Install EXE with no security prompts on xp sp2

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • SmokeyTheBear
    ►SouthOfHeaven
    • Jun 2004
    • 28609

    #1

    Install EXE with no security prompts on xp sp2

    Ok i have discovered a way to install an exe file on a target computer running xp with full patches..

    Keep your eyes open , this flaw requires very little user interaction..

    I would be willing to show you how for something you might have to offer..

    Place your offers here...

    All my offers are 100% satisfaction guaranteed or your money/offer back..

    If you have high volumes of traffic and want this to be an exclusive offer, better make me a good offer.

    It would be easier if your already experienced in using, making and installing exe's because i dont feel like doing that end of it..

    I think it would be easier to split this 3 ways.

    1 person with lots of traffic
    1 person to make the exe's /split 3 ways ref codes..
    1 me to install the exe's

    anyone who feels like talking openly about this subject and knows about it feel free to add your


    I'm not into any ref code jacking or anything like that, just a very simple exe that would add favourites randomly or popups etc.





    -- i hate to not share info , it really eats me up , but there is just too much traffic flowing through gfy to post some things.. if someone gives me a good enough post i might post it..


    Give me an unused domain and some ftp access quick before i get any offers and i will post the info open source for gfy to use..

    Infact if someone gives me a domain and some ftp access for long term to post examples for gfy that would be cool.. i would post lots of usefull stuff that i dont post due to time.. I hate to use my servers as i have had a few times problems with people using my code and the code eventually getting tracked back to me with answers and problems i didnt need..

    smokey_the_bearz @ lycos,com
    hatisblack at yahoo.com
  • cluck
    Confirmed User
    • Dec 2002
    • 5248

    #2
    Check out www.instantbar.com it's only like $30 a month and you can edit your exe file right from the site. Some nice features too. Haven't used it yet but I have a paid account.
    icq 279990726
    www.mcdonalds.com <- great money making opportunity

    Comment

    • uchase/webpry
      So Fucking Banned
      • Aug 2004
      • 2085

      #3
      ... install some non adult "keyword" boookmarks, directory style. I am more than happy to take the traffic.

      Comment

      • Magg
        Confirmed User
        • Feb 2004
        • 4467

        #4
        :o 1 minute for domain and ftp!

        Comment

        • Magg
          Confirmed User
          • Feb 2004
          • 4467

          #5
          emailing login info

          Comment

          • SmokeyTheBear
            ►SouthOfHeaven
            • Jun 2004
            • 28609

            #6
            Originally posted by Magg
            emailing login info
            so you want me to post it for everyone ?



            Ok let me go check mail login and post..
            hatisblack at yahoo.com

            Comment

            • Lycanthrope
              Confirmed User
              • Jan 2004
              • 4517

              #7
              This is wrong. Very wrong.



















              Hurry up please. Thank you.

              Comment

              • johndoebob
                Confirmed User
                • Mar 2004
                • 3405

                #8
                Public posting means lots of people who pull shit on users and webmasters will use it, that should be clear to you I guess.

                Just spend over an hour removing a chain of nasty spyware I catched while using Advanced Submitter when I didn't have any anti spy/adware programs running.

                Is it just some IE exploit that'ws already around or a windows based exploit that can be executed with any browser?
                Last edited by johndoebob; 09-18-2004, 11:45 PM.

                Comment

                • SmokeyTheBear
                  ►SouthOfHeaven
                  • Jun 2004
                  • 28609

                  #9
                  ok i built a simple example this is for users with display settings around 1000x700. and it isnt pretty..

                  www.earthunplugged.org

                  i remind the naysayers , this is for i.e. xp with or without sp2 and isn;t geared for a final solution , just an example..

                  btw this example is completely harmless..
                  hatisblack at yahoo.com

                  Comment

                  • SmokeyTheBear
                    ►SouthOfHeaven
                    • Jun 2004
                    • 28609

                    #10
                    Originally posted by johndoebob

                    Is it just some IE exploit that'ws already around
                    yes it is, in a way.. theres a point though
                    hatisblack at yahoo.com

                    Comment

                    • SmokeyTheBear
                      ►SouthOfHeaven
                      • Jun 2004
                      • 28609

                      #11
                      after you have tried the demo , check your startup folder on your start bar.. run the program found within
                      hatisblack at yahoo.com

                      Comment

                      • Magg
                        Confirmed User
                        • Feb 2004
                        • 4467

                        #12
                        nothings in my startup folder, and i got an error saying it couldnt open shell:startup as a web folder.


                        I AM IMMUNE HAHAHAHAHHA@!!!!

                        Comment

                        • SmokeyTheBear
                          ►SouthOfHeaven
                          • Jun 2004
                          • 28609

                          #13
                          Originally posted by Magg
                          nothings in my startup folder, and i got an error saying it couldnt open shell:startup as a web folder.


