Comments for KaffeNews

Comment on Assassin DoS : Powerfull HTTP DOS tool by rimo777

rimo777 — Wed, 07 Dec 2011 21:33:14 +0000

is it a virus?????????

Comment on Freeware Packers: Yoda’s Protector by AndreiN

AndreiN — Sun, 04 Dec 2011 11:30:38 +0000

This is for version 1.03.3

Comment on Freeware Packers: Yoda’s Protector by hawtz

hawtz — Sat, 03 Dec 2011 16:34:50 +0000

Which version of Yoda’s Protector is this for?

Comment on Information Security Lab Setup Guide by Newbie

Newbie — Tue, 01 Nov 2011 01:37:22 +0000

Great post, exactly what I was looking for.

Comment on What is normal in generic malwares of 2011? by gabriella

gabriella — Wed, 26 Oct 2011 09:44:04 +0000

Hello,

The same person (tm10.bullet.mail.ne1.yahoo.com) and i have the same ip address for this person. This person scammed me on ebay, i really need help finding out who this person is so if you can please provide any information about this person i would greatly appreciate it, i have also been reading online and this person has scammed a lot of other people, he made fake emails of paypal and ebay so i am really trying to gather up a lot of information to make a complaint since paypal and ebay dont want to be responsible for it, i really have to show a lot of proof.

Thanks

Comment on Freeware Packers: MPRESS – Part1 by Embehu

Embehu — Mon, 24 Oct 2011 08:04:46 +0000

Can i ask you….when i try to MUP Mpress in olly follow your method, i found this
00431712 E8 DB E8<—- We land here
00431713 01 DB 01
00431714 07 DB 07
00431715 00 DB 00
00431716 00 DB 00
00431717 E9 DB E9
00431718 37 DB 37 ; CHAR '7'
00431719 FD DB FD
0043171A FF DB FF
0043171B FF DB FF
0043171C 8B DB 8B
0043171D FF DB FF
0043171E 55 DB 55 ; CHAR 'U'
0043171F 8B DB 8B

I think adress 00431712 is OEP but why it be? Mpress version is 2.18
Thanks for reading my question. Sorry for my bad English
Please mail to me.

Comment on Crackme["Show Me Your Attitude"] by Jurriaan Bremer

Jurriaan Bremer — Sun, 23 Oct 2011 16:35:34 +0000

Load file in ida, code:
scanf(“%d, &num);
if(ror(num, 17) == 0x554f0000) jay();

insert in ollydbg:
mov eax, 0x554f0000
rol eax, 0×11 ; inverse of ror
read eax -> 43678 (0xaa9e)

Comment on Crackme["Show Me Your Attitude"] by 3ton

3ton — Sun, 23 Oct 2011 08:54:17 +0000

PASSWORD: 43678

Comment on Crackme["Show Me Your Attitude"] by dn5

dn5 — Tue, 23 Aug 2011 14:03:08 +0000

Will try it today! Thus it is old post you may still get algorithm from me

Comment on Released StreamArmor 1.1 by Mark

Mark — Tue, 12 Jul 2011 23:33:42 +0000

I suppose it is none of my business but, I was wondering what happened with StreamArmor? You may email me directly if you wish.

Sincerely,

Mark Richards