[SAFE/FREE] Botting.in.RS [SAFE/FREE]

don't advertise

 

thats not proof this sems like a good deal and free!

 

I was looking at the page and the scripts at the scrolling bottom are all premium scripts, are you offering these free or is it just showing what it can be used for?

 

All are free Just download, start it up and you'll have ALL of those scripts ready to use!

 

Seems fishy, a staff member should probably verify this.

 

This does seem pretty phishy.. I mean you guys don't have even have forums just the website. If it is legit I won't mind making you guys forums as I have a ton of experience.

 

Yeah, I can understand. We're working on a forum as we speak, which should be up very soon. There are staff positions available, so download and test the bots, and give us feedback on how they work.

 

It says you are celebrating a 1 year anniversary, yet that is the only news and there is no forum. I am not calling this fake, but it just seems like there are key things missing in the recipe. Message a staff member and ask them to verify this program works and I am sure you will get plenty of downloads.

 

Doesn't that look exactly like Epicbot?

I would wait for a staff member to verify.

 

scanning this now with vscan. will post results

 

File Info

Report date: 2011-10-21 02:24:30 (GMT 1)
File name: bottinginrs-jar
File size: 28507 bytes
MD5 Hash: 13444336422abe883195f965041c79e4
SHA1 Hash: b81d6cbbffc686bd92c5fcbf906cbaf784cbf076
Detection rate: 0 on 9 (0%)
Status: CLEAN

Detections

Avast -
AVG -
Avira AntiVir -
ClamAV -
Comodo -
Emsisoft -
F-Prot -
Ikarus -
TrendMicro -

Scan report generated by
NoVirusThanks.org

 

How did you get your .RS domain?

 

Seems fishy. When you extract the files from the .jar file, you get a folder called "eviljavarsstealerclient". Looking this online, I found this this this thread on moparscape. http://www.moparscape.org/smf/index.php?topic=502820.0.
This is a keylogger:
public static void loadVariables()
{
VERSION = "1.9.9";
MUTEX = "true";
LOG = "true";
EMAIL = "[email protected]";
INFECT = "http://dl.dropbox.com/u/21732138/6Crypted.exe";
}

As of now, don't download and/or run (My recommendation).