energy165-: yes you want see my panel? hahaha
[26/05/2013 20.48.25] -[???g?a]-: yes
[26/05/2013 20.48.27] -[???g?a]-: XDXDXDXD
[26/05/2013 20.49.28] -energy165-: accept
[26/05/2013 20.49.39] *** Chiamata da -energy165- ***
[26/05/2013 20.49.52] -energy165-: i can controll fully character
[26/05/2013 20.49.55] -energy165-: like walk, gm message etc
[26/05/2013 20.49.57] -energy165-: hahaha
[26/05/2013 20.50.01] -[???g?a]-: ahah xD
[26/05/2013 20.50.03] -energy165-: trade his gold to my account etc
[26/05/2013 20.50.07] -[???g?a]-: you can send GM message? :O
[26/05/2013 20.50.08] -energy165-: and items
[26/05/2013 20.50.14] -energy165-: look
[26/05/2013 20.50.24] -energy165-: infected people
[26/05/2013 20.50.25] -energy165-: hahahaha
[26/05/2013 20.50.28] -[???g?a]-: O.O
[26/05/2013 20.50.29] -[???g?a]-: ahahahh xD
[26/05/2013 20.50.38] -[???g?a]-: but how you infect it?
[26/05/2013 20.50.39] -[???g?a]-: xD
[26/05/2013 20.51.00] -energy165-: read inventory etc
[26/05/2013 20.51.07] -energy165-: i can do all with him without ban
[26/05/2013 20.51.14] -energy165-: or get his acc data
[26/05/2013 20.51.15] -energy165-: etc
[26/05/2013 20.51.18] -[???g?a]-: but
[26/05/2013 20.51.18] -energy165-: close client
[26/05/2013 20.51.21] -[???g?a]-: how you infect
[26/05/2013 20.51.25] -[???g?a]-: persons ?XD
[26/05/2013 20.51.31] -energy165-: with .exe
[26/05/2013 20.51.33] -energy165-: or .dll
[26/05/2013 20.51.37] -energy165-: just need 1x to start
[26/05/2013 20.51.39] -energy165-: then infected
[26/05/2013 20.51.40] -energy165-:
[26/05/2013 20.51.47] -[???g?a]-: lol
[26/05/2013 20.51.52] -energy165-: here it
[26/05/2013 20.51.53] -[???g?a]-: and you have infected me ? :P
[26/05/2013 20.51.54] -energy165-: lvl 88
[26/05/2013 20.51.56] -energy165-: dont know
[26/05/2013 20.51.58] -energy165-: go online ingame
[26/05/2013 20.52.01] -energy165-: and then you know
[26/05/2013 20.52.01] -energy165-: xD
[26/05/2013 20.52.10] -[???g?a]-: but
[26/05/2013 20.52.13] -[???g?a]-: i don't play to DE server
[26/05/2013 20.52.14] -[???g?a]-: xD
[26/05/2013 20.52.17] -energy165-: yes
[26/05/2013 20.52.20] -energy165-: i have all countrys
[26/05/2013 20.52.21] -energy165-: there
[26/05/2013 20.52.22] -energy165-: just look list
[26/05/2013 20.52.25] -energy165-: DE, EN, IT, FR
[26/05/2013 20.52.26] -energy165-: etc
[26/05/2013 20.52.26] -energy165-:
[26/05/2013 20.52.29] -[???g?a]-: xD
[26/05/2013 20.52.32] -[???g?a]-: and what is the name
[26/05/2013 20.52.33] -[???g?a]-: of dll ?
[26/05/2013 20.52.34] -[???g?a]-: xD
[26/05/2013 20.52.39] -energy165-: you didnt see it ahhahaha
[26/05/2013 20.52.47] -energy165-: all invisible etc
[26/05/2013 20.52.52] -energy165-: my secret
[26/05/2013 20.52.55] -energy165-: found an exploit there
[26/05/2013 20.52.59] -[???g?a]-: mmh
[26/05/2013 20.53.00] -energy165-: look it people
[26/05/2013 20.53.03] -energy165-: lvl 88
[26/05/2013 20.53.04] -[???g?a]-: but where you released
[26/05/2013 20.53.08] -[???g?a]-: infected file ? :O
[26/05/2013 20.53.09] -energy165-: 6+8, 6+7, sps +9
[26/05/2013 20.53.22] -energy165-: sps 14, 11, 9
[26/05/2013 20.53.44] -[???g?a]-: can you send to me
[26/05/2013 20.53.49] -[???g?a]-: 1 account of nostale .it? XD
[26/05/2013 20.54.04] -energy165-: yes but if oyu login = ban
[26/05/2013 20.54.10] -energy165-: but i can trade gold and sps / items etc
[26/05/2013 20.54.13] -energy165-: to my account = no ban
[26/05/2013 20.54.18] -[???g?a]-: can you