                          I AM IMMUNE HAHAHAHAHHA@!!!!
                          non default settings ?
                          hatisblack at yahoo.com

                          Comment

                          • dunefield
                            www.barely18movies.com
                            • Feb 2003
                            • 10920

                            #14

                            Comment

                            • SmokeyTheBear
                              ►SouthOfHeaven
                              • Jun 2004
                              • 28609

                              #15
                              Originally posted by dunefield
                              thats just the error from the example exe that was installed on your hard drive.. its just for a picture ( part of the program ) reproduce the same code with a diff exe and you will see..
                              hatisblack at yahoo.com

                              Comment

                              • SmokeyTheBear
                                ►SouthOfHeaven
                                • Jun 2004
                                • 28609

                                #16
                                search for it and you will find gfy.exe , upgrade that vb file that it says and you will be able to run the program..
                                hatisblack at yahoo.com

                                Comment

                                • Magg
                                  Confirmed User
                                  • Feb 2004
                                  • 4467

                                  #17
                                  Originally posted by SmokeyTheBear
                                  non default settings ?
                                  yup

                                  Comment

                                  • SmokeyTheBear
                                    ►SouthOfHeaven
                                    • Jun 2004
                                    • 28609

                                    #18
                                    Originally posted by Magg
                                    yup
                                    that might be it.. didnt try on higher settings.. but it worked great for dunesfield , other than he doesnt have up to date files..


                                    DUNESFIELD GO HERE

                                    http://www.xerocreative.com/index.ph...d&sub=runtimes

                                    update those files
                                    hatisblack at yahoo.com

                                    Comment

                                    • johndoebob
                                      Confirmed User
                                      • Mar 2004
                                      • 3405

                                      #19
                                      Nothing With Firefox nothing in IE beside I pull the file but I don't see anything in my start menue, no clue where the file is.

                                      Comment

                                      • SmokeyTheBear
                                        ►SouthOfHeaven
                                        • Jun 2004
                                        • 28609

                                        #20
                                        dunesfield http://www.xerocreative.com/downloads/winsock.zip or just download this

                                        jphndebob its in your startup fulder in start menu
                                        hatisblack at yahoo.com

                                        Comment

                                        • psyko514
                                          See sig. Join Epic Cash.
                                          • Oct 2002
                                          • 22366

                                          #21
                                          i've seen this before, but a much better "interface" (ie. method of execution) that'll work on any joe surfer.

                                          Bad Girl Bucks
                                          - 50% Revshare through CCBill.
                                          Promote BrandyDDD, Pixie's Pillows, Action Allie and more!

                                          Phoenix Forum Pics | Webmaster Access Montreal pics
                                          email: psyko514(a)gmail.com | icq: 214-702-014

                                          Comment

                                          • johndoebob
                                            Confirmed User
                                            • Mar 2004
                                            • 3405

                                            #22
                                            Found it in my temp files, nothing got executed tho.

                                            Comment

                                            • johndoebob
                                              Confirmed User
                                              • Mar 2004
                                              • 3405

                                              #23
                                              Originally posted by SmokeyTheBear
                                              jphndebob its in your startup fulder in start menu
                                              Nope, it isn't there, it didn't get executed.

                                              Comment

                                              • SmokeyTheBear
                                                ►SouthOfHeaven
                                                • Jun 2004
                                                • 28609

                                                #24
                                                Originally posted by johndoebob
                                                Found it in my temp files, nothing got executed tho.
                                                it would have been executed when you started your computer
                                                hatisblack at yahoo.com

                                                Comment

                                                • SmokeyTheBear
                                                  ►SouthOfHeaven
                                                  • Jun 2004
                                                  • 28609

                                                  #25
                                                  Originally posted by psyko514
                                                  i've seen this before, but a much better "interface" (ie. method of execution) that'll work on any joe surfer.
                                                  Well if your going to just hand out all your secrets in one basket

                                                  obviously the pitch and how it is set is geared on the traffic and the exe..
                                                  hatisblack at yahoo.com

                                                  Comment

                                                  • johndoebob
                                                    Confirmed User
                                                    • Mar 2004
                                                    • 3405

                                                    #26
                                                    Originally posted by SmokeyTheBear
                                                    it would have been executed when you started your computer
                                                    Can't be because I have a startup monitor running that tells me if anything wants to run on startup and asks me if I allow it or not.

