Messages

1126

Drama / Re: Etheria & Aetheria

« on: January 03, 2015, 03:05:42 AM »

noedit: also maxx, the link to hackforums appears when you search "aRCheliFUN."

it's to a batch random number generated someone made. i'm sure that person just used the same program to write the .bat to an .exe file

1127

Drama / Re: Etheria & Aetheria

« on: January 03, 2015, 03:03:56 AM »

bummer :(

also, the batch file only created directories and set the reference to some place in my documents.. if i remember correctly. i might be wrong, but i'm siding with ipquarx here, i don't think it's ratted, only the tool used to create the file was.

1128

Drama / Re: Etheria & Aetheria

« on: January 03, 2015, 01:14:11 AM »

hey i just noticed the "afolder" thing you were talking about ipquarx

it's empty...

also um why is my ytmp folder empty

:O

1129

Drama / Re: Etheria & Aetheria

« on: January 03, 2015, 12:59:21 AM »

Carbon (or Darksaber) is a close friend of mine on Steam and I know he wouldn't do this. He sent me a message a few moments ago.

I don't have any evidence, but I'm pretty sure it was an accident. He's a nice user.

this is exactly what i'm guessing.

i didn't think the program itself was malicious, just the program to wrap it into an executable file may have been sketchy. (i downloaded that too though. ._.)

1130

Drama / Re: Etheria & Aetheria

« on: January 03, 2015, 12:57:07 AM »

the only thing that came up was a stupid "SearchProtect installer" that i thought i got rid of a few weeks ago because of my sister's ineptitude with computers.

1131

Drama / Re: Etheria & Aetheria

« on: January 03, 2015, 12:54:57 AM »

i still have my doubts it's actually a rat

if the scan comes up clean i'm calling it a day. the batch file was simple enough, and the only things weird about it was the first few lines where it called out a couple directories or something but that's really it.

kinda odd how it was stored under a ytmp folder under %temp% though. and the folder was hidden, but that could possibly just be the doings of the advanced bat to exe converter thing

1132

Drama / Re: Etheria & Aetheria

« on: January 03, 2015, 12:31:56 AM »

Dont forget he might actually put up pop ups and turn on your webcam if you have one!

if he turns on my webcam he best be ready for my ugly ass

1133

Drama / Re: Etheria & Aetheria

« on: January 03, 2015, 12:30:47 AM »

its either stick with a virus that he can steal your stuff from
or save yourself and reformat

doesn't malwarebytes pick it up? i'm pretty sure it does

besides, his profile say's he's 15, it was a pretty sleezy but easy to crack program... this guy either was a 15 year old kid who wanted to play an ARG with the blf or he's pretty good at making decoys and hiding under a facade

nonetheless, i'll install malwarebytes and run a scan despite my other program finding nothing earlier :u

1134

Drama / Re: Etheria & Aetheria

« on: January 03, 2015, 12:24:21 AM »

ohhh my god.

well, good thing i've gotten rid of RATs before

fun game OP, hope you didn't steal my swtor password. you'll be disappointed because i just made the account ;(

i really do not want to reformat because i've done it sooo many times...

1135

Drama / Re: Etheria & Aetheria

« on: January 02, 2015, 11:40:28 PM »

idk what the hell is up with helicopters

like, is this password a discount code for a new rc helicopter? mine broke last year

1136

Drama / Re: Etheria & Aetheria

« on: January 02, 2015, 11:35:46 PM »

https://i.imgur.com/PAxOO1r (use diagonals :p)

holy stuff i just did that and was about to post that lol

1137

Drama / Re: Etheria & Aetheria

« on: January 02, 2015, 11:30:48 PM »

maybe it has something to do with the websites..

1138

Drama / Re: Etheria & Aetheria

« on: January 02, 2015, 11:27:37 PM »

Ey yo flame I sent you a pm. Also send me the bat file if you can.

okay

reported

u wot

hold on someone didn't post the entire details of decrypting the mdft file
naughty naughty

Code: [Select]

NULL_DATA_8=0 
50617373776F72643A206666783739464646383833747479 

which is a hex string to
Password: ffx79FFF883tty

okay.. where do we put this password, though? we've got three passwords and only two fields.

1139

Drama / Re: Etheria & Aetheria

« on: January 02, 2015, 11:19:40 PM »

hold on someone didn't post the entire details of decrypting the mdft file
naughty naughty

Code: [Select]

NULL_DATA_8=0 
50617373776F72643A206666783739464646383833747479 

which is a hex string to
Password: ffx79FFF883tty

whoa, hold on. mine doesn't have that last part :u

1140

Drama / Re: Etheria & Aetheria

« on: January 02, 2015, 11:14:17 PM »

A program that extracts strings from exe files.

okay, put it in where? as the password?

i just opened the .bat in notepad and i saw this

Code: [Select]

if NOT %password%== ff108Br77xx01 goto :wrongpass

so

Try entering "99172" and "aRCheliFUN"

where would we put these, though?



EDIT: a quick google of "aRCheliFUN" shows only three really prominent results... a link to a website for Advanced BAT to EXE Converter, iStream, and HackForums.