This post is by a banned member (succman669999) - Unhide
OP 13 July, 2021 - 03:40 PM
(This post was last modified: 13 July, 2021 - 03:50 PM by succman669999. Edited 2 times in total.)
Reply
[font]
(Deleted)[/font]
Malware
yuh
This post is by a banned member (Mastiff) - Unhide
13 July, 2021 - 03:42 PM
(This post was last modified: 13 July, 2021 - 03:45 PM by Mastiff. Edited 2 times in total.)
Reply
Code:
Script: C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]RarSFX0[\]run[.]vbs
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
Set File1 = CreateObject("WScript[.]Shell")
File1[.]Run ("one[.]exe")
Set File2 = CreateObject("WScript[.]Shell")
File2[.]Run ("two[.]exe")
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
Dropped executables:
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Vecdgnstkaosc[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Mykpa[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Inzjnij[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Fbhj[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Qmnhrecla[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]RarSFX0[\]two[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]RarSFX0[\]one[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Zjcnyywgussmmh[.]exe
This post is by a banned member (succman669999) - Unhide
OP 13 July, 2021 - 03:46 PM
(This post was last modified: 13 July, 2021 - 03:47 PM by succman669999.)
Reply
(13 July, 2021 - 03:42 PM)Mastiff Wrote: Show MoreCode:
Script: C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]RarSFX0[\]run[.]vbs
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
Set File1 = CreateObject("WScript[.]Shell")
File1[.]Run ("one[.]exe")
Set File2 = CreateObject("WScript[.]Shell")
File2[.]Run ("two[.]exe")
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
Dropped executables:
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Vecdgnstkaosc[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Mykpa[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Inzjnij[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Fbhj[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Qmnhrecla[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]RarSFX0[\]two[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]RarSFX0[\]one[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Zjcnyywgussmmh[.]exe
i got it from yt lol
(13 July, 2021 - 03:42 PM)Mastiff Wrote: Show MoreCode:
Script: C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]RarSFX0[\]run[.]vbs
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
Set File1 = CreateObject("WScript[.]Shell")
File1[.]Run ("one[.]exe")
Set File2 = CreateObject("WScript[.]Shell")
File2[.]Run ("two[.]exe")
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
Dropped executables:
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Vecdgnstkaosc[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Mykpa[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Inzjnij[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Fbhj[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Qmnhrecla[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]RarSFX0[\]two[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]RarSFX0[\]one[.]exe
C:[\]Users[\]admin[\]AppData[\]Local[\]Temp[\]Zjcnyywgussmmh[.]exe
is it possible to delete?
yuh
This post is by a banned member (Mastiff) - Unhide
13 July, 2021 - 03:48 PM
Reply
(13 July, 2021 - 03:46 PM)succman669999 Wrote: Show Moreis it possible to delete?
Click Edit on the bottom right of your post.