[26/05/2013 20.54.20] -[???g?a]-: send to my
[26/05/2013 20.54.22] -[???g?a]-: account ?
[26/05/2013 20.54.22] -[???g?a]-: xD
[26/05/2013 20.54.27] -energy165-: later
[26/05/2013 20.54.29] -[???g?a]-: :P
[26/05/2013 20.54.33] -energy165-: go ingame online
[26/05/2013 20.54.36] -energy165-: i think you are infected
[26/05/2013 20.54.36] -energy165-: to
[26/05/2013 20.54.37] -energy165-: xD
[26/05/2013 20.54.39] -[???g?a]-: i just want see how work xD
[26/05/2013 20.54.49] -[???g?a]-: ok
[26/05/2013 20.54.52] -[???g?a]-: now i enter
[26/05/2013 20.54.56] -[???g?a]-: on nostale
[26/05/2013 20.54.57] -[???g?a]-: wait..
[26/05/2013 20.55.54] -[???g?a]-: wait i change
[26/05/2013 20.55.55] -[???g?a]-: nostalex
[26/05/2013 20.55.55] -[???g?a]-: xD
[26/05/2013 20.56.02] -energy165-: y
[26/05/2013 20.56.10] -[???g?a]-: ok
[26/05/2013 20.56.11] -[???g?a]-: now i'm in game
[26/05/2013 20.56.12] -[???g?a]-: <.<
[26/05/2013 20.56.18] -energy165-: y
[26/05/2013 20.56.20] -energy165-: you are infected
[26/05/2013 20.56.24] -[???g?a]-: ._.
[26/05/2013 20.56.28] -[???g?a]-: :O
[26/05/2013 20.56.30] -energy165-: damn it
[26/05/2013 20.56.31] -[???g?a]-: my character
[26/05/2013 20.56.32] -[???g?a]-: <.<
[26/05/2013 20.56.39] -[???g?a]-: 3nigma :O
[26/05/2013 20.56.43] -[???g?a]-: how i can remove infection ?
[26/05/2013 20.56.44] -[???g?a]-: :O
[26/05/2013 20.56.48] -energy165-: fucking compoment bug
[26/05/2013 20.56.50] -energy165-: reinstall nos
[26/05/2013 20.56.50] -energy165-:
[26/05/2013 20.56.55] -[???g?a]-: mmh
[26/05/2013 20.56.57] -[???g?a]-: can you send
[26/05/2013 20.56.57] -[???g?a]-: to me
[26/05/2013 20.56.58] -energy165-: wait
[26/05/2013 20.57.00] -[???g?a]-: 10-15kk ? XD
[26/05/2013 20.57.12] -energy165-: 1042489 gold
[26/05/2013 20.57.13] -energy165-: you have
[26/05/2013 20.57.15] -energy165-: server 1 ch1
[26/05/2013 20.57.17] -[???g?a]-: yes
[26/05/2013 20.57.17] -[???g?a]-: xD
[26/05/2013 20.57.18] -energy165-: in nosville
[26/05/2013 20.57.19] -energy165-:
[26/05/2013 20.57.19] -[???g?a]-: i see..
[26/05/2013 20.57.29] -energy165-: no items you have
[26/05/2013 20.57.30] -energy165-:
[26/05/2013 20.57.35] -[???g?a]-: can yo
[26/05/2013 20.57.39] -[???g?a]-: you*
[26/05/2013 20.57.41] -[???g?a]-: send ot me
[26/05/2013 20.57.43] -[???g?a]-: 2-3kk ? XD
[26/05/2013 20.57.45] -energy165-: Account Received: User: Kraun90 Password: H195...
[26/05/2013 20.57.45] -energy165-: xD
[26/05/2013 20.57.53] -[???g?a]-: <.<
[26/05/2013 20.57.55] -[???g?a]-: yes xD
[26/05/2013 20.58.00] -energy165-: hahaha
[26/05/2013 20.58.01] -[???g?a]-: client
[26/05/2013 20.58.02] -[???g?a]-: close
[26/05/2013 20.58.02] -energy165-: client close
[26/05/2013 20.58.02] -[???g?a]-: -.-
[26/05/2013 20.58.02] -energy165-:
[26/05/2013 20.58.04] -[???g?a]-: fucking xD
[26/05/2013 20.58.14] -energy165-: i can do all now
[26/05/2013 20.58.14] -energy165-:
[26/05/2013 20.58.16] -[???g?a]-:
[26/05/2013 20.58.17] -energy165-: go ingame
[26/05/2013 20.58.23] -[???g?a]-: send to me
[26/05/2013 20.58.25] -[???g?a]-: 3-4kk xD
[26/05/2013 20.58.31] -[???g?a]-: i want see
[26/05/2013 20.58.32] -[???g?a]-: ù.ù
[26/05/2013 20.58.41] -energy165-: there is now rich it on
[26/05/2013 20.58.49] -energy165-: they are online at 13:00
[26/05/2013 20.59.10] -energy165-: go ingame
[26/05/2013 20.59.11] -energy165-:
[26/05/2013 20.59.19] -energy165-: want show something
[26/05/2013 20.59.23] -[???g?a]-: XD

