Force Download Exploit ***PUBLIC RELEASE!***

[Korittke]

autoruns, they can't do anything against it, they go to the site and -smack- the virus is installed.

 

[yoc_influenced68]

ok i have it auto downloading the drop hack but now how do i go about it getting to auto run? or its not possible to do with drop hack?

 

[Korittke]

read again. then think again

 

[PyroKid]

if you want answers to your questions read my post that explains it. the link is in the text. to all you guys that say this isnt safe your not supposed to run it (duh), the victim is supposed to. i used tripod to run mine and it works perfectly. i have only tried this on win98, two versions of win2k, and winxp. it works fine on 98 and one version of 2k (probably unpatched) but i think ive figured out a way to make it work on xp and patched versions of everything else. i didnt think it was possible but after what oneyedman said ive looked into it and made some progress .

heres some answers to the more not obvious questions:

Q: ok i ran the program after i edited it to my .exf but it asks me if i want to dl
maybe it is because i have windows M.E??
and does anyone know how to put this onto a web page
and i also need somewhere to put my file cas geocities wont let me upload .exf files
A: I had the same problem with geocities. try using tripod they give much better service and you can upload your exf files through ftp.

Q: OK i got everything to work
and i set it all up then went over to my mums laptop
and went to the site and it asked
i wanted to download it
i said yes and open from current location
then it said "OPEN WITH" and the program wont open cas its .exf
it just has a menu with other programs to open it with
So what does this mean did i do it wrong?????
A: If the filesystemobject cant be activated it cant create the exf extension in the registry. Thats why your receiving the open with dialog. Agian its just a matter of windows not running it.

Q: This exploit doesnt work with a drop hack.
After testing it simply exits their diablo and no the drophack isnt ****ed up. It works fine when u run it normally. And yes i configured the html file correctly.
A: No you didnt. Either that or your computer is screwed up.

Q: how in the hell this supposed to work?
A: Read my post on how this program works

Q: Except setting the url do I have to set a decryption password too? I saw such an area in the html, but nothing in the readme says to put password etc....
A: You dont need to change that. It's encrypted with that password and if changed it won tdecrypt correctly. The encryption is simply so norton or whatever wont detect it.

Q: DO NOT DOWNLOAD THIS FILE
THIS FILE MESSES UP D2JSP AND OTHER APPLICATIONS.
YOUR BOT WILL NOT LAUNCH AND YOU WILL RECIEVE ERRORS.
I AM NOT THE ONLY VICTIM. OTHER PEOPLE HAVE THE SAME ERRORS EXACTLY AS THEY USED THIS FILE.
I DONT CARE WHAT MODS SAY. THIS ISNT SAFE.
DONT DOWNLOAD IT!
A: This file is safe unless YOU run it . Even if you do the file itself wont do anything to your computer except create a .exf extension.

Ok looks like thats it. You guys have fun until I get this thing updated

 

[tradewindrider]

oneyed man, you should remove that site, i went to try it and it installed netdevil server, i removed it but others might not and there's going to be people going crazy from that post

 

[oneyedMan]

There you go, theres proof that it works .. Dont worry bout it need a password to enter that server anyway .. And i clearly said

NOTE: This site will force a trojan to download on your pc.


Ps. Removed.

 

[tradewindrider]

one question oneyed, why'd you add an error message, i think just that makes ppl suspicious

 

[oneyedMan]

Yer suppose lol.. i might change it soon when i get the list to work

 

[Ultimate Empire]

it is going to be cool when wrappedapps comes out. WrappedApps is a company i am working for and within a weeks time will be rolling out new technology.

**People will now be able to embed Applications into a webpage, using one line of code.**

http://www.wrappedapps.com in a week or less will have this technology.

 

[Korittke]

sounds good . and its 4free? ^^

 

[Ultimate Empire]

uhhh. hopefully there will be a trial. and if not i will try to get a free company trial for you to test is possible

 

[Ultimate Empire]

Disclaimer: PyroKid assumes no responsability for any misuse of the information provided herein. This is posted merely for educational purposes and not for actual use. Should you use my program and something should happen including but not limited to damages, loss of property, etc. neither I nor anybody else should be held accountable.

lol. I love it when people make flawed disclaimers

 

[PyroKid]

it gets the point accross anyways lol
besides im just 14 im not very good with big words

 

[Korittke]

whats a flawed disclaimer? is my discalimer in the trojan thread flawed?

 

[PyroKid]

idk but i changed edited it anyway.
also im awaiting testing results for a new version of this program that will work on xp, me, patched win2k, ie 6.0 and all that other stuff. if i get it working ill post it

 

[cameltozis]

sry...didn't get wut is this programm(module) for???
wut does it do?????

 

[Korittke]

ok, i found out that the exploit as posted only works for internet explorer <5.5> and any outlook.

 

[tradewindrider]

can someone who got this to work post very brief steps for starting to make this work, all that valk wrote is too 1337 for me

 

[Death_Noodle]

yeah i dont really get this either

 

[Korittke]

ok, you just download the file, then you open the exploit.html with notepad and put in the address to your efx file (uploaded somewhere) in. then you upload that file somewhere else and wait for people to start it.