Multi Fembria Account Maker

[sillynuts]

you are an idiot the source code is in the same file you dumbshit its prob false possitives,

if you have vb look in the folder thats in the zip names Source you fool... and if your to stupid decompile it its not packed at all... and heres all of the code that is in it.


Private Sub Command1_Click()
If Option1.Value = True Then
Call NCCconnect
Else: Call ProxyConnect
End If
End Sub

Private Sub Command2_Click()
Winsock1.Close
RichTextBox1 = ""
Label1 = "Disconnected"
End Sub

Private Sub Form_Load()
For R = Rnd * 99 To Rnd * 999
List1.AddItem Replace(R, ".", "")
Next
List1.Text = List1.ListIndex + 1
End Sub

Private Sub Option1_Click()
Text3.Enabled = False
Text4.Enabled = False
Label2.Enabled = False
Label3.Enabled = False
End Sub

Private Sub Option2_Click()
Text3.Enabled = True
Text4.Enabled = True
Label2.Enabled = True
Label3.Enabled = True
End Sub

Private Sub Winsock1_Connect()
Dim LoginYahoo As String
Dim Login22 As String

Login22 = "account=" & Text1 & List1.Text & "&myemail=" & Text5 & "&username=" & Text6 & List1.Text & "&pasword=" & Text2 & "&pasword=" & Text2 & "&gender=0&submit=REGISTER"
LoginYahoo = "POST /fembria/regcheck.php HTTP/1.1" & vbCrLf
LoginYahoo = LoginYahoo & "Host: 221.195.40.141:1026" & vbCrLf
LoginYahoo = LoginYahoo & "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" & vbCrLf
LoginYahoo = LoginYahoo & "Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*" & vbCrLf
LoginYahoo = LoginYahoo & "Accept-Language: en-us" & vbCrLf
LoginYahoo = LoginYahoo & "Accept-Encoding: gzip, deflate" & vbCrLf
LoginYahoo = LoginYahoo & "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7" & vbCrLf
LoginYahoo = LoginYahoo & "Connection: Keep-Alive" & vbCrLf
LoginYahoo = LoginYahoo & "Referer: http://221.195.40.141:1026/fembria/" & vbCrLf
LoginYahoo = LoginYahoo & "Content-Type: application/x-www-form-urlencoded" & vbCrLf
LoginYahoo = LoginYahoo & "Content-Length: " & Len(Login22) & vbCrLf & vbCrLf

Winsock1.SendData LoginYahoo & Login22
Debug.Print LoginYahoo
Debug.Print Login22
End Sub

Private Sub Winsock1_DataArrival(ByVal bytesTotal As Long)
Dim LoginData As String
Winsock1.GetData LoginData
RichTextBox1 = LoginData
If InStr(LoginData, "successed") Then
Label1 = "Account Made!"
RTB.Text = RTB.Text & "Account Name: " & Text1 & List1.Text & vbCrLf
RTB.Text = RTB.Text & "Email: " & Text5 & vbCrLf
RTB.Text = RTB.Text & "User Name: " & Text6 & List1.Text & vbCrLf
RTB.Text = RTB.Text & "Password: " & Text2 & vbCrLf & vbCrLf
End If
If InStr(LoginData, "999") Then
Label1 = "Banned"
End If
Debug.Print LoginData
List1.ListIndex = List1.ListIndex + 1
Call NCCconnect
End Sub

Private Sub Winsock1_Error(ByVal Number As Integer, Description As String, ByVal Scode As Long, ByVal Source As String, ByVal HelpFile As String, ByVal HelpContext As Long, CancelDisplay As Boolean)
Label1 = Description
End Sub

Public Function NCCconnect()
Winsock1.Close
Winsock1.Connect "221.195.40.141", "1026"
Label1 = "Connecting NCC"
End Function
Public Function ProxyConnect()
Winsock1.Close
Winsock1.Connect Text3, Text4
Label1 = "Connecting Proxy"
End Function


thats it simple

[xzodi06]

