99% Sure One Just Attempted to Infect me

[Pro]

Updated with proof, happy to confirm all of it with any admin/owner on skype.

 

[Lihtsaber1]

From the proof....I dont know...But im gonna delete and check some of the stuff on mine like on pro's

EDIT:Just checked and mine multiplied aswell.

 

[Gengar_mybb_import19743]

This proves nothing, if anything it shows One doesn't know how to set up his crypter.

 

[Adam]

http://puu.sh/sWP0
The crypter automatically creates larger files and I pumped it.
I mean go ahead and TV me while I crypt it. IDC

 

[Techno]

It's a possibility his crypter just corrupted it. When crypting the size of the file does increase you do have to realize that.

 

[Pro]

This proves nothing, if anything it shows One doesn't know how to set up his crypter.

It proves that their was an RAT binded with persistence installation. I my original file didn't have persistence. He claimed to have run my original file and didn't. He deleted the file already. Too bad i kept a copy.

 

[ViN_mybb_import10810]

One is pretty legit, I am sure he didn't do anything.

 

[Mr.Anderson]

Lmao...you do know when a file is crypted the size is increased right..?

 

[Adam]

This proves nothing, if anything it shows One doesn't know how to set up his crypter.

It proves that their was an RAT binded with persistence installation. I my original file didn't have persistence. He claimed to have run my original file and didn't. He deleted the file already. Too bad i kept a copy.

I don't know what settings my crypter adds to the file. I would be happy to show anyone over teamviewer my crypter. I won't release the crypters name as I am breaking its ToS.

 

[Gengar_mybb_import19743]

This proves nothing, if anything it shows One doesn't know how to set up his crypter.

It proves that their was an RAT binded with persistence installation. I my original file didn't have persistence. He claimed to have run my original file and didn't. He deleted the file already. Too bad i kept a copy.

Are you dumb? Crypters have the option to enable persistence.
Skid

 

[George_mybb_import13408]

This proves nothing, if anything it shows One doesn't know how to set up his crypter.

It proves that their was an RAT binded with persistence installation. I my original file didn't have persistence. He claimed to have run my original file and didn't. He deleted the file already. Too bad i kept a copy.

Do you bind your server to it?

Yeah, I do. /s

He said he binds his own.

 

[Pro]

Here's the file he crypted for me:

https://www.dropbox.com/s/osxsbafggra1uy4/forpro.exe

Quite possible i'm wrong. Also possible i'm right.

Obviously the link is infected.

 

[Adam]

This proves nothing, if anything it shows One doesn't know how to set up his crypter.

It proves that their was an RAT binded with persistence installation. I my original file didn't have persistence. He claimed to have run my original file and didn't. He deleted the file already. Too bad i kept a copy.

Do you bind your server to it?

Yeah, I do. /s

He said he binds his own.

LOL I hope this is a troll...

/s = sarcasm.

 

[George_mybb_import13408]

It proves that their was an RAT binded with persistence installation. I my original file didn't have persistence. He claimed to have run my original file and didn't. He deleted the file already. Too bad i kept a copy.

Do you bind your server to it?

Yeah, I do. /s

He said he binds his own.

LOL I hope this is a troll...

/s = sarcasm.

MFW I thought you just hit your keyboard.

 

[Adam]

Yeah, I do. /s

He said he binds his own.

LOL I hope this is a troll...

/s = sarcasm.

MFW I thought you just hit your keyboard.

If a staff and or admin wants to run it on a test slave and watch me over teamviewer to see if they show up I encourage you to do so.

 

[Pro]

If a staff an or admin wants to run it on a test slave and watch me over teamviewer to see if they show up I encourage you to do so.

That wouldn't prove anything. You could easily listen on a different port or have another DNS setup.

I have several ports forwarded that I use for ratting.

 

[Gengar_mybb_import19743]

If a staff an or admin wants to run it on a test slave and watch me over teamviewer to see if they show up I encourage you to do so.

That wouldn't prove anything. You could easily listen on a different port or have another DNS setup.

I have several ports forwarded that I use for ratting.

And your proof isn't any better.

 

[Lihtsaber1]

Well he said i could have a test slave and i still aint had that yet no logs have come in yet....

 

[Adam]

If a staff an or admin wants to run it on a test slave and watch me over teamviewer to see if they show up I encourage you to do so.

That wouldn't prove anything. You could easily listen on a different port or have another DNS setup.

I have several ports forwarded that I use for ratting.

And your proof isn't any better.

I only use 3 ports for RATing. One for my DC server. Two for BlackShades server. I have used the same DNS for ever and I ould be happy to show my DNS account. I use a VPN to portforward and I would be happy to show that as well.

 

[Pro]

More pics:
The process it starts isn't the same as mine:
The process I used is msdcsc.exe
While the procces it started was MSBuild.exe

Spoiler