                                                    Comment

                                                    • netproperty
                                                      Confirmed User
                                                      • Sep 2004
                                                      • 163

                                                      #27
                                                      I sale domain iesecurity.com

                                                      www.NetProperty.biz
                                                      Paypal Friendly

                                                      Comment

                                                      • SmokeyTheBear
                                                        ►SouthOfHeaven
                                                        • Jun 2004
                                                        • 28609

                                                        #28
                                                        Originally posted by johndoebob
                                                        Can't be because I have a startup monitor running that tells me if anything wants to run on startup and asks me if I allow it or not.
                                                        clever will it make me a blt sandwich

                                                        thats kind of cheating though..
                                                        hatisblack at yahoo.com

                                                        Comment

                                                        • OzMan
                                                          Confirmed User
                                                          • Sep 2003
                                                          • 9162

                                                          #29
                                                          worked on me, although I did get a missing vb file prompt as well

                                                          Comment

                                                          • SmokeyTheBear
                                                            ►SouthOfHeaven
                                                            • Jun 2004
                                                            • 28609

                                                            #30
                                                            Originally posted by OzMan
                                                            worked on me, although I did get a missing vb file prompt as well
                                                            update your runtime files with the zip above. especially since i spent twice as long making the stupid exe on a shit computer as i spent on the code, it would be a shame not to see it..
                                                            hatisblack at yahoo.com

                                                            Comment

                                                            • johndoebob
                                                              Confirmed User
                                                              • Mar 2004
                                                              • 3405

                                                              #31
                                                              With that sentence I ment that I didn't get a promt so it wasn't executed and only downloaded.

                                                              You can get it here (only 6kb big takes almost no ram and runs in the background).

                                                              http://www.pcworld.com/downloads/fil...7843&fileidx=1

                                                              Comment

                                                              • psyko514
                                                                See sig. Join Epic Cash.
                                                                • Oct 2002
                                                                • 22366

                                                                #32
                                                                Originally posted by SmokeyTheBear
                                                                Well if your going to just hand out all your secrets in one basket

                                                                obviously the pitch and how it is set is geared on the traffic and the exe..
                                                                check your email. i want royalties if ya use it

                                                                Bad Girl Bucks
                                                                - 50% Revshare through CCBill.
                                                                Promote BrandyDDD, Pixie's Pillows, Action Allie and more!

                                                                Phoenix Forum Pics | Webmaster Access Montreal pics
                                                                email: psyko514(a)gmail.com | icq: 214-702-014

                                                                Comment

                                                                • dunefield
                                                                  www.barely18movies.com
                                                                  • Feb 2003
                                                                  • 10920

                                                                  #33
                                                                  Originally posted by SmokeyTheBear
                                                                  dunesfield http://www.xerocreative.com/downloads/winsock.zip or just download this

                                                                  jphndebob its in your startup fulder in start menu
                                                                  tried it... got this error...

                                                                  Comment

                                                                  • SmokeyTheBear
                                                                    ►SouthOfHeaven
                                                                    • Jun 2004
                                                                    • 28609

                                                                    #34
                                                                    Originally posted by johndoebob
                                                                    With that sentence I ment that I didn't get a promt so it wasn't executed and only downloaded.

                                                                    You can get it here (only 6kb big takes almost no ram and runs in the background).

                                                                    http://www.pcworld.com/downloads/fil...7843&fileidx=1
                                                                    hehe sp2 blocked the download lol.. i have to go use a diff computer to try it heh
                                                                    hatisblack at yahoo.com

                                                                    Comment

                                                                    • dunefield
                                                                      www.barely18movies.com
                                                                      • Feb 2003
                                                                      • 10920

                                                                      #35
                                                                      oh now it works and i'm OWNED!!!

                                                                      Comment

                                                                      • SmokeyTheBear
                                                                        ►SouthOfHeaven
                                                                        • Jun 2004
                                                                        • 28609

                                                                        #36
                                                                        Originally posted by dunefield
                                                                        tried it... got this error...

                                                                        usually if your missing one of the runtimes your missing the whole pack of runtimes,, theres prob 1 or 2 more to update as well , look on that page above i think it has that one too. pain in the ass , but there are other common programs that use these files.
                                                                        hatisblack at yahoo.com

                                                                        Comment

                                                                        • SmokeyTheBear
                                                                          ►SouthOfHeaven
                                                                          • Jun 2004
                                                                          • 28609

                                                                          #37
                                                                          Originally posted by dunefield
                                                                          oh now it works and i'm OWNED!!!
                                                                          you can click the little smokey head on the upper right to close it..
                                                                          hatisblack at yahoo.com

                                                                          Comment

                                                                          • Magg
                                                                            Confirmed User
                                                                            • Feb 2004
                                                                            • 4467

                                                                            #38
                                                                            rofl, screenshot?!?

                                                                            Comment

                                                                            • dunefield
                                                                              www.barely18movies.com
                                                                              • Feb 2003
                                                                              • 10920

                                                                              #39

                                                                              Comment

                                                                              • Magg
                                                                                Confirmed User
                                                                                • Feb 2004
                                                                                • 4467

                                                                                #40
                                                                                hahaha....