Well, I won't take risks ^^

[sillynuts]

lawl 100$ says you hade that on your computer to began with and it attached to my file...

o wow good try look at the 2 paths you noob thay dont match up one says modih and the other is a longer word that you blured out nice try..


you scaned 7 files and one was infected and it wasent mine look at the 2 paths your a **** noob wow **** off

[xzodi06]

the first blure I didn't care about anymore, becaus goahead hackers ^^... isn't my fail

[sillynuts]

you a ******* gook noob **** off

[GodsPirate]

Originally Posted by xzodi06

the first blure I didn't care about anymore, becaus goahead hackers ^^... isn't my fail

No it "is your fail"

[xzodi06]

That's the first reaction -.-...

I'm not saying that program is not working, just sharing my view

[sillynuts]

dude xzodi06 just cuz your a noob and post som bs of you having a worm on your computer in another file and trying to say its in mine that is your "Fail" 1 learn how to read noob look at the 2 paths ? y did you blure 1 but not the other ? and you blured the on that is to my exe you make no sense

[xzodi06]

Well, I can make video from my loging to forum, till the scan?

And shouldn't YOU take it calmed? since there ''isn't'' any viruses? 8-)

[GodsPirate]

I have 20 Of these spamming accounts ^^

[sillynuts]

ok listen you no english speaking ****.... 1 the exe is not infected... with a worm/virus/trojan/etc ... the ******* source is there open it look at the code you dumbshit now stop posting bullshit to get your post count up ... thats all you lil noobs care about like it makes you smarter or somthing it makes you annoying is all it does... you jock nuts to get programes or what ever else you can get and you run back to your lil corner and hide... iv been coding for over 9 years i have Microsoft C Sert. if you would like me to take it out of my wallet and scan it ... i have no need to infect anyone with any thing... and for your info a worm has no dex to you at all all it is for is to attack your main platform and destroy it ... ask your self what would i get out of that ? .... nothing ... you are a noob.... and really need to stop posting cuz the more you post the more you look even stupider cuz you really have no clue at all in the matter... ok so do your self a big favor and log off!

[xzodi06]

sorrysorry if I hurted your feelings ^^ ( :'D )


Edit: Lawl, you're really getting ****** off? From so little thing.. That still can be big ^^

[sillynuts]

dude wtf stop posting you gook ****,.

[hankisawesome]

Here to put a stop to all the accusers.

virusscan.jotti.org

Scanner results
Scan taken on 23 Nov 2008 15:23:00 (GMT)
A-Squared 	
Found nothing
AntiVir 	
Found nothing
ArcaVir 	
Found nothing
Avast 	
Found nothing
AVG Antivirus 	
Found nothing
BitDefender 	
Found nothing
ClamAV 	
Found nothing
CPsecure 	
Found nothing
Dr.Web 	
Found nothing
F-Prot Antivirus 	
Found nothing
F-Secure Anti-Virus 	
Found nothing
G DATA 	
Found nothing
Ikarus 	
Found nothing
Kaspersky Anti-Virus 	
Found nothing
NOD32 	
Found nothing
Norman Virus Control 	
Found nothing
Panda Antivirus 	
Found nothing
Sophos Antivirus 	
Found nothing
VirusBuster 	
Found nothing
VBA32 
found nothing

Virus total

------------

 File Account_Maker.exe received on 11.23.2008 16:27:18 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 0/37 (0%)
Loading server information...
Your file is queued in position: 1.
Estimated start time is between 38 and 55 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Compact
Print results Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email: 	
	
