Jump to content
MaxCheaters Official Group at Discord
--> Place your ad text here <--

[Important]Before You Download Anything

N1nj4Styl3

By N1nj4Styl3
in Announcements and News

 Share

Recommended Posts

'Baggos' Collaborator

'Baggos'

Posted
Posted

I know, I found it as well.

It stores all the logs in AppData/Imminent/Logs

You run supposedly lameguard and it appears up as Google Chrome.exe (that's random). The thing is you need to kick out winlogor.exe.

I wanted to format my computer anyway, so that's why I did it. But yeah, in case someone is not capable of finding these stuff a format would be ideal to be 100% secure.

Yes you're right..

According to all that writing, i agree. And I'm sure will help many people... or at least those who bother to give a read.

I am glad that there are people who writing important things in the forum. Is needed, once has "fallen" somewhat..

Link to comment
Share on other sites
N1nj4Styl3 Newbie

N1nj4Styl3

Posted
  • Author
Posted

friendly advice, for those that make big transactions at least since w os is unreliable in all ways.

http://s16.postimg.org/eydshecs5/CWqi_IRd.png

That's a good option too but personally I wouldn't spend even a single minute on downloading something that I know 99.9% it won't be ever shared as cracked or free or by some member who wake up after so many years and the first thing he did is to share some files.

Link to comment
Share on other sites
Gries Newbie

Gries

Posted
Posted

Hello,

 

Just found something suspicious:

http://www.maxcheaters.com/topic/190276-lameguard-301-interludekamaelgraciafreyagod/

Topic is already closed, however the link to download the file is still there.

 

I just scan it with VirusTotal and found 6/57

SET-NOD32	a variant of MSIL/Injector.IOA	20150316
Jiangmin	Trojan/Generic.ajwzf	20150316
Kaspersky	HEUR:Trojan.Win32.Generic	20150316
Qihoo-360	HEUR/QVM11.1.Malware.Gen	20150316
Symantec	WS.Reputation.1	20150316
TrendMicro-HouseCall	Suspici.8D175B40	20150316 
Link to comment
Share on other sites
N1nj4Styl3 Newbie

N1nj4Styl3

Posted
  • Author
Posted

Hello,

 

Just found something suspicious:

http://www.maxcheaters.com/topic/190276-lameguard-301-interludekamaelgraciafreyagod/

Topic is already closed, however the link to download the file is still there.

 

I just scan it with VirusTotal and found 6/57

SET-NOD32	a variant of MSIL/Injector.IOA	20150316
Jiangmin	Trojan/Generic.ajwzf	20150316
Kaspersky	HEUR:Trojan.Win32.Generic	20150316
Qihoo-360	HEUR/QVM11.1.Malware.Gen	20150316
Symantec	WS.Reputation.1	20150316
TrendMicro-HouseCall	Suspici.8D175B40	20150316 

 

This is him. In case you downloaded an ran this shit, follow my instructions in the first post.

 

@Stacy Doll

 

Please unlock the topic and let people know that it contains keyloggers and a link to my thread here. (Until someone deletes the download link).

Link to comment
Share on other sites
'Baggos' Collaborator

'Baggos'

Posted
Posted (edited)

I locked the topic, Sweets or MeVsYou will delete the download link.

I think is better if you go there and write the info of Gries.

The lock is nothing if the download link is still there!

Give a reason when you lock a topic.. it is important that people know why.

Especially when it is for an such reason..

SET-NOD32    a variant of MSIL/Injector.IOA    20150316
Jiangmin    Trojan/Generic.ajwzf    20150316
Kaspersky    HEUR:Trojan.Win32.Generic    20150316
Qihoo-360    HEUR/QVM11.1.Malware.Gen    20150316
Symantec    WS.Reputation.1    20150316
TrendMicro-HouseCall    Suspici.8D175B40    20150316
Edited by 'Baggos'
Link to comment
Share on other sites
N1nj4Styl3 Newbie

N1nj4Styl3

Posted
  • Author
Posted

 

I think is better if you go there and write the info of Gries.

The lock is nothing if the download link is still there!

Give a reason when you lock a topic.. it is important that people know why.

Especially when it is for an such reason..

SET-NOD32    a variant of MSIL/Injector.IOA    20150316
Jiangmin    Trojan/Generic.ajwzf    20150316
Kaspersky    HEUR:Trojan.Win32.Generic    20150316
Qihoo-360    HEUR/QVM11.1.Malware.Gen    20150316
Symantec    WS.Reputation.1    20150316
TrendMicro-HouseCall    Suspici.8D175B40    20150316

It's okay.

 

I sent to all the topic viewers a PM regarding that. Hope they read it before it's too late.

Link to comment
Share on other sites
raF Newbie

raF

Posted
Posted

in Task Manager i got only "winlogON.exe" You said its fine, but I got this directory C:\Users\Nikolay\AppData\Roaming\Identities. This folder is empty but i think its bcs my antivirus deleted files. How can I check if im protected?

Link to comment
Share on other sites
'Baggos' Collaborator

'Baggos'

Posted
Posted (edited)

in Task Manager i got only "winlogON.exe" You said its fine, but I got this directory C:\Users\Nikolay\AppData\Roaming\Identities. This folder is empty but i think its bcs my antivirus deleted files. How can I check if im protected?

