Told Razzle to add you.
![[Image: xdXFK.gif]](https://i.imgur.com/xdXFK.gif)
Made statements never gave statements.
(Apr 2, 2010 03:24 PM)Yin Wrote: Contact Razzle for right now, as he's on.
Leet, the stealer uses drops on some, most of them no.
Alright thanks for info, also you shouldn't claim its 100% fud when drop usage isn't 100% runtime, its kind of lying to customers. 😝
DO NOT DEAL WITH THIS MEMBER
(Apr 2, 2010 04:10 PM)iRtehLeet™ Wrote: Alright thanks for info, also you shouldn't claim its 100% fud when drop usage isn't 100% runtime, its kind of lying to customers. 😝
Actually, if the drop is executed in memory then it is undetected and runtime FUD.
(Apr 2, 2010 04:14 PM)Phіus Wrote: Actually, if the drop is executed in memory then it is undetected and runtime FUD.
Yes thus acting as a runtime crypter does, but we all know that isn't the case here in a vb.net stealer. (Source = Drop in temp and run from resources).
DO NOT DEAL WITH THIS MEMBER
(Apr 2, 2010 04:16 PM)iRtehLeet™ Wrote: Yes thus acting as a runtime crypter does, but we all know that isn't the case here in a vb.net stealer. (Source = Drop in temp and run from resources).
I've seen a couple of stealers using Japabrz's RunPE module for drops.
(Apr 2, 2010 04:18 PM)Phіus Wrote: I've seen a couple of stealers using Japabrz's RunPE module for drops.
Wouldn't work under win7/vista ~_~.
looks good yin gr8 job dude. :)
Well, Razzle coded it.
Made statements never gave statements.
Drops firepass.exe for firefox passwords. Detected by almost every antivirus =(
(Apr 2, 2010 04:41 PM)South Park Wrote: Drops firepass.exe for firefox passwords. Detected by almost every antivirus =(
from about 100 sets of logs ive received from the last 2 days theres been no AV popups anywhere (from the screenshots it provides) and most of my victims have AVG/MalwareBytes installed
If you're not interested in buying or giving comments/suggestions, then don't buy.
Made statements never gave statements.
DO NOT DEAL WITH THIS MEMBER
(Apr 2, 2010 04:26 PM)iRtehLeet™ Wrote: Wouldn't work under win7/vista ~_~.
Not true. Some easy modification to the file structure can be made to Japabrz's RunPE or you could write your own using common headers.
Bought about 2 weeks ago. Probably best KL ever used and support is A+. Thanks Razzle.
Glad you like it anorexic.
Made statements never gave statements.
|
![[Image: logo.png]](https://www.ukchemicalresearch.org/images/ukchem/logo.png){kind=logo}