Ok, this isn't a problem, just a screenshot for confirm it..



OK, i looked the IP of osbk-4d0816f9.pool.mediaways.net ( 77.8.22.249 ) ..

Mmmh German IP !

Then i opened skype resolver and i found IP of Trollface ( 77.8.22.249 ) ..



Trollface, why you send this malware ? ç __ ç

WAAT Server files haven't the malware, you can rest assured ..
Elektrochemie has nothing to do with this

[Bauernfrosch]

Wtf...

[SilverNik]

has always known that he did trollface

[Mr.Zoey]

inetnum:        77.8.0.0 - 77.8.255.255
netname:        TEDE-LLU
descr:          Telefonica O2 Germany GmbH & Co. OHG
descr:          Georg-Brauchle-Ring 23-25
descr:          80992 Muenchen
country:        DE
admin-c:        IPTO-RIPE
tech-c:         IPTO-RIPE
status:         ASSIGNED PA
mnt-by:         MDA-Z
source:         RIPE # Filtered

role:           IP Telefonica O2 Germany
address:        Telefonica Germany GmbH & Co. OHG
admin-c:        CS8096-RIPE
admin-c:        DK9212-RIPE
tech-c:         CS8096-RIPE
tech-c:         DK9212-RIPE
nic-hdl:        IPTO-RIPE
abuse-mailbox:  
mnt-by:         MDA-Z
source:         RIPE # Filtered

% Information related to '77.8.0.0/15AS6805'

route:          77.8.0.0/15
descr:          Telefonica Deutschland GmbH
origin:         AS6805
mnt-by:         MDA-Z
source:         RIPE # Filtered

[Bauernfrosch]

