Reposted from another thread too.

 

Could someone make a "hosts" overwritter to add the lines that correspond to these ips to block em? Thanks in advance

 

You cannot block IP addresses using "hosts".
And that AWS connection still seems strange when the legit one isn't making it.

 

.

 

Last edited by a moderator: Mar 26, 2021

is there a way to block it?

 

yeah guys i don't mean to be overly pessimistic, but if this release opens a connection to some server and the real version doesn't, then this is fishy AF. there's no reason for that to happen. what i'd love to see is other crackers analyzing this and blasting it in an NFO or something, can't wait to read that. something tells me this is the beginning of something that might end up being a longer story.

 

Sometimes if it seems too good to be true, it is. Maybe not the case here, but not worth it for me to find out, so I decided to not install it.

 

The way you said, as far as I know.
IE. adding the addresses to the hosts file and zeroing them.

 

If is not doing in legit Nexus 3, there is your answer for all of your questions If you read article it all makes sense ... Still sounds very odd and fishy.... Maybe is a new way of hacking systems. btw I am not installing this anyways still unsure about crack.

https://aws.amazon.com/vpc/?nc1=h_l...lFields.createdDate&vpc-blogs.sort-order=desc

 

I've been playing a bit with the DLL a bit too. Seems like it runs under some kind of virtualized environment, so has been obfuscated. That doesn't happen with the legit version.

AWS is used everywhere. It's not an issue itself.

Doesn't work for IP addresses, only blocks name resolutions.

The problem is not that the plugin calls home (old news). The problem might be somewhere else.

 

Last edited: Mar 26, 2021

Useful. Thank God for Little Snitch on mac then!
What, so we don't know the address it dials out to?

 

We know the addresses. It's just that they can't be blocked using the hosts file. Needs something else.

 

Ouch. That's even worse!
Sounds like a totally straight-forward crack with no data-mining at all, yeah.

 

That's due to the nature of the hosts file, not because of the Nexus "crack" (more like bypass).
Also, with or without internet connection, drops a file on C:\ProgramData\ called "mntemp"...whatever that means.

 

you mean going to the source code and repacking it??? cause that is fucking badass and fucking crazy

 

Yes, I get that. You said already.
I meant to still not be able to stop it from having the privileges it has, and from doing whatever it's doing that the legit doesn't do.
It's, like, not a good sign!

 

Correction: "...from doing what the legit does"! lol.
Yeah. We need it to be identical to the real thing!