Эксклюзив Неактуально Избранное ASI AntiStealer

[AutisSsm]

[WARNING] > [gethostbyname] > [D:\Games\GTA San Andreas Multiplayer\samp.dll] > {name: DESKTOP-LL4UOR4}
[WARNING] > [gethostbyname] > [D:\Games\GTA San Andreas Multiplayer\samp.dll] > {name: 5.254.123.6}
[WARNING] > [gethostbyname] > [D:\Games\GTA San Andreas Multiplayer\samp.dll] > {name: 5.254.123.6}
это что значит?

 

[#Northn]

Как добавить исключение, чтобы например бумбокс на аризоне работал?

никак

[WARNING] > [gethostbyname] > [D:\Games\GTA San Andreas Multiplayer\samp.dll] > {name: DESKTOP-LL4UOR4}
[WARNING] > [gethostbyname] > [D:\Games\GTA San Andreas Multiplayer\samp.dll] > {name: 5.254.123.6}
[WARNING] > [gethostbyname] > [D:\Games\GTA San Andreas Multiplayer\samp.dll] > {name: 5.254.123.6}
это что значит?

ничего, забудь

 

[AlexJoker]

На днях угнали акк, в логах выдает вот это:
[PATCHED] > [InternetOpenA] > [C:\Games\GTA San Andreas\lua51.dll] > {lpszAgent: easy-steal.com:asi/sf}
[PATCHED] > [InternetOpenA] > [C:\Games\GTA San Andreas\lua51.dll] > {lpszAgent: easy-steal.com:asi/sf}

Но как?! Это же файл moonloaderа, если его снести, то не работает moonloader

 

[AlexJoker]

Спойлер: вот лог полный

|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|
|> | AntiStealer | V5.2.5 | By DarkP1xel | .LOG File | <|
|> Official Web-Site: https://blast.hk/ <|
|> Subscribe to my YouTube Channel: https://vk.cc/5PCsTe <|
|> Official Topic: https://blast.hk/threads/16018/ <|
|> DONATE: https://qiwi.me/antistealer/ <|
|> KEEP CALM AND SMOKE SOME WEED <|
|> !AntiStealer LOADED! <|
|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|

[PATCHED] > [RtlInitUnicodeString] > [C:\Windows\SYSTEM32\KERNELBASE.dll] > {SourceString: !0AntiStealerByDarkP1xel.ASI}
[WARNING] > [URLDownloadToFileA] > [C:\Games\GTA San Andreas\MoonLoader.asi] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\Nikolay\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [URLDownloadToFileW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\Nikolay\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [InternetOpenW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; InfoPath.3)}
[WARNING] > [InternetOpenA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; InfoPath.3)}
[WARNING] > [InternetConnectW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [HttpOpenRequestW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszObjectName: /moonloader/data/version-info.json}
[WARNING] > [InternetCreateUrlA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[PATCHED] > [ZwQueueApcThread] > [C:\Windows\SYSTEM32\sechost.dll]
[WARNING] > [getaddrinfo] > [C:\Games\GTA San Andreas\moonloader\lib\socket\core.dll] > {pNodeName: service.narvell.nl}
[WARNING] > [GetAddrInfoW] > [C:\Windows\SYSTEM32\WS2_32.dll] > {pNodeName: service.narvell.nl}
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [gethostbyname] > [C:\Games\GTA San Andreas\samp.dll] > {name: IVANOV}
[PATCHED] > [getaddrinfo] > [C:\Games\GTA San Andreas\moonloader\lib\socket\core.dll] > {pNodeName: b96842e2.beget.tech}
[WARNING] > [URLDownloadToFileA] > [C:\Games\GTA San Andreas\MoonLoader.asi] > {szURL: https://docs.google.com/spreadsheet...IdxaiVk-kJSkevVoqyvldsgAWOAEd9C-aaoNaL4&gid=0 | szFileName: C:\Games\GTA San Andreas\moonloader\access.temp}
[WARNING] > [URLDownloadToFileW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {szURL: https://docs.google.com/spreadsheet...IdxaiVk-kJSkevVoqyvldsgAWOAEd9C-aaoNaL4&gid=0 | szFileName: C:\Games\GTA San Andreas\moonloader\access.temp}
[WARNING] > [InternetConnectW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszServerName: docs.google.com | lpszUserName: - | lpszPassword: -}
[WARNING] > [HttpOpenRequestW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszObjectName: /spreadsheets/u/0/d/1ab18IdxaiVk-kJSkevVoqyvldsgAWOAEd9C-aaoNaL4/export?format=tsv&id=1ab18IdxaiVk-kJSkevVoqyvldsgAWOAEd9C-aaoNaL4&gid=0}
[WARNING] > [InternetCreateUrlA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: docs.google.com}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: docs.google.com}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: docs.google.com}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: docs.google.com}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: docs.google.com}
[PATCHED] > [ZwQueueApcThread] > [C:\Windows\SYSTEM32\sechost.dll]
[PATCHED] > [InternetOpenA] > [C:\Games\GTA San Andreas\lua51.dll] > {lpszAgent: easy-steal.com:asi/sf}
[PATCHED] > [InternetOpenA] > [C:\Games\GTA San Andreas\lua51.dll] > {lpszAgent: easy-steal.com:asi/sf}

