[GET] Covert Viral Wizard and Covert Content Wizard (Needs NULLING)

[CharlieBrown]

Requested here:

Code:

http://bestblackhatforum.com/Thread-Req-Covert-Viral-Wizard-theme?highlight="covert+viral+wizard"

Salespage:

Code:

http://covertviralwizard.com

Zippyshare All-In-One:

Magic Button :

Code:

http://www48.zippyshare.com/v/52158746/file.html

VirusTotal (1/48):

Code:

http://www.virustotal.com/en/file/6e1fd268829f58b15babf3a5180d80323c82ecec4fcd37485330589e922f8125/analysis/1380829827/

I have yet to install and test, may need nulling.

If you find this helpful, please add max [+] Reputation,

keeps me motivated to share ;) Thanks!

[justanumber]

Thanks, but the "PHP/Kryptik.AB" can be a nasty problem IF that is really what the scan is. Could be a false positive but few years back got one site infected and it spread to all sites hosted on the account.

[CharlieBrown]

I got the drop box link from a pal, then compressed all files into one rar.

I have not modified otherwise, but yes, always use at your own risks that's why I provide virus results whenever permitted ;)

(10-04-2013 06:00 AM)justanumber Wrote:  Thanks, but the "PHP/Kryptik.AB" can be a nasty problem IF that is really what the scan is. Could be a false positive but few years back got one site infected and it spread to all sites hosted on the account.

[Sallyxl]

I hope someone can help out with this. Thanks guys

[CharlieBrown]

I did individual scans of both files separate for the theme and plugin on virustotal and got the same result. I researched it on the internet and got results that indicate it may be a false positive due to encryption in the footer. Others state may be malware. Can an experienced coder/cracker/hacker look at this?

Ran a scan on Virscan.org with again ENOD-32 the only one coming up with the alert:

Code:

http://r.virscan.org/report/6234f82679536dd9d82c34f47dafccb7.html

I have a clean server with space available and testing now, will report results.

Thanks!

[densha75]

great thanx....already repped u....so anyone can nulled this....?

[wprocker]

Hi,
I can see it's got "base64_decode" and "codelock_code", double encoding.

Let's see who can clean this

Thank you

[wprocker]

(10-07-2013 03:19 AM)wprocker Wrote:  Hi,
I can see it's got "base64_decode" and "codelock_code", double encoding.

Let's see who can clean this

Thank you

Working with waraxe to decode, I'll keep you posted.

[CharlieBrown]

Looking forward to it!

Tyfricko admits being new to it so encrypted is probably not going to work for him.

Maybe Sista or Simey69 if you have no success?!

Thanks!

(10-07-2013 03:43 AM)wprocker Wrote:  

(10-07-2013 03:19 AM)wprocker Wrote:  Hi,
I can see it's got "base64_decode" and "codelock_code", double encoding.

Let's see who can clean this

Thank you

Working with waraxe to decode, I'll keep you posted.

[Hotcrack]

Try my nulled version of this


I have nulled covert viral wizard only. Test it and reply how it is working, then I will post another content wizard plugin nulled




Enter activation code is 1234

Magic Button :

Code:

http://www50.zippyshare.com/v/95928067/file.html