Pink Poodle

Like I said earlier, it has nothing to do with liking SOE or not, but more like "lol he's gon' get raeped"

__________________

Rave Ghost says: "EQ2Flames on ED: Click here! And Part two! Some NSFW content present."

EQAditu

Well, it's certainly not a benign program. It never tried to display a window.

Here are some of the suspicious actions I observed it do.

• It looks for the existance of C:\log.txt
• It looks for the existance of C:\mswinsck.ocx
• It writes 108336 bytes to C:\mswinsck.ocx and closes the handle
• It looks for the existance of regsvr32.exe in its current location and then in the Windows folder
• It creates the process regsvr32 /s C:\mswinsck.ocx
• It loads C:\mswinsck.ocx into its own process memory
• Every second it checks for the existance of C:\givemedata.txt

It did a lot of reading of Internet Explorer registry settings but didn't write to the registry much at all. It didn't add any startup components to the system, just stayed memory resident itself.

The VM wasn't connected to the internet, so probably the program did a lot less than intended. Considering it registered a networking component, it obviously was thinking about it.

serum321

A poor attempt at a keylogger?

the_mo

>It didn't add any startup components to the system, just stayed memory resident itself.

well... if it did register itself as a service its automatically run anyways, no need for startup-entries ;)

but given the above mentioned facts its obviously malware, either some kind of trojan or password-stealer (although the later dont tend to run more than once)

Tethias

I apologize for this fucknut, he comes from our server

__________________
His person was graceful, tho' tall and slender, his mien and shape having something extremely engaging; and for his mind, it discover'd charms not to be withstood. His wit was strong, subtle, sublime, and sprightly; he was perfectly well-bred, and adorned with a natural modesty which extremely became him. He was master both of the ancient and modern authors, as well as of all those in the modern French and Italian, to say nothing of the English, which were worthy of the perusal of a man of fine sense. From all which he drew a conversation so engaging, that none could enjoy without admiration and delight, and few without love.

Bemec

Honestly guys, it doesn't actually DO anything. I posted it to get this reaction. Much lulz from watching you all buzz around.

I did mention in the AB forum I was bored with all the lack of stimulating drama.

But, really..

the_mo

because you obviously need to grow up and realize, that malware is not a single bit of fun in any possible way... even the "actions" of anonymous are more mature then this

and FYI: using a trojan-build-kit and then try to infect ppl with it is not an action of boredom, more an action of stupidity

Bemec

Not a trojan. See analysis. All it does is set off anti-virus for lulz. A poster described it\\s useless effects already.

Dilfx

You are still a Grade A faggot for even considering to post that.

__________________
:: Dilfx Cares, 80 Dirge, Blackburrow :: Silf (formerly Intolerance Hates'Venekor), 73 Warden, Nagafen :: Dilf Cares, 51 Bruiser, Nagafen ::

SageGaspar

Truly, you have uncovered some epic lulz. I feel so inspired I am going to go do a google image search for an appropriately witty picture. I might even employ Paint ironically.

I salute you, brother.