Winols 4.51

[NikolayBG]

Password please
Thanks!

[albanhysa]

hello please how is passwod thank you

[peetr]

Guys be careful. It looks like there is a quasar rat trojan in the vm at C:\windows\system32\network\svchost.exe
I saw it because something started all the time batches and ping localhost at the background. I've targeted it down to this executable and this is it:
https://www.virustotal.com/gui/file/7832fb31eaba91bfb4da38fe18788b5d9f9e6bb033fd3d9555 c26676074ea03c/detection

It creates a scheduler job "sc". Delete the scheduler job and the executable, then the vm should be safe to use. Also delete the network adapter from the vm because, why should it need internet access?

edit: one more trojan: at C:\Users\deviance\Documents\HDSDR theres is a hidden "Client-build.exe" executable. also a quasar rat, but a different one. here it is:
https://www.virustotal.com/gui/file/...c3e1/detection

the resetter script works sometimes.. but not every time. idk why.

I've got a WinOLS 4.28 vm and it looks like it is the same vm, but with a older winols version (and without trojans). I'm really curious where this magical vm comes from.. does someone know something about it?

[suhaib]

hi
thank you
pass ???

[hachimuto]

password plz

[galiza]

Guys be careful. It looks like there is a quasar rat trojan in the vm at C:\windows\system32\network\svchost.exe
I saw it because something started all the time batches and ping localhost at the background. I've targeted it down to this executable and this is it:
https://www.virustotal.com/gui/file/7832fb31eaba91bfb4da38fe18788b5d9f9e6bb033fd3d9555 c26676074ea03c/detection

It creates a scheduler job "sc". Delete the scheduler job and the executable, then the vm should be safe to use. Also delete the network adapter from the vm because, why should it need internet access?

edit: one more trojan: at C:\Users\deviance\Documents\HDSDR theres is a hidden "Client-build.exe" executable. also a quasar rat, but a different one. here it is:
https://www.virustotal.com/gui/file/...c3e1/detection

the resetter script works sometimes.. but not every time. idk why.

I've got a WinOLS 4.28 vm and it looks like it is the same vm, but with a older winols version (and without trojans). I'm really curious where this magical vm comes from.. does someone know something about it?

The story of these new versions of winols(since 2.24) started with a guy who claimed to break obsidium protection. After that a new guy (Former "Deviance") offers an online winols 4.26 version to work in remote from his own server.A few weeks after this guy complain about the only customers that he had, they was trying to copy his virtual machine but no using the software. (It looks like if they only pay the feed to copy the vm).
After that two new versions were published, 4.50 and 4.51. Always in VM.
Even after 4.68 and 5.0 versions were told that they have been broken and also it was said that some guy was selling standalone installations of these versions.

[turbo16v]

hi
thank you
pass ???

[turbo16v]

Hello Loki954
I can have the password for this, please
thank you in advance

[burhannn]

send me pasword please

[karter1]

Send password ...thx

[hachimuto]

thank you very much

[yazid1]

[QUOTE=djzxz;4079569]Hello, the file found on the internet (.torrent). Maybe someone wants to try.
Good luck.
Not tested with files !!!
Please click thank you

This is what I'm looking for, thankssssssss

[yazid1]

pasword

[alexfr]

password ? please

[RAIONEJB]

send me pass please