+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Bazaar (https://hackforums.net/forumdisplay.php?fid=450)
+---- Forum: Marketplace Discussions (https://hackforums.net/forumdisplay.php?fid=163)
+---- Thread: [Community Alert] ExterByte Crypter RIPPER BE CAREFULL (/showthread.php?tid=5590806)
ExterByte Crypter RIPPER BE CAREFULL - bunny884 - Apr 2, 2017
Thread:
https://hackforums.net/showthread.php?tid=5500310
Profile:
https://hackforums.net/member.php?action=profile&uid=1407964
This guys is selling a crypter at a very cheap price,the crypter works really bad but the worst part is that he steals all your but here is the proof of his connection that the rat instead of connecting to my dns connects to his:
http://prnt.sc/erpu4m
Be CAREFULL GUYS DONT BUY
* - XzZ. - Apr 2, 2017
That means his crypter binded with backdoor? Just make a virustotal scan to prove. But really bad if he do so!
* - Cheese Doober - Apr 2, 2017
get in contact with codefuser he/she'll be able to provide some good info for you
* - bunny884 - Apr 2, 2017
here is the virus total seems that it is binded with so many viruses i just crypted imminent monitor!! they are sayig that its betabot win32.neurevt ,ransom ware,torjan Midie so many viruses inside one file OMG how is that possible?
https://www.virustotal.com/en/file/3f118088851eec32a77c9f10021a4be53a898122a968e62e88a215eff81077ed/analysis/1491183738/
* - TRH4CK - Apr 2, 2017
Only saying that wont be enough proof. I would suggest you to make a video about it, screen record your screen. I could easily buy any app and say the same.
Nothing against you or exerbyte's owner..!
* - ݃݃݃๖ۣۜKosdff - Apr 2, 2017
I has contacted le codefuser
* - Codefuser - Apr 2, 2017
(Apr 2, 2017 06:47 PM)bunny884 Wrote: here is the virus total seems that it is binded with so many viruses i just crypted imminent monitor!! they are sayig that its betabot win32.neurevt ,ransom ware,torjan Midie so many viruses inside one file OMG how is that possible?
https://www.virustotal.com/en/file/3f118088851eec32a77c9f10021a4be53a898122a968e62e88a215eff81077ed/analysis/1491183738/
Can't believe someone sane would crypt betabot/neurevt with this, this crypter breaks betabot lol. Will wait to see how this go.
* - CKkio23 - Apr 2, 2017
(Apr 2, 2017 06:52 PM)๖ۣۜKosdff Wrote: I has contacted le codefuserGrabbing Popcorn. This gonna be good.
* - bunny884 - Apr 2, 2017
i am just warning the community, i dont have time for that piece of cancer to make proof that he is full of crap and that he is a ripper!!
so simply if guys if you dont beleve me buy it!!
a man warned is half saved your choice :D
* - Codefuser - Apr 2, 2017
Can confirm that this is not WinRAR's update server.
bury77nl.zonive.com's IP: 185.77.129.177 (belongs to QHOSTER LTD. so probably VPN)
* - SIM-2875347 - Apr 2, 2017
(Apr 2, 2017 07:15 PM)Codefuser Wrote: Can confirm that this is not WinRAR's update server.
bury77nl.zonive.com's IP: 185.77.129.177 (belongs to QHOSTER LTD. so probably VPN)
Do you think it binds a RAT or something? Or maybe just a backdoor? With a sample it probably wouldn't be too hard to find out