Jump to content

nonspin

Members
 View Profile  See their activity

  • Posts

    30

  • Joined

  • Last visited

  • Days Won

    1

Reputation Activity

  1. Like
    bphlpt
    nonspin got a reaction from bphlpt in Weblinks infected   
    Using the "Downloads" from inside of your WinToolkit application to access - let's say ISO's,
    -> in an unregistered state -> ad.fly redirection is enabled.
    Once you have registered your copy of WinToolkit - those ad.fly redirects go away.

    However, ad.fly is just a 5 second advertising placeholder (watch the countdown at the top-right of your page).
    Once it hits "0" - you can proceed to the initial target.

    This is common practice and has nothing to do with malware or infected code.

     
  2. Like
    naifle
    nonspin got a reaction from naifle in [improvement] Addon Maker   
    Fill form by selecting (target) .exe
     
    Almost all fields <info> can be retrieved from the application/executable easily.
    It would speed up creation significantly.
     
    Creator could be automatically set to %USERNAME%
  3. Like
    abbodi1406
    nonspin got a reaction from abbodi1406 in Windows Installation - Where I can change the modification date   
    Highpart/Lowpart explanation:
     
    Highpart: Date
    Lowpart: Time
     
    convert/verify: w32tm
    example:
    <CREATIONTIME><HIGHPART>0x01CB88D1</HIGHPART><LOWPART>0xDB7CCA61</LOWPART></CREATIONTIME>syntax: w32tm /ntte 0xHIGHPARTLOWPART
     
    Open DOS-Box: (Win+R) CMD
    w32tm /ntte 0x01CB88D1DB7CCA61
    149707 16:42:02.2122081 - 11/20/2010 6:42:02 PM
×
×
  • Create New...