Best Blackhat Forum

If someone paid for this they should contact them as they may not know it's infected as like most developers they used some code they found free that was infected already.

Seen this before many times.

(02-15-2015 02:59 AM)theman Wrote: [ -> ]If someone paid for this they should contact them as they may not know it's infected as like most developers they used some code they found free that was infected already.

Seen this before many times.

Can you tell us exactly which file is infected? I used virustotal and it does show a positive from BKAV, which is an antivirus scanner by someone in Vietnam. The virus it found is called VEXE81B.Webshell but I cannot find any info about that named virus. The only thing I found remotely connected is that someone uses the username vexe81b in some forums.

Seems dangerous to put this in a site if we can't find out any more details.

Thanks for any help with this.

It's the main file...DomainAffiliateEngine.php

I know one thing. If I paid $27 for an infected file those guys better have good bankruptcy insurance.

I scanned it's clean.

BTW, there is no such thing as "bankruptcy insurance" and you make it sound like $27 is a car load full of money, lol.

(02-15-2015 05:39 AM)DataPimp Wrote: [ -> ]I know one thing. If I paid $27 for an infected file those guys better have good bankruptcy insurance.

Here you go AIO

Magic Button :

Code:

http://mir.cr/1OMPQ8T2   http://mir.cr/1Q6WKIMK

Enjoy

(02-14-2015 02:38 PM)theman Wrote: [ -> ]Looks like the file DomainAffiliateEngine.php is the infected file. Looks to have a Virus WebShell.

(WebShell is a web-based ssh shell.)

BeWare of this one till cleaned

Code:

https://www.virustotal.com/en/file/b403ae8a636ac56a23df84b98cc7c6b2013b7c3e7cf2376d4cf779a615af6fb4/analysis/1423922685/

SHA256:    b403ae8a636ac56a23df84b98cc7c6b2013b7c3e7cf2376d4cf779a615af6fb4
File name:    DomainAffiliateEngine.php.zip
Detection ratio:    1 / 57
Analysis date:    2015-02-14 14:04:45 UTC ( 0 minutes ago )


https://www.virustotal.com/en/file/53fb79d7f81b4e397f2cf075eadc85993331d721b465eda7a9f26e521dcf3630/analysis/1423922810/

SHA256:    53fb79d7f81b4e397f2cf075eadc85993331d721b465eda7a9f26e521dcf3630
File name:    DomainAffiliateEngine.php
Detection ratio:    1 / 57
Analysis date:    2015-02-14 14:06:50 UTC ( 0 minutes ago )

THAT'S WHAT I THOUGHT SO ... BECOUSE MY NORTON360 FIND IT ... WEB BASED SHELL VIRUS ... DataPimp SHOULD BETTER CHECK HIS UPLOADS :D
RESPECT TO ALL !!

Does anyone have a link to the OTO? I would like to see what the theme looks like.

Nevermind. I found the JV page.

Magic Button :

Code:

http://launch.pluginbeast.com/domain-affiliate-engine/

Plugin shortcode to use on any page, post, widget.

[domainAffiliateEngine] = Simple 1 Domain Check
[domainAffiliateEngineGenerator] = Domain Name Generator Check