[GET] CodeCanyon - Real 3D FlipBook v1.5 - WordPress Plugin

[bear911]

PDF TO FLIPBOOK

Create the flipbook directly from a PDF file. Just enter the url of your pdf book / magazine / brochure and the flip’book will be automatically generated without any additinal conversion

JPG TO FLIPBOOK

You can also create the flipbook from jpg or png images. Multiple file upload is supported so you can upload all your pages at once.

DEMO: http://codecanyon.net/item/real-3d-flipb...in/6942587

DOWNLOAD:

Magic Button :

https://[Reported by Members as SPAM THREAD]/?8251Zf8o

VirusTotal: https://www.virustotal.com/en/file/3ce0d...432205588/

[bale]

BEWARE ON THIS ONE. BACKDOOR INCLUDED.

[NotSo Invisible]

Gotta love these guys who provide direct links to filearmy. At least we can prove that filearmy downloads are likely to be infected. This has the exact same malicious code which was included in the other thread for this plugin.

That thread is here:
http://bestblackhatforum.com/Thread-GET-Real-3D-FlipBook-WordPress-Plugin-v1-5

People, search before you post this crap. You might learn something in the process. You are sharing infected files.

If you don't believe us, go inside the plugin folder to includes/flipbooks.php beginning at line 56 and going to the end of the file at line 217.

It's all malicious code.

[bimple]

Here is the plugin, with the malicious code mentioned above cleaned out of it:

DOWNLOAD:

Magic Button :

Code:

http://www81.zippyshare.com/v/oQP85jlD/file.html

Code:

https://www.mediafire.com/?kostocik5uz2nuw

Virustotal Detection ratio= 0/57:

Code:

https://www.virustotal.com/en/file/bfeb38ae4d01fdb72fcedc51b18232a07045ef037a9253057c5c091df633a4af/analysis/1432213108/

[NotSo Invisible]

(05-21-2015 11:02 PM)bimple Wrote:  Here is the plugin, with the malicious code mentioned above cleaned out of it:

DOWNLOAD:

Magic Button :

Code:

http://www81.zippyshare.com/v/oQP85jlD/file.html

Code:

https://www.mediafire.com/?kostocik5uz2nuw

Virustotal Detection ratio= 0/57:

Code:

https://www.virustotal.com/en/file/bfeb38ae4d01fdb72fcedc51b18232a07045ef037a9253057c5c091df633a4af/analysis/1432213108/

That code doesn't usually show up in scans for some reason. That's why I always suggest looking for this infection by searching for ptth (http reversed) it always catches it. It's not the only way they do that but it is one very common one. Reps

[bimple]

thanks NotSo - great info!