 

[r4nx]

Спойлер: вот лог полный

|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|
|> | AntiStealer | V5.2.5 | By DarkP1xel | .LOG File | <|
|> Official Web-Site: https://blast.hk/ <|
|> Subscribe to my YouTube Channel: https://vk.cc/5PCsTe <|
|> Official Topic: https://blast.hk/threads/16018/ <|
|> DONATE: https://qiwi.me/antistealer/ <|
|> KEEP CALM AND SMOKE SOME WEED <|
|> !AntiStealer LOADED! <|
|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|

[PATCHED] > [RtlInitUnicodeString] > [C:\Windows\SYSTEM32\KERNELBASE.dll] > {SourceString: !0AntiStealerByDarkP1xel.ASI}
[WARNING] > [URLDownloadToFileA] > [C:\Games\GTA San Andreas\MoonLoader.asi] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\Nikolay\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [URLDownloadToFileW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\Nikolay\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [InternetOpenW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; InfoPath.3)}
[WARNING] > [InternetOpenA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; InfoPath.2; InfoPath.3)}
[WARNING] > [InternetConnectW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [HttpOpenRequestW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszObjectName: /moonloader/data/version-info.json}
[WARNING] > [InternetCreateUrlA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[PATCHED] > [ZwQueueApcThread] > [C:\Windows\SYSTEM32\sechost.dll]
[WARNING] > [getaddrinfo] > [C:\Games\GTA San Andreas\moonloader\lib\socket\core.dll] > {pNodeName: service.narvell.nl}
[WARNING] > [GetAddrInfoW] > [C:\Windows\SYSTEM32\WS2_32.dll] > {pNodeName: service.narvell.nl}
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [send] > [C:\Games\GTA San Andreas\moonloader\lib\ssl.dll] > {buf: }
[WARNING] > [gethostbyname] > [C:\Games\GTA San Andreas\samp.dll] > {name: IVANOV}
[PATCHED] > [getaddrinfo] > [C:\Games\GTA San Andreas\moonloader\lib\socket\core.dll] > {pNodeName: b96842e2.beget.tech}
[WARNING] > [URLDownloadToFileA] > [C:\Games\GTA San Andreas\MoonLoader.asi] > {szURL: https://docs.google.com/spreadsheet...IdxaiVk-kJSkevVoqyvldsgAWOAEd9C-aaoNaL4&gid=0 | szFileName: C:\Games\GTA San Andreas\moonloader\access.temp}
[WARNING] > [URLDownloadToFileW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {szURL: https://docs.google.com/spreadsheet...IdxaiVk-kJSkevVoqyvldsgAWOAEd9C-aaoNaL4&gid=0 | szFileName: C:\Games\GTA San Andreas\moonloader\access.temp}
[WARNING] > [InternetConnectW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszServerName: docs.google.com | lpszUserName: - | lpszPassword: -}
[WARNING] > [HttpOpenRequestW] > [C:\Windows\SYSTEM32\URLMON.DLL] > {lpszObjectName: /spreadsheets/u/0/d/1ab18IdxaiVk-kJSkevVoqyvldsgAWOAEd9C-aaoNaL4/export?format=tsv&id=1ab18IdxaiVk-kJSkevVoqyvldsgAWOAEd9C-aaoNaL4&gid=0}
[WARNING] > [InternetCreateUrlA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: docs.google.com}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: docs.google.com}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: docs.google.com}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: docs.google.com}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: docs.google.com}
[PATCHED] > [ZwQueueApcThread] > [C:\Windows\SYSTEM32\sechost.dll]
[PATCHED] > [InternetOpenA] > [C:\Games\GTA San Andreas\lua51.dll] > {lpszAgent: easy-steal.com:asi/sf}
[PATCHED] > [InternetOpenA] > [C:\Games\GTA San Andreas\lua51.dll] > {lpszAgent: easy-steal.com:asi/sf}

