+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Antivirus & Protection (https://sinister.ly/Forum-Antivirus-Protection)
+--- Thread: I need some help. May provide a reward (/Thread-I-need-some-help-May-provide-a-reward)
I need some help. May provide a reward - nun4life - 04-18-2013
Hello, it has recently come to my attention that I may have a R.A.T on my pc and I think I know which program caused it. Would any of you please take a look for me.
If you do find something on it can you tell me what it has done and how (If I can) remove it. I also know the guy who gave me it so any info you could get from this about him would be much appreciated!
I do have anti-virus (Avast) it did not pick it up.
Link to download and help me out - http://www.mediafire.com/?9c2p8i2tmdfcz9j
I need some help. May provide a reward - nun4life - 04-18-2013
Hello, it has recently come to my attention that I may have a R.A.T on my pc and I think I know which program caused it. Would any of you please take a look for me.
If you do find something on it can you tell me what it has done and how (If I can) remove it. I also know the guy who gave me it so any info you could get from this about him would be much appreciated!
I do have anti-virus (Avast) it did not pick it up.
Link to download and help me out - http://www.mediafire.com/?9c2p8i2tmdfcz9j
RE: I need some help. May provide a reward - Coder-san - 04-18-2013
It's obfuscated using Confuser v1.8. So that will be a problem in decompiling.
But I'll look into it in a VM, will let you know if I find something.
RE: I need some help. May provide a reward - Coder-san - 04-18-2013
It's obfuscated using Confuser v1.8. So that will be a problem in decompiling.
But I'll look into it in a VM, will let you know if I find something.
RE: I need some help. May provide a reward - nun4life - 04-18-2013
(04-18-2013, 04:17 PM)Coder-san Wrote: It's obfuscated using Confuser v1.8. So that will be a problem in decompiling.
But I'll look into it in a VM, will let you know if I find something.
Thanks alto bro!
RE: I need some help. May provide a reward - nun4life - 04-18-2013
(04-18-2013, 04:17 PM)Coder-san Wrote: It's obfuscated using Confuser v1.8. So that will be a problem in decompiling.
But I'll look into it in a VM, will let you know if I find something.
Thanks alto bro!
RE: I need some help. May provide a reward - Coder-san - 04-18-2013
It displays a console window with some gibberish and exits.
![[Image: f0zfJhC.png]](http://i.imgur.com/f0zfJhC.png)
Probably an attempt to manually edit the obfuscated output.
No idea what it could be, until I can either run or "unpack" it.
RE: I need some help. May provide a reward - Coder-san - 04-18-2013
It displays a console window with some gibberish and exits.
Probably an attempt to manually edit the obfuscated output.
No idea what it could be, until I can either run or "unpack" it.
RE: I need some help. May provide a reward - nun4life - 04-18-2013
(04-18-2013, 04:44 PM)Coder-san Wrote: It displays a console window with some gibberish and exits.
Probably an attempt to manually edit the obfuscated output.
No idea what it could be, until I can either run or "unpack" it.
Hhhmmm. Not sure I want to ask him for the source code or any thing. Thanks for your help any way!
RE: I need some help. May provide a reward - nun4life - 04-18-2013
(04-18-2013, 04:44 PM)Coder-san Wrote: It displays a console window with some gibberish and exits.
Probably an attempt to manually edit the obfuscated output.
No idea what it could be, until I can either run or "unpack" it.
Hhhmmm. Not sure I want to ask him for the source code or any thing. Thanks for your help any way!