Shadowx Posted December 7, 2012 Share Posted December 7, 2012 Same here :s Link to comment Share on other sites More sharing options...
DarkStarXxX Posted December 7, 2012 Share Posted December 7, 2012 Release maybe has a virus inside. It's not Starting... Link to comment Share on other sites More sharing options...
emerglines Posted December 7, 2012 Share Posted December 7, 2012 I will unpack it and see if its a virus . Link to comment Share on other sites More sharing options...
emerglines Posted December 7, 2012 Share Posted December 7, 2012 Please anyone upload only the patch to chech if it is a virus , Thanks in advance . Link to comment Share on other sites More sharing options...
DarkStarXxX Posted December 7, 2012 Share Posted December 7, 2012 It's no Patch, it's a cracked exe. Link to comment Share on other sites More sharing options...
emerglines Posted December 7, 2012 Share Posted December 7, 2012 It's no Patch, it's a cracked exe.Please upload It. Link to comment Share on other sites More sharing options...
DarkStarXxX Posted December 7, 2012 Share Posted December 7, 2012 Here: Site: http://rghost.net Sharecode: /42081951 [?] Link to comment Share on other sites More sharing options...
emerglines Posted December 7, 2012 Share Posted December 7, 2012 Isn't the crack that we talk about i mean that one !! Link to comment Share on other sites More sharing options...
emerglines Posted December 7, 2012 Share Posted December 7, 2012 Strange , isn't the one i worked on !!! Link to comment Share on other sites More sharing options...
DarkStarXxX Posted December 7, 2012 Share Posted December 7, 2012 Isn't the crack that we talk about i mean that one !!Isn't the crack that we talk about i mean that one !! That is the Crack from the Release we all talk about today. The.Bat.Professional.Edition.v5.3.4.Multilingual-NGEN Link to comment Share on other sites More sharing options...
FaeGiN Posted December 7, 2012 Share Posted December 7, 2012 It crashes on startup every time. Hmm I can't work out why but now I messed up my install damnit. I want the fake crack again LOL...it works! For now. . .That NGEN release is all over the net but no nuke :o Link to comment Share on other sites More sharing options...
emerglines Posted December 8, 2012 Share Posted December 8, 2012 I done automatic and manuel analyze of the file and its 80%-90% trusted , but still i didn't upload it to virus total . The file had the same traces of the NGEN team . File size before and after unpacking : Packed : 5,11 MB Unpacked : 13,2 MB In manuel analyse : I use ollydbg, IDA Pro, and some private tools to check nothing intresting , i used some auto scripts to analyze more faster cause if i was doing it by hands i will finish that tell the next month :) !!! Result : clean more than 50% . In automatic analyze : I used sandboxie latest version and buster sandbox analyzer . This is what i found . Just files modification and registry !! when i check up the report i found this : No suspicious behavior just some non important files are added !!! When i looked forword i found a suspicious registry modification when i google it i found out that is a trusted modification as bellow . Result from google : bitbucket : http://www.google.com/webhp?hl=en#hl=en&tbo=d&sclient=psy-ab&q=bitbucket&oq=bitbucket&gs_l=hp.12...53114.53114.2.53769.1.1.0.0.0.0.0.0..0.0.les%3B..0.0...1c.2.qArDodGrYEs&psj=1&bav=on.2,or.r_gc.r_pw.r_qf.&fp=c87cf25f8a01556d&bpcl=39650382&biw=1280&bih=911 nukeondelete : http://www.google.com/webhp?hl=en#hl=en&tbo=d&output=search&sclient=psy-ab&q=nukeondelete&oq=nukeondelete&gs_l=hp.12...3495.3495.1.4210.1.1.0.0.0.0.0.0..0.0.les%3B..0.0...1c.2.ECjHWE7EZDg&psj=1&bav=on.2,or.r_gc.r_pw.r_qf.&fp=c87cf25f8a01556d&bpcl=39650382&biw=1280&bih=911 Result : over 80% trusted Total average trust result : 80+50 / 2 = 65% Trust . I hope that i have done what you expect from me :) enjoy . Note: unpacker i will post it in private to unpack and upload it in total virus . edit: Unpacked file MD5 Hash checking : MD5 : 0A9CAA710FAE87F125D0DD81699F0A4B Threat Expert : ( non uploaded file just MD5 hash ) http://www.threatexpert.com/report.aspx?md5=0A9CAA710FAE87F125D0DD81699F0A4B Google : http://www.google.com/search?hl=en&tbo=d&noj=1&q=MD5%3A+0A9CAA710FAE87F125D0DD81699F0A4B+&oq=MD5%3A+0A9CAA710FAE87F125D0DD81699F0A4B+&gs_l=serp.3...5191.10505.0.11421.2.2.0.0.0.0.1296.1296.7-1.1.0.les%3B..0.0...1c.1.diNqGQmBpoc Note : Tool used to get the hash is : Hash Tab http://implbits.com/HashTab.aspx Link to comment Share on other sites More sharing options...
