Эксклюзив Неактуально Избранное ASI AntiStealer

[D1namick]

где тут стилер
[WARNING] > [URLDownloadToFileA] > [D:\GTA San Andreas MultiPlayer\MoonLoader.asi] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\46AD~1\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [URLDownloadToFileW] > [C:\Windows\SYSTEM32\urlmon.dll] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\46AD~1\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [gethostbyname] > [D:\GTA San Andreas MultiPlayer\samp.dll] > {name: vlad}
[WARNING] > [InternetOpenW] > [C:\Windows\SYSTEM32\urlmon.dll] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0)}
[WARNING] > [InternetOpenA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0)}
[WARNING] > [InternetConnectW] > [C:\Windows\SYSTEM32\urlmon.dll] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [InternetConnectA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [HttpOpenRequestW] > [C:\Windows\SYSTEM32\urlmon.dll] > {lpszObjectName: /moonloader/data/version-info.json}
[WARNING] > [InternetCreateUrlA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[PATCHED] > [ZwQueueApcThread] > [C:\Windows\SYSTEM32\sechost.dll]

 

[SCandy]

где тут стилер
[WARNING] > [URLDownloadToFileA] > [D:\GTA San Andreas MultiPlayer\MoonLoader.asi] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\46AD~1\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [URLDownloadToFileW] > [C:\Windows\SYSTEM32\urlmon.dll] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\46AD~1\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [gethostbyname] > [D:\GTA San Andreas MultiPlayer\samp.dll] > {name: vlad}
[WARNING] > [InternetOpenW] > [C:\Windows\SYSTEM32\urlmon.dll] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0)}
[WARNING] > [InternetOpenA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0)}
[WARNING] > [InternetConnectW] > [C:\Windows\SYSTEM32\urlmon.dll] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [InternetConnectA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [HttpOpenRequestW] > [C:\Windows\SYSTEM32\urlmon.dll] > {lpszObjectName: /moonloader/data/version-info.json}
[WARNING] > [InternetCreateUrlA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[PATCHED] > [ZwQueueApcThread] > [C:\Windows\SYSTEM32\sechost.dll]

ЧИСТО

 

[D1namick]

ЧИСТО

а что это за строчка?
[PATCHED] > [ZwQueueApcThread] > [C:\Windows\SYSTEM32\sechost.dll]

Типо патчед значит стилер не так ли?

 

[SCandy]

а что это за строчка?
[PATCHED] > [ZwQueueApcThread] > [C:\Windows\SYSTEM32\sechost.dll]

Типо патчед значит стилер не так ли?

Сис.файл не удаляй,иначе переустановка пк обеспечена

 

[Fix_ir]

Это нормально?

[PATCHED] > [RtlInitUnicodeString] > [C:\Windows\System32\KERNELBASE.dll] > {SourceString: .\!0AntiStealerByDarkP1xel32.dbg\*}
[PATCHED] > [RtlInitUnicodeStringEx] > [C:\Windows\SYSTEM32\ntdll.dll] > {SourceString: .\!0AntiStealerByDarkP1xel32.dbg\*}
[PATCHED] > [RtlInitUnicodeString] > [C:\Windows\System32\KERNELBASE.dll] > {SourceString: .\!0AntiStealerByDarkP1xel32.pdb\*}
[PATCHED] > [RtlInitUnicodeStringEx] > [C:\Windows\SYSTEM32\ntdll.dll] > {SourceString: .\!0AntiStealerByDarkP1xel32.pdb\*}

стиллер есть

Помогите, я уже все клео и сф пробовал поудалять, менял только фары в particle.txd через magictxd

скорее всего есть стиллер, проверяйте сборку AVP, aSteal, LokiSA, SAMP Antivirus

 

[nuhku]

В файле вирусы

upd. в файле нет вируса , на слова

 

[w140]

Посмотреть вложение 31382 В файле вирусы

Никто не заставляет тебе его ставить.
Выше обсуждалось это всё уже.

 

[MAHEKEH]

Посмотреть вложение 31382 В файле вирусы

VirusTotal: https://vk.cc/9mkt8j (Плагин накрыт протектором. Именно поэтому говно антивирусы думают, что AntiStealer - вирус).

 

[nuhku]

исправился (;

 

[SoySakaket4yp]

[PATCHED] > [RtlCreateProcessParametersEx] > [C:\Windows\system32\kernel32.dll] > {ImagePathName->Buffer: C:\Windows\system32\rundll32.exe}

Это вообще что и как ?

 

[MAHEKEH]

[PATCHED] > [RtlCreateProcessParametersEx] > [C:\Windows\system32\kernel32.dll] > {ImagePathName->Buffer: C:\Windows\system32\rundll32.exe}

Это вообще что и как ?

Системный файл. Полный лог кидай.

 

[SoySakaket4yp]

Системный файл. Полный лог кидай.

