Guys do your crypt right now OTHERWISE HE'LL UPDATE IT AND REMOVE IT FROM THE SOFTWARE and you would have no evidence left against him.
I believe you should have a backup of that crypted file from BYTE Crypter or anyone who has previous files should submit it to MRT Team to check if its backdoored or not.
Good thing you did bro, but it needs some proof to backup all that you have said. It's a good thing that people are really coming out against these cunts and not caring about the rep but the community. :)
(Dec 12, 2013 09:42 AM)Royal ! Wrote: Stop Spreading this fake Bullshit Regarding my Product. It is Online Now Since November 2011 And i am Earning more then enough from it each Month, Earning such amounts which are not even in your Range of thoughts, So I don't need to backdoor any shit or do any miner thing with it. Furthermore, I have Lots of other people using Byte Crypter and you are NOT the only one who used Byte. And Not a single other person reported any such issue to Me. Further, I Don't allow to use Byte Crypter in Vm's and Sandboxies Because Idiots like you Have like 5-7 Sample Collecting AV's installed on your VM's and you fucktards Totally FUCK the crypter By running crypted files in VM's with your various Sample Collecting AV's installed there. And Just to let you know furthermore, Many Other Crypter Owners and Sellers I am not taking names of Cos I don't want to spoil my friendship with them, they Also DO NOT allow to use their Product in VM's . Does that make them suspicious as well? 🤦♂
Your Account from Byte Crypter is Banned.
And now you Can FUCK OFF and create more bullshit about Byte. IDGAF about it.
I really like how rude you are to others. You said all the "goody-goody" things about your crypter which are totally FAR AWAY from this discussions.
This makes me think that it is indeed backdoored.
@OT send the files to KFC watermelon :)
(Dec 12, 2013 11:17 AM)KFC Watermelon Wrote: Send me a crypted file and I will test these claims.
sending you link to the crypted MyAppCrypted.exe file via pm... which should bring up dialogbox foo, and then 20 minutes later download the file I mentioned, or atleast try to download it... might fail to download if the file has been removed from that place
(Dec 12, 2013 11:54 AM)sbuzza Wrote: sending you link to the crypted MyAppCrypted.exe file via pm... which should bring up dialogbox foo, and then 20 minutes later download the file I mentioned, or atleast try to download it... might fail to download if the file has been removed from that place
I went to that dl you posted, it has been removed by Mark! lol.
(Dec 12, 2013 11:59 AM)Bat™ Wrote: I went to that dl you posted, it has been removed by Mark! lol. Off course it has been. Why would it not be. However to anyone who wants to try, I can provide the crypted My Simple foo dialog app, and you can use any network/http sniffer to see the downloader binded by Byte going for that file after some delay (in my tests the delay was 20 minutes, but may be random depending on what it was set in the downloader)
(Dec 12, 2013 12:02 PM)sbuzza Wrote: Off course it has been. Why would it not be. However to anyone who wants to try, I can provide the crypted My Simple foo dialog app, and you can use any network/http sniffer to see the downloader binded by Byte going for that file after some delay (in my tests the delay was 20 minutes, but may be random depending on what it was set in the downloader)
Send to me via PM ? Will report results after checking the file. Also I would like Byte Crypter customers to come up and send their file samples (they created before 12/13/2013) to MRT team if they really have backdoored their crypter. If you wish you can send them to me also via PM :)
NOTE : Do not get scared by Mark's neg's. This kid wouldn't be able to do anything if we talk via PM's. If you post it in public, he might ban you account. So be careful :)
Dec 12, 2013 12:11 PM
(This post was last modified: Dec 12, 2013 12:12 PM by Jаck.)
No pcaps? No screenshots? Yeah, we need more than that.
Bat I sent you via PM the file link of my foo dialog app crypted by Byte. Thanks.
(Dec 12, 2013 12:20 PM)KFC Watermelon Wrote: I got OPs file and will provide a complete analysis.
Our only option is to wait for the result.
We shall see.
(Dec 12, 2013 01:24 PM)stefsot Wrote: Our only option is to wait for the result.
We shall see.
Indeed, I'm really intrested if this story is true or not. We shall see.
Post ss's please.
WinUpdate.exe is the default process name of crypted file.
![[Image: lPT53MD.png]](https://i.imgur.com/lPT53MD.png)
I own byte crypter and have tested it twice after i saw this thread.
I got nothing on the freshly installed OS.
Looks clean to me.
TreeChar, If you are using the same crypter as was there this morning, wait for 20 mins after executing the crypted file and look in fiddler to see any attempt to download another exe. There is a delay execution. the additional file it was downloading 20 mins after execution has since been taken offline, so you will not see anything happen anymore, but will see the ping to try and download the file from http://www.diablo3keygen.net/crvbox.exe
(Dec 12, 2013 02:03 PM)TreeChar Wrote: WinUpdate.exe is the default process name of crypted file.
I own byte crypter and have tested it twice after i saw this thread.
I got nothing on the freshly installed OS.
Looks clean to me. Just FYI: When crypting, I did not select the Install options in Byte Crypter.
(Dec 12, 2013 02:21 PM)sbuzza Wrote: TreeChar, If you are using the same crypter as was there this morning, wait for 20 mins after executing the crypted file and look in fiddler to see any attempt to download another exe. There is a delay execution. the additional file it was downloading 20 mins after execution has since been taken offline, so you will not see anything happen anymore, but will see the ping to try and download the file from http://www.diablo3keygen.net/crvbox.exe
Just FYI: When crypting, I did not select the Install options in Byte Crypter.
No Connection over there,
been 1 hr file is running, Crypted yesterday.
I also got an av with firewall, if there was any connection then It must have catch it.
(Dec 12, 2013 02:23 PM)KFC Watermelon Wrote: I can't find anything to support Mark! being the owner of this site, other than I believe he is from India, and the site is hosted in India.
Mark had an us verified business paypal where i payed,
From that I Can say he is from US.
and I believe mark crypter is clean, am using from few weeks.
Cause if it was binded with the story made by OP then all the crypter users along with me have been infected Cause all test there crypted file in the main os only.
I am with mark, op is making stories here, or used the download/execute option from the crypter by mistake.
(Dec 12, 2013 09:11 AM)Bull™ Wrote: I am the son in low of barak Obama, Just trying to make a stroy like you but think I am not good as you .
241kb miner, I Cant belive it,Cause the miner will download more then 1 exe and 3 dl.
Post some real proofs before open your fucking mouth.
Learn to know how to spell your father in laws name, mr son in low or barak Obama.
(Dec 12, 2013 02:48 PM)KFC Watermelon Wrote: I have nothing against Mark, at all, and a lot of my customers use his crypter and say it's great. However, I do believe he has a PayPal holder. I'm 90% sure he is from India, or at least a foreign country, as English is not his primary language.
Yes, he's Indian. He also has a chevrolet Beat as his car. Saw him post this somewhere.
(Dec 12, 2013 09:11 AM)Bull™ Wrote: 241kb miner, I Cant belive it,Cause the miner will download more then 1 exe and 3 dl.
Actually my older miner(no external files like dll etc.) which is coded in C++, has nice size of 204kb, and it doesn't download or drop files. It works with GPU+CPU. :)
RtlCreateIrlObjectA
|