Shadowx Posted December 8, 2012 Share Posted December 8, 2012 Good work dude :D Link to comment Share on other sites More sharing options...
emerglines Posted December 8, 2012 Share Posted December 8, 2012 Good work dude :D :) :) :) :troll: :) :) :) Thanks a lot. edit: Thanks a lot to "Marik" for his help on my post and rearrangement of the post. Link to comment Share on other sites More sharing options...
ZinnPL Posted December 9, 2012 Share Posted December 9, 2012 New crack: Site: http://www.upload.ee/ Sharecode: files/2892672/thebat.exe.html [?] and Site: http://pastebin.com/ Sharecode: qT710m4m [?] Link to comment Share on other sites More sharing options...
dcs18 Posted December 9, 2012 Share Posted December 9, 2012 What be the pedigree of your new crack - have you tested it? Link to comment Share on other sites More sharing options...
quickbeam Posted December 9, 2012 Share Posted December 9, 2012 New crack: Site: http://www.upload.ee/ Sharecode: files/2892672/thebat.exe.html [?] and Site: http://pastebin.com/ Sharecode: qT710m4m [?] Tested working on win7 x64 Link to comment Share on other sites More sharing options...
dcs18 Posted December 9, 2012 Share Posted December 9, 2012 New crack: Site: http://www.upload.ee/ Sharecode: files/2892672/thebat.exe.html [?] and Site: http://pastebin.com/ Sharecode: qT710m4m [?] Tested working on win7 x64Hey, sure it's working - but, it's a fake (not 5.34 - it's an older one.) edit: New crack: Site: http://www.upload.ee/ Sharecode: files/2892672/thebat.exe.html [?] and Site: http://pastebin.com/ Sharecode: qT710m4m [?]You got that from the Russians - it's not often that one finds them in such a f#*k*d up state. :yes: Link to comment Share on other sites More sharing options...
emerglines Posted December 9, 2012 Share Posted December 9, 2012 This one works fine. v5.3.4 Site: http://rghost.net Sharecode: /42081951 Link to comment Share on other sites More sharing options...
dcs18 Posted December 9, 2012 Share Posted December 9, 2012 This one works fine. v5.3.4 Site: http://rghost.net Sharecode: /42081951Nope, not working here - not starting up, at all on Windows 8 (maybe someone can provide feedback for other OSs.) :( Edit:- Retried after a reboot - no joy!!! Link to comment Share on other sites More sharing options...
emerglines Posted December 9, 2012 Share Posted December 9, 2012 This one works fine. v5.3.4 Site: http://rghost.net Sharecode: /42081951Nope, not working here - not starting up, at all on Windows 8 (maybe someone can provide feedback for other OSs.) :( Edit:- Retried after a reboot - no joy!!! It works for me , windows XP x86 , i will test it on x64 pleas 5 min . Edit : Not working over x64 platforms :( Link to comment Share on other sites More sharing options...
dcs18 Posted December 9, 2012 Share Posted December 9, 2012 Yep, I'm running x64-bit - shall update this info on my signature, shortly (BTW, if it's fine on x86 - should be just a matter of time before you get it OK on a x64) Link to comment Share on other sites More sharing options...
emerglines Posted December 9, 2012 Share Posted December 9, 2012 I have both of them on my system ( Server + Laptop + Labs ) x64 and x86 but i do my cracks each time over x86 cause it represent 60% of people as i know ! Link to comment Share on other sites More sharing options...
dcs18 Posted December 9, 2012 Share Posted December 9, 2012 Yep, I've got the x86 architecture on the laptop which runs through a Corporate domain and is administered by my office - so, I don't use beta-testing/cracks on it as they can see it. Anyways, have lost interest in Windows 7 now that Windows 8 is configured to a nicety. :D Link to comment Share on other sites More sharing options...
emerglines Posted December 9, 2012 Share Posted December 9, 2012 Yep, I've got the x86 architecture on the laptop which runs through a Corporate domain and is administered by my office - so, I don't use beta-testing/cracks on it as they can see it. Anyways, have lost interest in Windows 7 now that Windows 8 is configured to a nicety. :D Windows 8 worth an upgrade or i will just waste time ? Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.