Log In     RegMe         


Spammed trojans hosted on paradise.oficialdc.ro (93.113.219.179)

']['€AM€LiT€ Forum - News, Reports and Alerts

 
AuthorMessage
 Vektor

  2009-06-10
  20:09:30

 
Quote
There are many trojans hosted on http://paradise.oficialdc.ro (93.113.219.179), and they were spammed on almost all DC hubs. As I see, there are 4 categories of trojans hosted on that server,


  1. RxBot - there are 4 different RxBot setups:
      • Server address: rocking-dns.no-ip.org:9000 (195.93.140.133)
      • Server password: asd123
      • Channel: #hasmocaru
      • Channel password: samisugipula
      • Bots have this prefix: [B]-*
      • Login password for bots: hasmepeleu

      Files:

      • Server: secure.oficialdc.ro:9000
      • Server password: asd123
      • Channel: #Helite
      • Channel password: asd123
      • Prefix for bots: [B]-* or [M][B]-*
      • Login password for bots: h4ckel1t3
      • Bot's new about information: FrEaK-BoT [RxBot v7.6 modded by FrEaKaZoId]

      Files:
      • Server: secure.oficialdc.ro:7219
      • Server password: asd123
      • Channel: #plugin
      • Channel password: lualib
      • Prefix for bots: [B]-* or [M][B]-*
      • Login password for bots: ezechiele
      • Bot's new about information: FrEaK-BoT [RxBot v7.6 modded by FrEaKaZoId]
      • User command to remove bots:
        favorites.xml wrote:
        <UserCommand Type="2" Context="2" Name="#plugin Uninstall bot" Command="$To: %[nick] From: %[mynick] $<%[mynick]> .login ezechiele|$To: %[nick] From: %[mynick] $<%[mynick]> .remove|" Hub=""/>

      Files:
      • Server: 89.35.204.227:9876
      • Channel: #qwert
      • Prefix for bots: [+]*
      • Login password for bots: realitateatv
      • Bot's new about information: BotNet By Hack-Elite [ modded by AbduL ]

      Files:
      • http://paradise.oficialdc.ro/nfs.exe

  2. iStealer trojans (for more information read the Server 89.exe post)
    FTP accounts where files with passwords are uploaded:
    • ftp://fastdown.xyo.ro (194.88.202.11) , username: fastdown.xyo.ro , password: zionboghy (this account still works)
      Files:
    • ftp://imagespa.ro (194.117.236.41) , username: imagespa , password: bKJz6=<4d1f. (this account still works)
      Files:

  3. VBDos trojans, based on same "t0nt0n sourcecode" as another trojan spammed by Dark_Terror (for more information read about Yahoo Messenger Password Stealer). These trojans have a hardcoded address they connect to, 93.113.219.179:4010 .
    Files:
  4. Droppers:
    • http://paradise.oficialdc.ro/L2TextureEdit.exe (Local path to this project: D:\Kits\Sursa\Project1.vbp)
    • http://paradise.oficialdc.ro/Vx_1.0_Tool_Pack.exe (Local path to this project: D:\Kits\Codex\Codex\codes\New Folder\Project1.vbp)

    These droppers download http://paradise.oficialdc.ro/kits/VirtualX.exe , save it locally as c:/winmrs.exe and execute it

____________________
 asd12

  2009-06-10
  20:52:02

 
Quote
ahahahaha too bad the last 1 is rbot too.and the dns aint working :p n i dont bother about those ftps .TE rocks !! NOT !!
 [-TE-]-Methodman

  2009-06-10
  21:03:43

 
Quote
muie cu ce ocazie pe la noi ? sa inteleg ca doare rau sa sugi zi da zi si mai ales de la aceleasi persoane ?!
sa fiu in locul tau nu as avea nici curajul sa mai intru pa portalul asta,sa nu mai vb de comentarii.nu vezi ca ai fost si continui sa fi "cel mai prost din curtea scolii) asa doar ca sa citez un clasic!
LOOOL
BTW;de ce nu-ti cauti un alt hobby? avand in vedere ca ceia ce faci nu te reprezinta DELOC!
 asd12

  2009-06-10
  21:09:55

 
Quote
LOL ma tu vorbesti ma? =))) cautai accounts.xml si mi le dadeai mie ca nu stiai ce sa faci cu ele :)) eu mai am si o viata spre deosebire de voi.nu stau cu ochii in dc toata ziua in plm .acu esti mare sploiter,te inteleg :)) milw0rm alea alea :)) hf btw nu ma afecteaza ddosu' vostru de rahat
 Vektor

  2009-06-10
  21:23:08

 
Quote
asd12 wrote:
eu mai am si o viata spre deosebire de voi.nu stau cu ochii in dc toata ziua in plm .


Daca ai nu tzi-o strica cu spam / scam-uri / DDoS / phishing / etc. Traieshte-tzi-o.
 asd12

  2009-06-10
  21:45:37

 
Quote
ddos nu dau,dar iau .celelalte sunt just for fun si nu necesita timp mult :)
 Vektor

  2009-06-10
  21:54:24

 
Quote
Iei pentru ca meritzi. Celelalte sunt just for fun pentru ca eshti un retardat shi nu realizezi ce faci.
 asd12

  2009-06-10
  21:57:50

 
Quote
da-ti acolo :))) ca n-are nimic.eu sunt retardat? lol da voi ce sunteti? ah voi sunteti leet am inteles.
 Vektor

  2009-06-10
  22:05:56

 
Quote
asd12 wrote:
eu sunt retardat?


Da.

Quote:
[2009-06-05 18:55] <[B]-Darky> hehe lz
[2009-06-05 18:55] <[B]-Darky> cat ddos va luati diseara


asd12 wrote:
ddos nu dau,dar iau .
 asd12

  2009-06-10
  22:07:50

 
Quote
yep,eu unu nu dau ddos.dar lasa ca o puneti pe sarah la inaintare si isi ia ea pt toti :))) voi nu vedeti cat va agitati pentru niste huburi? in loc sa faceti altceva voi toata ziua stati si spargeti botneturi etc.get a life
 DrEinstein

  2009-06-10
  22:15:54

 
Quote
asd12 wrote:
yep,eu unu nu dau ddos.dar lasa ca o puneti pe sarah la inaintare si isi ia ea pt toti :))) voi nu vedeti cat va agitati pentru niste huburi? in loc sa faceti altceva voi toata ziua stati si spargeti botneturi etc.get a life

Lol, and what have you done for DC community? Did you ever write a program or a script? You can't even compile a fucking RxBot, atleast your friends can't. :-D
 asd12

  2009-06-10
  22:25:20

 
Quote
lol,i dont give a shit on dc community or you.and about compiling,yes they can compile.but who the fuck r u ?
 DrEinstein

  2009-06-10
  22:39:17

 
Quote
Read the logs where IronRobot says that he helped Max to compile the bot, they are somewhere here on forum.

I'm your mother, and I'm asking you for the last time to go to bed before I put you there myself. Good night Darkie boy. :-)
 asd12

  2009-06-10
  22:41:48

 
Quote
lmao r u afraid of telling me who r u? i might think u r dzad but i dunno.
and max has 16 yrs and he asked for help?whats wrong with that? u never asked for help?and you cant do shit to me so stfu n suck it.bbye
 Vektor

  2009-06-10
  23:19:27

 
Quote
Banned.