The Free FB Uploader

[BluAffiliate]

LeFluffy: Wickedfire's Julian Assange.

 

[LeFluffy]

I've never used this tool, but if the uploader isn't already doing this, it should randomly spoof the user agent with one from a regularly updated list of the latest versions of the most popular user agents (IE, FF, Chrome, etc). I'd also make it wait a random amount of time between X and Y seconds (user defined) before sending the next request to FB in order to stay under the radar.

yeah but then it would be just a matter of looking for advertisers who used 20 different user agents in the last hour (I'm sure they log that, I would) as it is, it just looks like Internet Explorer, good luck finding that needle, right?

LeFluffy: Wickedfire's Julian Assange.

lol, had to google him, guess I've been living under a rock

 

[sweetweb]

works great. thanks LeFluffy!

 

[RobinX]

trojan

 

[rawservices]

i don't understand, more ad's on facebook = more money in facebooks pocket.... am i missing something?

i'd share my tool with everyone but this one seems to be working great; if anyone wants what i got, PM me. i've got it down to a science.

 

[rawservices]

Sent to all who PM'd me. File is a little larger cause there is a vid inside on how to use it!

Hope it helps guys!!

 

[rawservices]

if anyone used the tool i made, lemme know if the vid explained it well enough and if you found it useful!

 

[nickster]

trojan

Are you saying that it actually does have a Trojan or are you just speculating/trolling?

 

[Spades]

No hard feelings developers, maybe you're just generous, but I'm paranoid about any of these ad tools calling home.

 

[sweetweb]

Be Aware

POF Uploader Virus results:

Antivirus results
AhnLab-V3 - 2010.12.05.00 - 2010.12.04 - -
AntiVir - 7.10.14.189 - 2010.12.03 - -
Antiy-AVL - 2.0.3.7 - 2010.12.04 - -
Avast - 4.8.1351.0 - 2010.12.04 - -
Avast5 - 5.0.677.0 - 2010.12.04 - -
AVG - 9.0.0.851 - 2010.12.04 - -
BitDefender - 7.2 - 2010.12.05 - -
CAT-QuickHeal - 11.00 - 2010.12.04 - -
ClamAV - 0.96.4.0 - 2010.12.04 - -
Command - 5.2.11.5 - 2010.12.04 - -
Comodo - 6949 - 2010.12.04 - -
DrWeb - 5.0.2.03300 - 2010.12.05 - -
Emsisoft - 5.0.0.50 - 2010.12.04 - -
eSafe - 7.0.17.0 - 2010.12.02 - -
eTrust-Vet - 36.1.8018 - 2010.12.05 - -
F-Prot - 4.6.2.117 - 2010.12.04 - -
F-Secure - 9.0.16160.0 - 2010.12.05 - -
Fortinet - 4.2.254.0 - 2010.12.04 - -
GData - 21 - 2010.12.05 - -
Ikarus - T3.1.1.90.0 - 2010.12.04 - -
Jiangmin - 13.0.900 - 2010.12.04 - Backdoor/Beastdoor.dq
K7AntiVirus - 9.70.3162 - 2010.12.04 - -
Kaspersky - 7.0.0.125 - 2010.12.05 - -
McAfee - 5.400.0.1158 - 2010.12.05 - -
McAfee-GW-Edition - 2010.1C - 2010.12.04 - -
Microsoft - 1.6402 - 2010.12.04 - -
NOD32 - 5674 - 2010.12.04 - -
Norman - 6.06.10 - 2010.12.04 - -
nProtect - 2010-12-04.01 - 2010.12.04 - -
Panda - 10.0.2.7 - 2010.12.04 - -
PCTools - 7.0.3.5 - 2010.12.05 - -
Prevx - 3.0 - 2010.12.05 - -
Rising - 22.76.04.00 - 2010.12.04 - -
Sophos - 4.60.0 - 2010.12.05 - Sus/Behav-1021
SUPERAntiSpyware - 4.40.0.1006 - 2010.12.05 - -
Symantec - 20101.2.0.161 - 2010.12.05 - -
TheHacker - 6.7.0.1.094 - 2010.12.01 - -
TrendMicro - 9.120.0.1004 - 2010.12.04 - -
TrendMicro-HouseCall - 9.120.0.1004 - 2010.12.05 - -
VBA32 - 3.12.14.2 - 2010.12.03 - -
VIPRE - 7513 - 2010.12.05 - -
ViRobot - 2010.12.4.4185 - 2010.12.04 - -
VirusBuster - 13.6.74.0 - 2010.12.04 - -
File info:
MD5: 9451efb99ff82b2934b7ff0fd5f22e8b
SHA1: a34cee49c27615fb9093f2773fcdd403dbd70813
SHA256: 9cccac1af1928bbdb480d266d4433675fa1c4871688775b120ea310dbf87e11e
File size: 3567761 bytes
Scan date: 2010-12-05 01:34:08 (UTC)

 

[LeFluffy]

Same for the POF Uploader as well, it's a side-effect of UBot Studio using something called Xenocode to protect their stuff.

@Lord B. can you shed more light on this? as far as I know it's still an outstanding issue (no real danger, just a false positive)

Compiled ubot flagged as virus by Kaspersky - UBot Underground

VIRUS ALERT - NOT GOOD! - UBot Underground

AVG Reporting virus - UBot Underground

 

[benq99]

who has actually used this ? any updates ?

 

[Constantin]

I installed parallels and windows 7 just to use it.

I ran into a few different issues

it added an open quote to the beginning of my headline text for no apparent reason
it says it will make 30 ads when i give it 15 headlines/destination urls and 15 images...why?
it messed up in actually posting the ad (maybe it went to the next one too quickly? either way after it was completed there were no pending ads in my account

also what is the variations thing? how does that work? the run i did was all the same headlines and destination urls with simply a different image for each.

thanks again, i'd really love to figure this thing out!

 

[Constantin]

raw services PM'ed me his uploader though and that did work quite well...very different setup though.

 

[rawservices]

i'm trying to tweak my uploader, any helpful advice would be great guys who got it.

i want to make it as easy as possible to use in conjunction with tracking202, and it's difficult to do some stuff with ubot ( i'm getting better at it ) keeping it simple and effective is the name of the game for me.

 

[behnk01]

Anyone actually confirm the status of this questionable trojan? Monitor your ports bitches...

 

[behnk01]

PM me on this, please.

 

[Constantin]

I get a problem using the uploader where IE won't accept the security certificate even though my security settings are low and I added FB as a trusted site. How to fix this? If i say proceed anyway it doesn't...this is using Parallels.

 

[LeFluffy]

Interesting! What Windows and IE are you running... sounds like Windows Server or some sort of really hardened build. It it is Windows Server, try this How to disable Internet Explorer Enhanced Security Configuration (IE ESC) in Windows Server 2008/2003 | Windows Reference

If that's not the case however, do you get the same security/certificate warning when you try to login to a different https site directly in IE (say like paypal or whatever)?

 

[Constantin]

Interesting! What Windows and IE are you running... sounds like Windows Server or some sort of really hardened build. It it is Windows Server, try this How to disable Internet Explorer Enhanced Security Configuration (IE ESC) in Windows Server 2008/2003 | Windows Reference

If that's not the case however, do you get the same security/certificate warning when you try to login to a different https site directly in IE (say like paypal or whatever)?

it was actually just on windows 7 running in parallels. also i'm finding that cvs editor to be a huge bitch...is there an easy way to just use notepad or excel and save as windows cvs? should that work?