Grim

[Kensuken]

Hello,

I think some of you guys and girls know Grim, the little noobie around here saying he has 3 meg connection good computer and other shitz like that.

I've been in touchj with him for a year now, and this morning he tryed to send me Hotlix, the trojan that can steal MSN and hotmail passwords.

Here is a description from Zone Alarm's website:

" Win32.Hotlix is a trojan, capable of stealing MSN Messenger/Hotmail passwords."

<a href='http://vic.zonelabs.com/tmpl/body/CA/vi ... ?VId=12427' target='_blank'>ZoneAlarm Hotlix Description</a>

The filename he was trying to scam with was HGserverSMALL.exe .
If he tryes to send you that file, or anything related to it, please be aware. It is quite obivious when he says "I just hexx it to smaller file and add a log0" lol..
Even though most virus guards detect it, F-Secure doesnt. Haven't tested others except AvGuard, wich detects and deletes it with no problems.

And here is the conversation logfile for the people who are intrested.

ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
<a href='http://www.freewebs.com/amino0o2k3/HGserverSMALL.exe' target='_blank'>http://www.freewebs.com/amino0o2k3/HGserverSMALL.exe</a>

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
did u test it ?

eXile - HBFS owns. Yay, I'm back sanoo:
workz

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
it does ?!

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
WOOT

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
does or not ?

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
$$$

eXile - HBFS owns. Yay, I'm back sanoo:
lol mate

eXile - HBFS owns. Yay, I'm back sanoo:
why would you wanna give me a Worm Hotlix?

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
eh ?

eXile - HBFS owns. Yay, I'm back sanoo:
damn moron

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
worm ?

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
its hgserver dude

eXile - HBFS owns. Yay, I'm back sanoo:
damn

eXile - HBFS owns. Yay, I'm back sanoo:
i feel sorry for you

eXile - HBFS owns. Yay, I'm back sanoo:
its a virus

eXile - HBFS owns. Yay, I'm back sanoo:
and youre a dumb fuck if you think you can trick me

eXile - HBFS owns. Yay, I'm back sanoo:
i got 2 virus guards

eXile - HBFS owns. Yay, I'm back sanoo:
and a firewall

eXile - HBFS owns. Yay, I'm back sanoo:
-.-

eXile - HBFS owns. Yay, I'm back sanoo:
all the guards noticed the worm

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
must be an illeagel code i put in the hex

eXile - HBFS owns. Yay, I'm back sanoo:
bah

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
cuz no virus popped up on me and my frend

eXile - HBFS owns. Yay, I'm back sanoo:
man

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
ur anti viruses are too strict

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
its just the code in the hex

eXile - HBFS owns. Yay, I'm back sanoo:
yep

eXile - HBFS owns. Yay, I'm back sanoo:
a code of a worm

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
becuase the code is too small to actually run the HG and ur anti virus thinks its preforming an illeagel actions which most worms do so it takes it for a word ...

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] sanoo:
well least i know what i need to fix now

eXile - HBFS owns. Yay, I'm back sanoo:
hold on

eXile - HBFS owns. Yay, I'm back sanoo:
<a href='http://www.sophos.com/virusinfo/analyse ... tlixa.html' target='_blank'>http://www.sophos.com/virusinfo/analyse ... xa.html</a>

eXile - HBFS owns. Yay, I'm back sanoo:
shame on you

--END OF LOGFILE--

By the way "it must be an illegal code i put in to hex" lol.
Hope you had a laugh

Sincerarely,
Kensuken.

[amino0o2k3]

what a noob m i mean u

[Kensuken]

amino, Grim, nice to see you around..

By the way;

- ￃﾢￂﾄￂﾢ -ￃﾃￂﾗￃﾂￂﾷ!iￃﾂￂﾦ[ￃﾂￂﾷ Grim ￃﾂￂﾷ]ￃﾂￂﾦi!ￃﾂￂﾷ-ￃﾃￂﾗ - ￃﾢￂﾄￂﾢ "I like your shoes" [31337 Krew] says:
lol stop crying about it and grow up

Says 12 years old?


t3h p4nwnge

[amino0o2k3]

u are an ignorant noob

die

[Kensuken]

I think you're way too young and immature to post in these forums..

Please come back when you have balls.

kthxbye.

[tyteman]

I think you're way too young and immature to post in these forums..

Please come back when you have balls.

kthxbye.

dude... if that were true.. then we'd lose majority of our members .. now wouldn't we?