ZexoCard: no-KYC virtual crypto cards ◆ Private Crypter - Unique Private Stubs ◆ Spoof Call and Spoof SMS set any caller ◆ Traffic service & campaign optimization ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Remote Administration Tools › slave upgraded from win8.1 to 10. Then I lost the slave

New Reply 

slave upgraded from win8.1 to 10. Then I lost the slave
unoquepasaba
unoquepasaba Offline
[user@HF:]
*
Registered
Posts:
329
Threads:
56
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 23, 2016 10:30 AM
Title explains by itself.

How is that possible?
Ar1es
Ar1es Offline
[closed@HF:]
Posts:
71
Threads:
8
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 23, 2016 10:31 AM
Because they are still factory resetting there computer or formatting it in some way or another so if thats being said they can be changing a lot so then your infection file has been removed as well sorry bud
unoquepasaba
unoquepasaba Offline
[user@HF:]
*
Registered
Posts:
329
Threads:
56
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 23, 2016 10:58 AM
I mean I'm sure about the slave didn't get his computer factory reset. What I see was a screen popup showing that windows was going to update to windows 10 in 60 minutes.
Armada
Armada Away
[closed@HF:]
Posts:
22,584
Threads:
642
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 23, 2016 11:01 AM
You user upgraded their OS, I would be surprised if the binary remained to be honest.
unoquepasaba
unoquepasaba Offline
[user@HF:]
*
Registered
Posts:
329
Threads:
56
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 23, 2016 11:40 AM
(Feb 23, 2016 11:01 AM)Armada Wrote:  You user upgraded their OS, I would be surprised if the binary remained to be honest.

Could you elaborate? I would apreciate it!
DingusMonster
DingusMonster Offline
[closed@HF:]
Posts:
1,019
Threads:
41
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 23, 2016 12:12 PM
(Feb 23, 2016 11:40 AM)unoquepasaba Wrote:  Could you elaborate? I would apreciate it!
He most likely chose to overwrite all files. If not then your stub was most likely installed in a system folder or in the registry.
Armada
Armada Away
[closed@HF:]
Posts:
22,584
Threads:
642
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 23, 2016 12:19 PM (This post was last modified: Feb 23, 2016 12:19 PM by Armada.)
(Feb 23, 2016 11:40 AM)unoquepasaba Wrote:  Could you elaborate? I would apreciate it!

This really is not brain surgery. The user literally changed the host OS, critical files and processes changed in the process. Upgrades might leave the software alone, but this assumes its legit installed. RATs tend to install as a system service to ensure persistance and startup, services tend to get reset with an OS upgrade. Again, I would be very surprised if it actually survived.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Black_SwanJan 13, 2017 02:44 AM 9 347 Jan 13, 2017 02:44 AM
Last Post: Black_Swan
by nikosjohnsonSep 11, 2015 10:19 PM 6 142 Sep 11, 2015 10:19 PM
Last Post: xD1RTxz
by N3wb GamerJun 6, 2015 06:19 AM 11 258 Jun 6, 2015 06:19 AM
Last Post: SourMan