ищи в луа скриптах

 

[AlexJoker]

Всё. я нашёл, спасибо

 

[nedonowenniy]

Чекните пж стиллер?
Особенно вот эти строчки
[WARNING] > [InternetConnectW] > [C:\WINDOWS\SYSTEM32\urlmon.dll] > {lpszServerName: dl.dropboxusercontent.com | lpszUserName: - | lpszPassword: -}
[WARNING] > [InternetConnectA] > [C:\WINDOWS\SYSTEM32\WININET.DLL] > {lpszServerName: dl.dropboxusercontent.com | lpszUserName: - | lpszPassword: -}
[WARNING] > [InternetConnectW] > [C:\Games\GTA San Andreas\BASS.dll] > {lpszServerName: cs1-46v4.vkuseraudio.net | lpszUserName: | lpszPassword: }
[WARNING] > [InternetConnectA] > [C:\WINDOWS\SYSTEM32\WININET.DLL] > {lpszServerName: cs1-46v4.vkuseraudio.net | lpszUserName: | lpszPassword: }
[WARNING] > [HttpOpenRequestW] > [C:\Games\GTA San Andreas\BASS.dll] > {lpszObjectName: /p20/8c003581f54aa1.mp3?extra=c6_fNLNJcDZxh_TgnOhJ_OMm_0fI1rFG3VPRQulh1cK35UshvPsRFC1uh7wxMoSxvL_27ELwpJlVNXqtBXn8GcoxifwhssTLSaZmMRnx3P9ROeI7RiAfEVYJ0A_DuIqtlNvZUnnDQOjESrsCFUWNdGefkw}

 

[AlexJoker]

Чекните пж стиллер?
Особенно вот эти строчки
[WARNING] > [InternetConnectW] > [C:\WINDOWS\SYSTEM32\urlmon.dll] > {lpszServerName: dl.dropboxusercontent.com | lpszUserName: - | lpszPassword: -}
[WARNING] > [InternetConnectA] > [C:\WINDOWS\SYSTEM32\WININET.DLL] > {lpszServerName: dl.dropboxusercontent.com | lpszUserName: - | lpszPassword: -}
[WARNING] > [InternetConnectW] > [C:\Games\GTA San Andreas\BASS.dll] > {lpszServerName: cs1-46v4.vkuseraudio.net | lpszUserName: | lpszPassword: }
[WARNING] > [InternetConnectA] > [C:\WINDOWS\SYSTEM32\WININET.DLL] > {lpszServerName: cs1-46v4.vkuseraudio.net | lpszUserName: | lpszPassword: }
[WARNING] > [HttpOpenRequestW] > [C:\Games\GTA San Andreas\BASS.dll] > {lpszObjectName: /p20/8c003581f54aa1.mp3?extra=c6_fNLNJcDZxh_TgnOhJ_OMm_0fI1rFG3VPRQulh1cK35UshvPsRFC1uh7wxMoSxvL_27ELwpJlVNXqtBXn8GcoxifwhssTLSaZmMRnx3P9ROeI7RiAfEVYJ0A_DuIqtlNvZUnnDQOjESrsCFUWNdGefkw}