 

[altik]

Есть че?


|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|
|> | AntiStealer | V5.2.5 | By DarkP1xel | .LOG File | <|
|> Official Web-Site: https://blast.hk/ <|
|> Subscribe to my YouTube Channel: https://vk.cc/5PCsTe <|
|> Official Topic: https://blast.hk/threads/16018/ <|
|> DONATE: https://qiwi.me/antistealer/ <|
|> KEEP CALM AND SMOKE SOME WEED <|
|> !AntiStealer LOADED! <|
|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|

[WARNING] > [InternetOpenA] > [C:\Users\alt\Desktop\gta\clear gta\BASS.dll] > {lpszAgent: BASS/2.4}
[WARNING] > [InternetOpenA] > [C:\Users\alt\Desktop\gta\clear gta\crashes.asi] > {lpszAgent: Mozilla/5.0}
[WARNING] > [InternetOpenUrlA] > [C:\Users\alt\Desktop\gta\clear gta\crashes.asi] > {lpszUrl: https://raw.githubusercontent.com/Whitetigerswt/gtasa_crashfix/master/LatestVersion.txt | lpszHeaders: -}
[WARNING] > [GetAddrInfoW] > [C:\Windows\syswow64\WININET.dll] > {pNodeName: wpad}
[WARNING] > [InternetCreateUrlA] > [C:\Windows\syswow64\WININET.dll] > {lpUrlComponents->lpszHostName: raw.githubusercontent.com}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\syswow64\WININET.dll] > {lpUrlComponents->lpszHostName: raw.githubusercontent.com}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\syswow64\WININET.dll] > {lpUrlComponents->lpszHostName: raw.githubusercontent.com}
[WARNING] > [GetAddrInfoExW] > [C:\Windows\syswow64\WININET.dll] > {pName: raw.githubusercontent.com}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[WARNING] > [gethostbyname] > [C:\Users\alt\Desktop\gta\clear gta\samp.dll] > {name: alt-ПК}
[WARNING] > [gethostbyname] > [C:\Users\alt\Desktop\gta\clear gta\samp.dll] > {name: alt-ПК}
[WARNING] > [gethostbyname] > [C:\Users\alt\Desktop\gta\clear gta\samp.dll] > {name: alt-ПК}
[WARNING] > [GetAddrInfoW] > [C:\Windows\syswow64\WININET.dll] > {pNodeName: wpad}

 

[DarkP1xel]

Есть че?


|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|
|> | AntiStealer | V5.2.5 | By DarkP1xel | .LOG File | <|
|> Official Web-Site: https://blast.hk/ <|
|> Subscribe to my YouTube Channel: https://vk.cc/5PCsTe <|
|> Official Topic: https://blast.hk/threads/16018/ <|
|> DONATE: https://qiwi.me/antistealer/ <|
|> KEEP CALM AND SMOKE SOME WEED <|
|> !AntiStealer LOADED! <|
|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|

[WARNING] > [InternetOpenA] > [C:\Users\alt\Desktop\gta\clear gta\BASS.dll] > {lpszAgent: BASS/2.4}
[WARNING] > [InternetOpenA] > [C:\Users\alt\Desktop\gta\clear gta\crashes.asi] > {lpszAgent: Mozilla/5.0}
[WARNING] > [InternetOpenUrlA] > [C:\Users\alt\Desktop\gta\clear gta\crashes.asi] > {lpszUrl: https://raw.githubusercontent.com/Whitetigerswt/gtasa_crashfix/master/LatestVersion.txt | lpszHeaders: -}
[WARNING] > [GetAddrInfoW] > [C:\Windows\syswow64\WININET.dll] > {pNodeName: wpad}
[WARNING] > [InternetCreateUrlA] > [C:\Windows\syswow64\WININET.dll] > {lpUrlComponents->lpszHostName: raw.githubusercontent.com}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\syswow64\WININET.dll] > {lpUrlComponents->lpszHostName: raw.githubusercontent.com}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\syswow64\WININET.dll] > {lpUrlComponents->lpszHostName: raw.githubusercontent.com}
[WARNING] > [GetAddrInfoExW] > [C:\Windows\syswow64\WININET.dll] > {pName: raw.githubusercontent.com}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[PATCHED] > [LoadLibraryA] > [C:\Users\alt\Desktop\gta\clear gta\modloader\.data\plugins\gta3\std.asi.dll] > {lpLibFileName: C:\Users\alt\AppData\Local\Temp\\samp.dat}
[WARNING] > [gethostbyname] > [C:\Users\alt\Desktop\gta\clear gta\samp.dll] > {name: alt-ПК}
[WARNING] > [gethostbyname] > [C:\Users\alt\Desktop\gta\clear gta\samp.dll] > {name: alt-ПК}
[WARNING] > [gethostbyname] > [C:\Users\alt\Desktop\gta\clear gta\samp.dll] > {name: alt-ПК}
[WARNING] > [GetAddrInfoW] > [C:\Windows\syswow64\WININET.dll] > {pNodeName: wpad}

C:\Users\alt\AppData\Local\Temp\\samp.dat > скинь сюда.

 

[Clark_Morello]

Есть стиллер?

из-за этого у меня наверно плеер на тринити не работает
чо он патчит там?

[WARNING] > [InternetOpenA] > [D:\STANDART HD GTA BY BLACK BONES\BASS.dll] > {lpszAgent: SA-MP/0.3}
[WARNING] > [InternetConnectW] > [D:\STANDART HD GTA BY BLACK BONES\BASS.dll] > {lpszServerName: 37.230.116.125 | lpszUserName: | lpszPassword: }
Вот из-за этого плеер не работает, уже несколько раз писали, баг, исправит потом