                                                                                Comment

                                                                                • dunefield
                                                                                  www.barely18movies.com
                                                                                  • Feb 2003
                                                                                  • 10920

                                                                                  #41
                                                                                  so now this updates windows without having to bug my arse and ask questions?

                                                                                  Comment

                                                                                  • SmokeyTheBear
                                                                                    ►SouthOfHeaven
                                                                                    • Jun 2004
                                                                                    • 28609

                                                                                    #42
                                                                                    Originally posted by psyko514
                                                                                    check your email. i want royalties if ya use it
                                                                                    I posted your version because it was so simple.. NICE..

                                                                                    If you dont want it posted i will pull it.
                                                                                    hatisblack at yahoo.com

                                                                                    Comment

                                                                                    • SmokeyTheBear
                                                                                      ►SouthOfHeaven
                                                                                      • Jun 2004
                                                                                      • 28609

                                                                                      #43
                                                                                      I almost got fooled by this one.. funny..

                                                                                      http://www.earthunplugged.org/kl.html

                                                                                      look in the lower left .. this works best in non sp2
                                                                                      Last edited by SmokeyTheBear; 09-19-2004, 12:42 AM.
                                                                                      hatisblack at yahoo.com

                                                                                      Comment

                                                                                      • dunefield
                                                                                        www.barely18movies.com
                                                                                        • Feb 2003
                                                                                        • 10920

                                                                                        #44
                                                                                        NOTICE: We collect personal information on this site.

                                                                                        Comment

                                                                                        • OzMan
                                                                                          Confirmed User
                                                                                          • Sep 2003
                                                                                          • 9162

                                                                                          #45
                                                                                          Originally posted by SmokeyTheBear
                                                                                          update your runtime files with the zip above. especially since i spent twice as long making the stupid exe on a shit computer as i spent on the code, it would be a shame not to see it..
                                                                                          done and "owned" ... nice

                                                                                          Comment

                                                                                          • Magg
                                                                                            Confirmed User
                                                                                            • Feb 2004
                                                                                            • 4467

                                                                                            #46
                                                                                            Originally posted by SmokeyTheBear
                                                                                            I almost got fooled by this one.. funny..

                                                                                            http://www.earthunplugged.org/kl.html

                                                                                            look in the lower left .. this works best in non sp2


                                                                                            ah crap i couldnt resist and i clicked, whats that one do? i saw something about keylogger.

                                                                                            Comment

                                                                                            • psyko514
                                                                                              See sig. Join Epic Cash.
                                                                                              • Oct 2002
                                                                                              • 22366

                                                                                              #47
                                                                                              Originally posted by SmokeyTheBear
                                                                                              I posted your version because it was so simple.. NICE..

                                                                                              If you dont want it posted i will pull it.
                                                                                              it's all good. it's very nicely done. the only downside is that it doesn't work if you're using a scroll wheel.

                                                                                              Bad Girl Bucks
                                                                                              - 50% Revshare through CCBill.
                                                                                              Promote BrandyDDD, Pixie's Pillows, Action Allie and more!

                                                                                              Phoenix Forum Pics | Webmaster Access Montreal pics
                                                                                              email: psyko514(a)gmail.com | icq: 214-702-014

                                                                                              Comment

                                                                                              • Theo
                                                                                                HAL 9000
                                                                                                • May 2001
                                                                                                • 34515

                                                                                                #48
                                                                                                Originally posted by johndoebob
                                                                                                Can't be because I have a startup monitor running that tells me if anything wants to run on startup and asks me if I allow it or not.
                                                                                                nice

                                                                                                Comment

                                                                                                • Magg
                                                                                                  Confirmed User
                                                                                                  • Feb 2004
                                                                                                  • 4467

                                                                                                  #49
                                                                                                  Originally posted by Magg
                                                                                                  ah crap i couldnt resist and i clicked, whats that one do? i saw something about keylogger.

                                                                                                  Comment

                                                                                                  • psyko514
                                                                                                    See sig. Join Epic Cash.
                                                                                                    • Oct 2002
                                                                                                    • 22366

                                                                                                    #50
                                                                                                    Originally posted by Magg
                                                                                                    ah crap i couldnt resist and i clicked, whats that one do? i saw something about keylogger.
                                                                                                    check it again and look at your status bar.

                                                                                                    Bad Girl Bucks
                                                                                                    - 50% Revshare through CCBill.
                                                                                                    Promote BrandyDDD, Pixie's Pillows, Action Allie and more!

                                                                                                    Phoenix Forum Pics | Webmaster Access Montreal pics
                                                                                                    email: psyko514(a)gmail.com | icq: 214-702-014

                                                                                                    Comment

                                                                                                    Working...