Best Blackhat Forum

(03-18-2015 02:07 AM)Filoc Wrote: [ -> ]The download is NOT an executable. Do NOT download the file as it contains a virus. It is a wordpress plugin, not a windows application.

Please explain better what are you refering about virus and exe file...

(03-19-2015 09:07 AM)sirdree Wrote: [ -> ]

(03-18-2015 02:07 AM)Filoc Wrote: [ -> ]The download is NOT an executable. Do NOT download the file as it contains a virus. It is a wordpress plugin, not a windows application.

Please explain better what are you refering about virus and exe file...

My apologies. The post by J_128 on page 12 here in this thread has a .exe file in it. The thread is about a wordpress plugin, not an executable file.

Thanks bro!

(03-19-2015 10:13 AM)Filoc Wrote: [ -> ]

(03-19-2015 09:07 AM)sirdree Wrote: [ -> ]

(03-18-2015 02:07 AM)Filoc Wrote: [ -> ]The download is NOT an executable. Do NOT download the file as it contains a virus. It is a wordpress plugin, not a windows application.

Please explain better what are you refering about virus and exe file...

My apologies. The post by J_128 on page 12 here in this thread has a .exe file in it. The thread is about a wordpress plugin, not an executable file.

wtf

You are a noob, in all page hosting file, they make money with PPI (pay per install); you've installed your advertising, I uploaded a .zip, never an .exe

Testing:







THIS A ZIP NOT EXE U.U

@J_128

The download from that mirror site you provided was a .exe included inside of the .zip when I downloaded it. The download came from the top mirror site from that mirror list provided of who to choose. I downloaded from two different mirrors which both gave a .exe inside of the zip. Please do not call me a noob when you did not see what was in the file. I only go by what I see.

Thank you.

(03-19-2015 12:25 PM)Filoc Wrote: [ -> ]@J_128

The download from that mirror site you provided was a .exe included inside of the .zip when I downloaded it. The download came from the top mirror site from that mirror list provided of who to choose. I downloaded from two different mirrors which both gave a .exe inside of the zip. Please do not call me a noob when you did not see what was in the file. I only go by what I see.

Thank you.

try this:
http://www25.zippyshare.com/v/CfDkc1Wg/file.html
pass usual

(04-16-2015 12:02 PM)meandmyselfonly Wrote: [ -> ]

(03-19-2015 12:25 PM)Filoc Wrote: [ -> ]@J_128

The download from that mirror site you provided was a .exe included inside of the .zip when I downloaded it. The download came from the top mirror site from that mirror list provided of who to choose. I downloaded from two different mirrors which both gave a .exe inside of the zip. Please do not call me a noob when you did not see what was in the file. I only go by what I see.

Thank you.

try this:
http://www25.zippyshare.com/v/CfDkc1Wg/file.html
pass usual

https://www.virustotal.com/en/file/bd1fc...429176419/

SHA256: bd1fcc46e6dd5f34d2942cb73fca7c5919d7b6bb35abdcd70697723438c4499a
File name: hide_my_wp.rar
Detection ratio: 1 / 56
Analysis date: 2015-04-16 09:26:59 UTC ( 0 minutes ago )

It contains "Mal/Zapchas-A" which is extremely dangerous.
please goole it for more details.

---

Can any one please re-up the original file? not the crap virus one.

Hello to all.

Link in the 1.st page is available for download.

NOTE. If you download from other source in this thread, do it on your risk as many files contains virus.

The only one clean file (as downloaded from cc) is on 1.st page.

Thanks and enjoy.

Dear Sirdree,

Thanks a lot, its clean.....

https://www.virustotal.com/en/file/53b35...429202555/

SHA256: 53b3516c37d0664e89c754c8d55bf29c3bba4f15b93058076a565d4dcc4c5e15
File name: 4.03_hmwp.zip
Detection ratio: 0 / 56
Analysis date: 2015-04-16 16:42:35 UTC ( 1 minute ago )

REP+++

But I have just tried to unzip in a new folder, made it rar. done a new analysis and found the same threat.

https://www.virustotal.com/en/file/32767...429202854/

SHA256: 327670f36e2bb7f12ccce64e39895bd80c88500007a5b00c86fbac4939ce2b1b
File name: hide_my_wp.rar
Detection ratio: 1 / 57
Analysis date: 2015-04-16 16:47:34 UTC ( 0 minutes ago )

Now I am thinking it's might be problem of my own system.

OMG!!!!!

(04-17-2015 02:45 AM)sohomnet Wrote: [ -> ]Dear Sirdree,

Thanks a lot, its clean.....

https://www.virustotal.com/en/file/53b35...429202555/

SHA256: 53b3516c37d0664e89c754c8d55bf29c3bba4f15b93058076a565d4dcc4c5e15
File name: 4.03_hmwp.zip
Detection ratio: 0 / 56
Analysis date: 2015-04-16 16:42:35 UTC ( 1 minute ago )

REP+++

But I have just tried to unzip in a new folder, made it rar. done a new analysis and found the same threat.

https://www.virustotal.com/en/file/32767...429202854/

SHA256: 327670f36e2bb7f12ccce64e39895bd80c88500007a5b00c86fbac4939ce2b1b
File name: hide_my_wp.rar
Detection ratio: 1 / 57
Analysis date: 2015-04-16 16:47:34 UTC ( 0 minutes ago )

Now I am thinking it's might be problem of my own system.

OMG!!!!!

Yes i know about about winrar package it shows a false positive... its not your system... its about your winrar "legit copy" :) if you create a rar archive using for example 7zip you'll see its clean...

dont worry... enjoy hmwp :)