Thread: Very careful what you download, Malware rodoxfnx

Hello people, I came to show that topic that nothing is safe, even no matter who comes to this topic what did rodoxfnx.
Br: Olá galera, Nesse tópico vou mostrar para vocês como nada é seguro, mesmo vindo de algum membro de honra do fórum como o rodoxfnx.

What he did is simple, he created a program: https://progamercity.net/aika/3498-r...generator.html

Br: O que ele fez é simples, ele criou esse programa: https://progamercity.net/aika/3498-r...generator.html

When I saw this post, I thought cool, let's see how he has to bypass the CAPCHA. I downloaded the file.
Br: Quando eu vi esse tópico dele, eu pensei dahora, vo baixar para ver como ele fez pra burlar o capcha do site. Baixei o arquivo.



Then I decided to debug, to see what he did to circumvent the CAPCHA, I saw that the program was done on the platform. Net, I decided to use a popular program that actually does reverse engineering and returns the complete source code through the program.
Br: Então eu decidi debugar o programa, para ver como ele fez pra burlar o capcha do site da ongame, quando fui debugar, vi que o programa foi feito em plataforma .net. Então eu decidi usar um decompilador popular que retorna praticamente quase todo o código source do programa.

Now look what I ended up finding a function, that after you login, it logs in smtp.live.com SMTP server with login and password of the email: "rhu1010@hotmail.com", shortly thereafter he send an email to "aika.system@hotmail.com" with your password and login.
Br: Agora eu vi que depois de ele se logar no site da ongame, ele se conecta ao servidor SMTP(servidor de email) do hotmail(smtp.live.com), com o seguinte login: "rhu1010@hotmail.com", certo depois ele envia um email para "aika.system@hotmail.com", com seu login e sua senha do AikaBr, e se o PIN code que ele estava tentando der certo ele envia o pin que deu certo também.

Sure, ae, got the password for his email, and went to the hotmail site and I logged. Look what I found in the Sent folder:
Br: Certo, ae com vocês viram na imagem acima, temos a senha do email dele e o login, resolvi logar no email dele e olha o que encontrei na pasta de enviados.


You guys, you better be very careful where you put the password is not why he is a senior member who put everything he's safe.
Br: Vocês tem que ter muito cuidado aonde vocês colocam e o que baixam nos seus computadores, mesmo sendo de um membro de honra como o rodoxfnx.
Here some of the logins that he took:
Br: Aqui está alguns logins que estava no email dele.


So guys, if you think that is a lie or something between him on the topic, download the program, but download quickly before they change the topic.
Br: Se vocês estão pensando que esse tópico é algum tipo de mentira ou palhaçada, baixe o programa do rodoxfnx no tópico dele, mas baixe rápido, porque a hora que ele ver esse tópico ele vai retirar rapidamente o arquivo de lá, ou vai colocar um que está sem essa função de enviar a sua senha pro email dele.

After download debuger and do reverse engineering.
Br: Depois de baixar o programa, clique no link abaixo e baixe o debuger.
Download the debugger: http://download.reflector.net/Reflector7.5.2.1.zip

Not to stay too long the topic will not teach you how to move in the debugger, or until they need a tutorial, is very easy to move it.
Br: Para não ficar muito extenso o tópico não vou ensinar como mexer no debbuger, até que nem precisaria de um tutorial, é muito fácil de mexe-lo.

For everyone's safety forum, I changed the password of the email rodoxfnx, so who are uninformed will not lose your account for such a Lammer.
Br: Para a segurança de todos no fórum, eu mudei a senha do email do rodoxfnx, assim quem estiver desinformado não vai perder sua conta para um lammer como esse.

Advise, besides you change the password, format your computer, because he certainly must have done this with other programs and goals.
BR: Aconselho, alem de vocês alterarem a senha, formatar o seu computador, porque certamente ele deve ter feito isso com outros programas dele.


I hope this helps.
And remember, nothing is safe.

See you.

Br: Espero ter ajudado.

E lembre-se, nada é seguro.

Até mais.

---------- Post added at 11:23 AM ---------- Previous post was at 10:59 AM ----------

And remember, besides him steal your password, the program can not do it more than 96 combinations of Ongame because the site hangs.

BR: E lembrando, além dele roubar sua senha, o programa dele não consegue fazer mais de 96 combinações porque o site da ongame desconecta.

OMG,
I was wondering if only captures and sends the password is also a function of the keylloger the same. Thanks, if I change the password will be safe again?

Thks man for the info...

Really be careful, he entered the char and block gave him

Originally Posted by LKMaster

OMG,
I was wondering if only captures and sends the password is also a function of the keylloger the same. Thanks, if I change the password will be safe again?

Yes by the way, this executable I think that is the only function that sends malicious pro his email password.
But I'm thinking the other executables that he released, it contains no keylogger has to analyze.

Originally Posted by themalikao

Yes by the way, this executable I think that is the only function that sends malicious pro his email password.
But I'm thinking the other executables that he released, it contains no keylogger has to analyze.

You mean it does not contain the same type of nennhum keylloger, I can quietly change my password?

Originally Posted by LKMaster

You mean it does not contain the same type of nennhum keylloger, I can quietly change my password?

Theoretically yes, but I advise you to format your computer for added security.

It's just that what i will do.

Very Good Job my friend. But for your luck, I didn't have any malicious intend, so I didn't steal anyone. You can check any of your accounts you used there. I did it only for fun, because I don't play Aika anymore, so I don't have any reason to steal anyone. Do you think if I care about Aika I would release all this hacks? Anyquestion feel free to ask and I'll answer you all.

themalikao, you got my thanks for you good work.

Originally Posted by rodoxfnx

Very Good Job my friend. But for your luck, I didn't have any malicious intend, so I didn't steal anyone. You can check any of your accounts you used there. I did it only for fun, because I don't play Aika anymore, so I don't have any reason to steal anyone. Do you think if I care about Aika I would release all this hacks? Anyquestion feel free to ask and I'll answer you all.

themalikao, you got my thanks for you good work.

Not tried but I got robbed in my account and was already inside you trying anyway numerical password, so much so that my char is locked at the time, had a numerical password would have taken everything.

Take Care People