Crythor and Lightupman (10277 and 33539) - Malicious "Add-on Packager" Program

[Sentry]

I downloaded the original to upload to virus total, i still have it.

Ok first thing we need to do is find out if the original is actually a virus or not. Any takers?

[Ad Bot]

[lightupman]

So, you can prove it's not a virus, unless you modified it to be right, you'd know that it is truly not a virus. I promise with my good will that what I uploaded was not a virus, unless Alquaida hacked into my mainframe, then it will not do anything, unless the bad script for the flashing trollface worked, it'll open up a display.

[Sentry]

NOEDIT: Nevermind I guess Blockzillahead is going to check it out.

[Sentry]

Lightupman. Why did you even start this stuff anyways?

[lightupman]

Lightupman. Why did you even start this stuff anyways?

I thought a little flashing trollface wouldn't give me such a bad time, I just wanted to see if one of my first scripts would run on windows 8, and still don't no if it does. I'm sorry for whoever is offended by that, with great concern I take this to my self being and feel like stuff for this. God I wish this never happened, I'm sorry for expecting so much from you guys, just a small laugh. I am honestly...

[K3k0m@n]

I downloaded the original to upload to virus total, i still have it.

Can you PM me it? I can run it in a virtual machine, see if it does anything.

[Danny Boy]

Still not a virus, I pushed a kid, and am getting charged with murder is what this feels like.
It was a troll with no damaging software.

User was banned for this post

And he is out of here.

[Aide33]

And he is out of here.

Out of the park!

Home run!

[Blockzillahead]

Whoever has this file, do not run it. It tries to delete or modify every single dll in the system32 folder. What the forget is this? A simple echo program? The long ass essay code says otherwise.

First as we start up the program, we are greeted by a stupid advertisement because the creator is a handicap and used a bat to exe converter online. Seriously.


Next up it says if it wants to reboot windows... What for? It didn't do anything?


Upon entering "y" for yes, you get this;

It deletes your dll files, or at least tries to but fails. My mind is blown.

[Wrapperup]

Whoever has this file, do not run it. It tries to delete or modify every single dll in the system32 folder. What the forget is this? A simple echo program? The long ass essay code says otherwise.

First as we start up the program, we are greeted by a stupid advertisement because the creator is a handicap and used a bat to exe converter online. Seriously.


Next up it says if it wants to reboot windows... What for? It didn't do anything?


Upon entering "y" for yes, you get this;

It deletes your dll files, or at least tries to but fails. My mind is blown.

Thanks for testing it, im guessing you are running on a virtual machine? i hope?

[Blockzillahead]

Thanks for testing it, im guessing you are running on a virtual machine? i hope?

Yes, also I did not manage to get away with it.

[Acerblock]

Very nice job, Block.

[Cassord²]

Well then, looks like someone needs a key revoke right about now.

[KillerCop311]

Still not a virus, I pushed a kid, and am getting charged with murder is what this feels like.
It was a troll with no damaging software.

User was banned for this post

ephi is a true hero

and a key revoke is really needed, with a virus this OS destroying

[Danny Boy]

I agree.