Originally Posted by Mr.Zoey

inetnum:        77.8.0.0 - 77.8.255.255
netname:        TEDE-LLU
descr:          Telefonica O2 Germany GmbH & Co. OHG
descr:          Georg-Brauchle-Ring 23-25
descr:          80992 Muenchen
country:        DE
admin-c:        IPTO-RIPE
tech-c:         IPTO-RIPE
status:         ASSIGNED PA
mnt-by:         MDA-Z
source:         RIPE # Filtered

role:           IP Telefonica O2 Germany
address:        Telefonica Germany GmbH & Co. OHG
admin-c:        CS8096-RIPE
admin-c:        DK9212-RIPE
tech-c:         CS8096-RIPE
tech-c:         DK9212-RIPE
nic-hdl:        IPTO-RIPE
abuse-mailbox:  
mnt-by:         MDA-Z
source:         RIPE # Filtered

% Information related to '77.8.0.0/15AS6805'

route:          77.8.0.0/15
descr:          Telefonica Deutschland GmbH
origin:         AS6805
mnt-by:         MDA-Z
source:         RIPE # Filtered

IP LOCATOR FOR THE WIN

[Kingrap]

Originally Posted by Mr.Zoey

inetnum:        77.8.0.0 - 77.8.255.255
netname:        TEDE-LLU
descr:          Telefonica O2 Germany GmbH & Co. OHG
descr:          Georg-Brauchle-Ring 23-25
descr:          80992 Muenchen
country:        DE
admin-c:        IPTO-RIPE
tech-c:         IPTO-RIPE
status:         ASSIGNED PA
mnt-by:         MDA-Z
source:         RIPE # Filtered

role:           IP Telefonica O2 Germany
address:        Telefonica Germany GmbH & Co. OHG
admin-c:        CS8096-RIPE
admin-c:        DK9212-RIPE
tech-c:         CS8096-RIPE
tech-c:         DK9212-RIPE
nic-hdl:        IPTO-RIPE
abuse-mailbox:  
mnt-by:         MDA-Z
source:         RIPE # Filtered

% Information related to '77.8.0.0/15AS6805'

route:          77.8.0.0/15
descr:          Telefonica Deutschland GmbH
origin:         AS6805
mnt-by:         MDA-Z
source:         RIPE # Filtered

[_RowLegend_]

Macht euch halt ins Hemd, haha
@ Kingcrap
Everybody gets what they deserve.

[Bauernfrosch]

Troll,Good luck i changed my password and dont come online on nostale.de hahaha

[Kingrap]

:P he attached all nostale of gameforge

[26/05/2013 20.52.13] -[???g?a]-: i don't play to DE server
[26/05/2013 20.52.14] -[???g?a]-: xD
[26/05/2013 20.52.17] -energy165-: yes
[26/05/2013 20.52.20] -energy165-: i have all countrys
[26/05/2013 20.52.21] -energy165-: there
[26/05/2013 20.52.22] -energy165-: just look list
[26/05/2013 20.52.25] -energy165-: DE, EN, IT, FR
[26/05/2013 20.52.26] -energy165-: etc

[.Jokerle]

No ****

[szymek111]

Soo he can control my character and trade all items???WTF S H I T

[Cooq]

Trollface, ich dachte du wärst nicht so.
Ich schau mal eben auf meinen Acc, falls was weg ist bist du T.O.D für mich.

#alles an Gold noch da

[Bauernfrosch]

Originally Posted by Cooq

Trollface, ich dachte du wärst nicht so.
Ich schau mal eben auf meinen Acc, falls was weg ist bist du T.O.D für mich.

Soll er jetzt weinen?
Naja Deledt.Nr2

[Kingrap]

Originally Posted by szymek111

Soo he can control my character and trade all items???WTF S H I T

yes he can

[»Prodigy«]

Ganz erlich...
Na und? Es istn Spiel macht euch nicht ins Hemd, ich wette 99,99% der Tools hier sind voll mit Keyloggern. Aber nur bei 0.1% finden die Leute es raus...
Jez mag ich Trolli umso mehr
obwohl ich es schon lange wusste.