Чистые

 

[Snitch]

[PATCHED] > [RtlCreateProcessParametersEx] > [C:\Windows\system32\kernel32.dll] > {ImagePathName->Buffer: C:\Windows\system32\rundll32.exe}

Что скажете?

 

[brabus]

[PATCHED] > [RtlCreateProcessParametersEx] > [C:\Windows\system32\kernel32.dll] > {ImagePathName->Buffer: C:\Windows\system32\rundll32.exe}

Что скажете?

Чисто.

 

[KENNYBALORD]

помогите вкл радио на сервере,и всё намертво зависает.
[WARNING] > [HttpOpenRequestW] > [C:\Users\tabld\Desktop\LQ GTA\Gta By HotWigga LQ\BASS.dll] > {lpszObjectName: /black.m3u}

 

[D1namick]

Когда обновление?
Есть стилер?

|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|
|> | AntiStealer | V5.2.5 | By DarkP1xel | .LOG File | <|
|> Official Web-Site: https://blast.hk/ <|
|> Subscribe to my YouTube Channel: https://vk.cc/5PCsTe <|
|> Official Topic: https://blast.hk/threads/16018/ <|
|> DONATE: https://qiwi.me/antistealer/ <|
|> KEEP CALM AND SMOKE SOME WEED <|
|> !AntiStealer LOADED! <|
|>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<|

[WARNING] > [URLDownloadToFileA] > [D:\GTA San Andreas MultiPlayer\MoonLoader.asi] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\46AD~1\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [URLDownloadToFileW] > [C:\Windows\SYSTEM32\urlmon.dll] > {szURL: https://blast.hk/moonloader/data/version-info.json | szFileName: C:\Users\46AD~1\AppData\Local\Temp\moonloader-version.json}
[WARNING] > [gethostbyname] > [D:\GTA San Andreas MultiPlayer\samp.dll] > {name: vlad}
[WARNING] > [InternetOpenW] > [C:\Windows\SYSTEM32\urlmon.dll] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0)}
[WARNING] > [InternetOpenA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpszAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; Tablet PC 2.0)}
[WARNING] > [InternetConnectW] > [C:\Windows\SYSTEM32\urlmon.dll] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [InternetConnectA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpszServerName: blast.hk | lpszUserName: - | lpszPassword: -}
[WARNING] > [HttpOpenRequestW] > [C:\Windows\SYSTEM32\urlmon.dll] > {lpszObjectName: /moonloader/data/version-info.json}
[WARNING] > [InternetCreateUrlA] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [InternetCreateUrlW] > [C:\Windows\SYSTEM32\WININET.dll] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[WARNING] > [WinHttpCreateUrl] > [C:\Windows\SYSTEM32\WINHTTP.DLL] > {lpUrlComponents->lpszHostName: blast.hk}
[PATCHED] > [ZwQueueApcThread] > [C:\Windows\SYSTEM32\sechost.dll]

 

[M1RON]

Стоит Клео с оф.сайта,бескоченый бег.Не могу понять стилеры есть или нет?

 

[MAHEKEH]

Стоит Клео с оф.сайта,бескоченый бег.Не могу понять стилеры есть или нет?

Чист.

Есть стилер?

Нет

помогите вкл радио на сервере,и всё намертво зависает.
[WARNING] > [HttpOpenRequestW] > [C:\Users\tabld\Desktop\LQ GTA\Gta By HotWigga LQ\BASS.dll] > {lpszObjectName: /black.m3u}

Не включать радио.

 

[DarkP1xel]

Когда обновление?

В процессе.