Alt.binz users beware! You have been comprimised

**r_black** · 06-23-2009, 07:49 PM

I'm using 0.28.4. Any chance its infected too? FWIW, I use keyscrambler for my browsers and I never ever open AltBinz in admin mode.

1/37

Code:

Antivirus  	Version  	Last Update  	Result
a-squared	4.5.0.18	2009.06.23	-
AntiVir	7.9.0.193	2009.06.23	-
Antiy-AVL	2.0.3.1	2009.06.23	-
Authentium	5.1.2.4	2009.06.23	-
Avast	4.8.1335.0	2009.06.23	-
AVG	8.5.0.339	2009.06.23	-
BitDefender	7.2	2009.06.23	-
CAT-QuickHeal	10.00	2009.06.22	-
ClamAV	0.94.1	2009.06.23	-
Comodo	1401	2009.06.23	-
DrWeb	5.0.0.12182	2009.06.23	-
eSafe	7.0.17.0	2009.06.23	Suspicious File
eTrust-Vet	31.6.6575	2009.06.23	-
F-Prot	4.4.4.56	2009.06.23	-
F-Secure	8.0.14470.0	2009.06.23	-
Fortinet	3.117.0.0	2009.06.23	-
GData	19	2009.06.23	-
Ikarus	T3.1.1.59.0	2009.06.23	-
Kaspersky	7.0.0.125	2009.06.23	-
McAfee	5655	2009.06.23	-
McAfee+Artemis	5655	2009.06.23	-
McAfee-GW-Edition	6.7.6	2009.06.23	-
Microsoft	1.4803	2009.06.23	-
Norman	6.01.09	2009.06.23	-
nProtect	2009.1.8.0	2009.06.23	-
Panda	10.0.0.16	2009.06.23	-
PCTools	4.4.2.0	2009.06.22	-
Prevx	3.0	2009.06.23	-
Rising	21.35.14.00	2009.06.23	-
Sophos	4.42.0	2009.06.23	-
Sunbelt	3.2.1858.2	2009.06.23	-
Symantec	1.4.4.12	2009.06.23	-
TheHacker	6.3.4.3.351	2009.06.22	-
TrendMicro	8.950.0.1094	2009.06.23	-
VBA32	3.12.10.7	2009.06.23	-
ViRobot	2009.6.23.1800	2009.06.23	-
VirusBuster	4.6.5.0	2009.06.23	-

**zot** · 06-23-2009, 08:27 PM

@r_black

that Virustotal result - 1 out of 37 - is about as clean as you'll ever find

The infected versions started at 0.30 (when alt.binz started using online login verification) ... but that could always change.

Just to be safe, you could also set up your firewall so altbinz is only allowed to connect to your usenet server and nowhere else.

**technovert** · 06-23-2009, 08:34 PM

Meanwhile, those of us donors to alt.binz are fine same as the users of the free version. (.25)

**zot** · 06-23-2009, 09:02 PM

Since the official payware version "calls home" and sets up a connection (presumably encrypted) to a 'secret' server, we just have to trust that it's not rifling through our personal files and sending them out.

That's why I don't like using software that calls home. It's not just about being paranoid, there have actually been some software developers that violated users' privacy and trust.

**Eaglebill** · 06-23-2009, 09:13 PM

Wth reegeed, shame on them... such a let down...
Thx SonsOfLiberty

**Crack0saurus** · 06-23-2009, 09:20 PM

Originally Posted by djkemp1

how has this software got out, im confused - has the groups released software with trojans packed?

looking on orlydb, these scene groups (Crude and CzW) have not released any cracked version of altbinz...
http://www.orlydb.com/?q=-crd
http://www.orlydb.com/?q=-czw

So these releases seem to be complete creations of those 2 bloodsuckers at Zerosec

@ r_black: i'm using that 0.28.4 version as well, there was no need for a crack back then, as it was just leaked from the "contributors" forum and no protection had been implemented into alt.binz yet... The official 0.25 also has a 1/40 result on virustotal.

**saulin** · 06-24-2009, 06:04 PM

Yep CRD has not officially released it. I also checked some release sites and Alt.Binz did not come up. So they are just fake releases. No one has really stepped forward to actually crack this app.