Antivirus 	Version 	Last Update 	Result
AhnLab-V3	2008.11.21.0	2008.11.23	-
AntiVir	7.9.0.35	2008.11.21	-
Authentium	5.1.0.4	2008.11.22	-
Avast	4.8.1281.0	2008.11.22	-
AVG	8.0.0.199	2008.11.23	-
BitDefender	7.2	2008.11.23	-
CAT-QuickHeal	10.00	2008.11.21	-
ClamAV	0.94.1	2008.11.23	-
DrWeb	4.44.0.09170	2008.11.23	-
eSafe	7.0.17.0	2008.11.23	-
eTrust-Vet	31.6.6222	2008.11.22	-
Ewido	4.0	2008.11.23	-
F-Prot	4.4.4.56	2008.11.22	-
F-Secure	8.0.14332.0	2008.11.23	-
Fortinet	3.117.0.0	2008.11.23	-
GData	19	2008.11.23	-
Ikarus	T3.1.1.45.0	2008.11.23	-
K7AntiVirus	7.10.531	2008.11.22	-
Kaspersky	7.0.0.125	2008.11.23	-
McAfee	5442	2008.11.22	-
McAfee+Artemis	5442	2008.11.22	-
Microsoft	1.4104	2008.11.23	-
NOD32	3632	2008.11.21	-
Norman	5.80.02	2008.11.22	-
Panda	9.0.0.4	2008.11.23	-
PCTools	4.4.2.0	2008.11.23	-
Prevx1	V2	2008.11.23	-
Rising	21.04.62.00	2008.11.23	-
SecureWeb-Gateway	6.7.6	2008.11.23	-
Sophos	4.35.0	2008.11.23	-
Sunbelt	3.1.1823.2	2008.11.22	-
Symantec	10	2008.11.23	-
TheHacker	6.3.1.1.160	2008.11.23	-
TrendMicro	8.700.0.1004	2008.11.22	-
VBA32	3.12.8.9	2008.11.22	-
ViRobot	2008.11.18.1474	2008.11.18	-
VirusBuster	4.5.11.0	2008.11.22	-
Additional information
File size: 32768 bytes
MD5...: f26743a36535bb0b624dbeb6395a4485
SHA1..: 3a7e2def64b1de8cadc79bc9c8f9503904482049
SHA256: f2c49524357686010834e2f69a2ce8af7f709ba598f53923c602af8a01b4a2c5
SHA512: affd416c3fac96e3d8224683666b12c6bc8c2ae0b91445cb7399de5dde0bfa58
e15d06a13a4d069af7a63db272ddef5f0d3920f666ed74f0c842c780d5bf0e87
PEiD..: -
TrID..: File type identification
Win32 Executable Microsoft Visual Basic 6 (96.9%)
Generic Win/DOS Executable (1.5%)
DOS Executable Generic (1.5%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4012c0
timedatestamp.....: 0x4928b08e (Sun Nov 23 01:23:26 2008)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x49f0 0x5000 5.13 a9891289e83ce793b9790622aa96adb5
.data 0x6000 0xa2c 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110
.rsrc 0x7000 0x8e4 0x1000 1.91 a4cec70a2097148f6fea15cab109fdb9

( 1 imports )
> MSVBVM60.DLL: __vbaStrI2, _CIcos, _adj_fptan, __vbaStrI4, __vbaFreeVar, __vbaLateIdCall, __vbaLenBstr, __vbaStrVarMove, __vbaFreeVarList, _adj_fdiv_m64, __vbaFreeObjList, _adj_fprem1, __vbaStrCat, __vbaHresultCheckObj, _adj_fdiv_m32, __vbaVarForInit, -, __vbaObjSet, _adj_fdiv_m16i, _adj_fdivr_m16i, _CIsin, __vbaChkstk, EVENT_SINK_AddRef, _adj_fpatan, __vbaLateIdCallLd, EVENT_SINK_Release, _CIsqrt, EVENT_SINK_QueryInterface, __vbaExceptHandler, -, _adj_fprem, _adj_fdivr_m64, __vbaFPException, __vbaStrVarVal, _CIlog, __vbaErrorOverflow, __vbaInStr, _adj_fdiv_m32i, _adj_fdivr_m32i, __vbaStrCopy, __vbaFreeStrList, _adj_fdivr_m32, _adj_fdiv_r, -, _CIatan, __vbaStrMove, _allmul, __vbaLateIdSt, _CItan, __vbaVarForNext, _CIexp, __vbaFreeObj, __vbaFreeStr

( 0 exports )

[AeroFury]

Why would you want all those accounts?