WinlogoN is there from the first day you use the pc...

Also, you can use a Anti-spyware.

I use AVG Pro Internet Security... I had find Trojan and this class of viruses. Is good for me...

But again, there are things that are not detected..

Edited by 'Baggos'
Link to comment
Share on other sites
Gries Newbie

Gries

Posted
Posted

http://www.maxcheaters.com/topic/188834-share-cracked-adrenaline-bot-guide/?p=2463879

 

24/56

ALYac	 Trojan.Generic.12187232	 20150322
AVG	 Dropper.Generic9.AAPJ	 20150322
AVware	 VirTool.Win32.Obfuscator.XZ (v)	 20150320
Ad-Aware	 Trojan.Generic.12187232	 20150322
Antiy-AVL	 Trojan/Win32.SGeneric	 20150322
Avira	 TR/Rogue.1900544.40	 20150322
BitDefender	 Trojan.Generic.12187232	 20150322
Bkav	 HW32.Packed.A0A8	 20150321
Comodo	 Virus.Win32.Virut.CE	 20150322
Cyren	 W32/Trojan.HETQ-7345	 20150322
Emsisoft	 Trojan.Generic.12187232 (B)	 20150322
F-Secure	 Trojan.Generic.12187232	 20150322
GData	 Trojan.Generic.12187232	 20150322
Ikarus	 Trojan.SuspectCRC	 20150322
K7AntiVirus	 Trojan ( 7000000f1 )	 20150322
K7GW	 Trojan ( 7000000f1 )	 20150322
McAfee	 Artemis!F00D847C2726	 20150322
MicroWorld-eScan	 Trojan.Generic.12187232	 20150322
Norman	 Troj_Generic.ZGKPV	 20150322
Symantec	 Trojan.Gen.2	 20150322
TrendMicro	 Mal_Opet-3	 20150322
TrendMicro-HouseCall	 Suspici.B3BC0FA9	 20150322
VIPRE	 VirTool.Win32.Obfuscator.XZ (v)	 20150322
nProtect	 Trojan.Generic.12187232	 20150320

https://www.virustotal.com/it/file/675b2ee4796cfaa8f114d5cfdaf933f0f6abcc736a5140cd6696e7487269fb76/analysis/

Link to comment
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing


  • Posts

    • Constellation
      JewStor Service ➤ Verified Accounts, Drop Service etc.

      By Constellation · Posted

      Welcome to JewStor Service!!!   ❖Ready-made verified wallets, exchanges, business banks and to order accounts. ❖EU/UK/US/DE Stuff: 100% Verified! Reliable financial tools for your business. ❖Popular items available include: Stripe business + Payoneer, Deutshce Bank, BBVA ES, Xapo Bank, Revolut business / personal, Santander Bank, Wallester business, Bitsa EU, Binance EU, Qonto Business, Blackcatcard EU, Shopify Payments, ICard EU, N26 EU, Naga Pay EU, Paysera EU, Mistertango Business and many others.
    • Exdeathy
      How to avoid one of the main critical errors 2047MB ram

      By Exdeathy · Posted

      Custom = everything that is not part of my H5 client, such as Aegis skin, Death Knight skin, Constructor skin, Golden Valakas skin, an example is the pack containing 3 Golden Valakas skins+cloaks, to give you an idea, this pack consumes almost 200MB within the system, another example of custom is the Hunter Head set made by Asuki, almost 100MB within the system, every custom item added to the client, specifically within the system folder will increase the consumption of your client's virtual ram memory, the more custom added there, the faster your client will close due to critical. Around 4 to 5 custom packs that I removed from the system and made my client reach the ram virtual limit only after more than 40 hours online, in other words; It is only worth adding custom items to the system folder if it is very well compressed, maximum up to 10MB per custom pack (This pack below in the photo, only it inside your client - system consumes almost 200MB, when I removed this pack inside the system it increased the game's lifespan by almost 4h during my tests)
    • zerohero
      SELL PROJECT PRIVATE SERVER MID RATE x30 LUCERA FILES

      By zerohero · Posted

      ready pack for sale with lucera files made from scratch price is 350 euros without the license the server is x30 rate the server is there to see everything test ie.. there have been several changes everything works there will be support for everything for as long as possible please, can you send me a message here, there is complete transparency in everything
    • Celestine
      wts pack classic intelrude 166 protocol lucera files ratex30

      By Celestine · Posted

      The author has been using an alternate account under the name @project166 to promote their services, which violates our RULES. Additionally, the author does not adhere to our guidelines regarding the inclusion of pricing information.     Topic Locked.
    • ratchet
      H5 - looking for some parameters in client files

      By ratchet · Posted

      Hello folks, I'm working on a l2j project and looking at the xml files of items, i can't figure out from which client files are some parameters taken, for example: set name="default_action" val="EQUIP" I've checked itemname and etcitemgroup but no luck, unless i missed it. (This specific entry is present in itemname of some newer clients for example) Anyone has a clue? Appreciated!

  • Topics

×
×
  • Create New...