Stealing Accounts and CD-Keys with Trojans - Netdevil & beast 2.00

[Matrixman2]

hmm thesummit this is not working for me m8y. my m8 tried it nothin came up

 

[Matrixman2]

help !!! :'(

 

[giggles]

don't double post.

anyways, what is wrong with it, and what are you doing? Did you read the instructions?

 

[Saterial]

Hey Summit do u mind PM"ing" A url(s) for the websites where I can download the bots that you are using?

Thx

 

[CelestialBadger]

Hey, I've been playing around with this just for fun and I have a question. When I go to the site I made to download it I get the Windows XP pop-up to warn me not to, but then once it's downloaded I get another pop-up that says that .exf isn't a valid extension. Also the page displays an error along the bottom bar when it's opened. Do those two errors also have to do with XP? Thanks.

 

[PyroKid]

it wont work on windows xp. if you want them to get infected in windows xp, include a link to a exe file so that they will download and manually run it

 

[Bobdole316]

I'm having trouble getting the port. Whenever I view "list.txt" I get this (No port)


"Datum: 18.06.2003 Zeit: 00:30 NetDevil-IP: RemoteAddress-IP: (Their IP) Port: Username: "

How do I get the port?

 

[CelestialBadger]

Yeah, but which error is on account of XP. Are they both because of XP? I realize that XP asks you if you want to open it, but does it also give you the "This file can't be opened" error?

 

[Bobdole316]

Wait, nvm. I assume you don't get a port? Do I just leave 901 as the port in NetDevil?

 

[giggles]

you can leave the port the same, or change it. it doesn't really matter. just write it down and use it to log in to the server when other people run it.

 

[CelestialBadger]

Pyro: Web downloaders, do they download stuff without a download box appearing or what?

 

[PyroKid]

webdownloaders will download it secretly. the victim wont see a thing

 

[CelestialBadger]

I think I have this worked out, but I have Windows XP...wanna test it for me...?

 

[XxSirInsanexX]

Hiya

Ok i havin a problem, it is just one or maybe two. My netdevil wont let me access the editserver.exe I extracted the files and i dont see editserver anywhere. I have downloaded netdevil like 10 times, and cannot get editserver. I only see editserver in the zipped files. And when my friend tested trojan on me on his website, i donwloaded trojan and double click it but it just said to me like an error message saying crap and that i couldnt open it. Can u tell me what is wrong. Thx

 

[CelestialBadger]

Maybe you have Norton Autoprotect on. You need to turn your virus scanner off, otherwise it will automatically get deleted.

 

[(oolspot1]

how come my comp wont upload showcdkey.exe? itll upload the bat file, and itll put the image of showcdkey.exe on there but i cant delete it, run it, rename it or anything. im stumped. do i have to quit out of his diablo ii for it to work?

o and btw if u want a nice disclaimer at the bottom that ppl arent likely to read, right click on ur index file when its still on ur comp. click edit. now copy this in at the very end


</body>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
</html>
<td width="100%"><textarea id="TOU" class=PPDesTxt rows="1" cols="50" wrap="soft" readonly>AGREEMENT OF USE OF THESE FILES
By downloading these files you agree that they are for educational purposes only, and that you may not use them for personal gain. If you are not exactly one hundred years of age then you may not download any of these files.
If you are more than one year of age and you wish to download these files then you agree that the creator of these files may have full access to your computer, and by downloading these files you give him your consent.
If you do not agree to these terms then do not download these files
Revised August 2002</textarea></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" border="0">
<tr>
<td rowspan="5"><img src="/images/T.gif" width="10" height="1" border="0"></td>
<td width="100%"><img src="/images/T.gif" width="1" height="10" border="0"></td>
<td rowspan="5"><img src="/images/T.gif" width="10" height="1" border="0"></td>
</tr>
<tr>
</p>

thats how i have mine and ppl still download my trojan. i called it dupeswap2, but didnt put in the descrip that it can dupe. i think if ne1 actually does come after me big time (doubtful), theyll put up a really shitty case.

o and i forgot to ask another thing. what r the required mpq's for showcdkey?

 

[heaven_earth]

Hey if you close there diablo 2 then when they log back on they only have to enter there pass so how do i find out there account name?|

EDIT: Ok i found a way of how to by editing the regestry and deleting the key of the last account used, but is there a easyer way?

 

[qwerty29]

i feel slightly script-kiddieish doing this.

Surely, can they trace the netdevil back to my ip?

 

[Turkey]

Heaven_Earth here's an answer to the question "How do I know the victim's account name?"

goto the registry edit and find this key:
HKEY_CURRENT_USER\Software\Blizzard Entertainment\Diablo II
then go to the setting called LastBnet. The last account name is there.

 

[PyroKid]

Hey if you close there diablo 2 then when they log back on they only have to enter there pass so how do i find out there account name?|

EDIT: Ok i found a way of how to by editing the regestry and deleting the key of the last account used, but is there a easyer way?

ok why didnt you just look at the last account used instead of deleting it?