Pretty Sure I Got A Trojan

Printable View

10-25-2003, 10:31 AM
arghwashier

ok i downloaden sygate personal firewall pro and tried a keygen from astalavista.com and i'm pretty sure the keygen installed a trojan :blink: :unsure:
(i was already running the free version of the sygate firewall)
first it called itself slave.exe trying to contact the internet than it tried all sorts of tricks renaming itsself mmtask0.exe (i went into my register and saw a rename)

antway i run norton 2003 antivirus but it didn't detect any trojans i looked on the internet slave.exe in a commercial program but can also be used as a trojan the normal and this version that came with the keygen. has some extra tricks up it's sleave like the renaming bit and there are a lot more registry entries than the normal version.

anyway 2 questions why didn't norton detect anything (my definition were up-to-date)

are there any good trojan scan around on the internet?
10-25-2003, 10:35 AM
scribblec

http://www.webattack.com/

try searching spy sweeper that mite work :)
10-25-2003, 10:37 AM
nikita69

The clostest any program can get ur pc to 100% anti-trojan is
TDS-3 Trojan Defence Suite easy to get the program, yet hard to get the qwak. they update their database more than anyone in the bus. Several governments' orgs use it.

look for it, if u find a working qwak for the latest version, let me know and visa versa.
10-25-2003, 11:56 AM
arghwashier

Quote:

Originally posted by nikita69@25 October 2003 - 10:37
The clostest any program can get ur pc to 100% anti-trojan is
TDS-3 Trojan Defence Suite easy to get the program, yet hard to get the qwak. they update their database more than anyone in the bus. Several governments' orgs use it.

look for it, if u find a working qwak for the latest version, let me know and visa versa.

well it actually found 3 trojans that came with the keygen!

neither norton antivirus, spybot, adaware or spysweep detected them, though they were in a zip!

though the program looks hard to use to but it requires you to pay instead of enter a key....
10-25-2003, 04:14 PM
nikita69

on the contrary, TDS3 is by far the simplest program I've seen in a while. One reason u may see it as hard is cos it doesn't rely much on the user. I have the previous version and just last night, my server was attacked by someone from 159.137.146.49. I had TDS3, NIS 2004, Sygate, NAV 04 and my (buddy) AReplicator. ALL picked it up NAV04, NIS04 & sygate went crazy like it's the end of the world :lol: however, TDS3 SILENTLY detected and blocked, whil AReplicator SILENTLY replicated the attack and send it back to initial source other than the above IP.http://www.mcbriens.net/liam/img/smilies/whistle.gif http://www.mcbriens.net/liam/img/smilies/whistle.gif

Frankly I was bothered by Sygate & Norton more than the attack it self. :lol:
10-25-2003, 04:53 PM
arghwashier

nah the graphical interface looks like shit and it has a lot of functions

anyway a found a working version of 3.2.0 and i'm glad i lost those 3 trojans! (which spybot adaware spysweeper and norton all missed, luckily i had a gut feeling something was wrong.....)

although i'm a bit paranoid suppose this crack also includes some malware....
10-25-2003, 05:25 PM
arghwashier

damn the program found the illegal key <_<
10-25-2003, 05:56 PM
nikita69

Quote:

Originally posted by arghwashier@25 October 2003 - 23:25
damn the program found the illegal key <_<

talking about TDS3? if so, then i'm not surprised, i've been trying for months. initially, this program was co-created by a hacker (tho they don't claim that).
10-25-2003, 05:57 PM
Wizzandabe

Cracks AM. :D
Nothing else.
..oh and a pop up stopper :P
10-25-2003, 06:14 PM
arghwashier

Quote:

Originally posted by Wizzandabe@25 October 2003 - 17:57
Cracks AM. :D
Nothing else.
..oh and a pop up stopper :P

i tried the crack am crack but tds says it's an illegal key and opens it website and thanks you for helping stop software piracy :rolleyes: :lol:

almost thinking of buying it......
10-25-2003, 06:26 PM
nikita69

Quote:

Originally posted by arghwashier+26 October 2003 - 00:14--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (arghwashier @ 26 October 2003 - 00:14)</td></tr><tr><td id='QUOTE'><!--QuoteBegin-Wizzandabe@25 October 2003 - 17:57
Cracks AM. :D
Nothing else.
..oh and a pop up stopper :P

i tried the crack am crack but tds says it's an illegal key and opens it website and thanks you for helping stop software piracy :rolleyes: :lol:

almost thinking of buying it......[/b][/quote]
that's not a bad idea, keep it legal. Send me a PM with ur credit card info (ur full name is enoughhttp://www.mcbriens.net/liam/img/smilies/whistle.gif) and I'll reply with a keygen. :lol: :lol: :lol: :lol: just kidding
10-25-2003, 06:46 PM
MUSLEMAN

its not illegal to post your credit card and bank account info here, you don't have to pm nikita just post it :lol:
10-26-2003, 12:12 AM
djweiser

hmm

id remove it asap. ;)
10-26-2003, 02:34 AM
Blade025

i also downloaded something from astalavista.com and got a virus as well, is that site safe?
10-26-2003, 03:22 AM
MUSLEMAN

Quote:

Originally posted by Blade025@25 October 2003 - 22:34
i also downloaded something from astalavista.com and got a virus as well, is that site safe?

yes but as anywhere you have to scan what you download you never know
10-26-2003, 07:14 AM
zapjb

Anti-Trojan 5.5 b421 is well respected & stays cracked. :P
10-26-2003, 08:41 AM
Jay

Quote:

Originally posted by Blade025@26 October 2003 - 03:34
i also downloaded something from astalavista.com and got a virus as well, is that site safe?

i dont trust anything from that site cause everytime i tried to download anything from up there it kept trying to install a sex-thing on my system
10-28-2003, 06:21 AM
nikita69

Quote:

Originally posted by Jay+26 October 2003 - 14:41--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Jay @ 26 October 2003 - 14:41)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-Blade025@26 October 2003 - 03:34
i also downloaded something from astalavista.com and got a virus as well, is that site safe?

i dont trust anything from that site cause everytime i tried to download anything from up there it kept trying to install a sex-thing on my system [/b][/quote]
the combination of:

PROXY - don't visit any such warez sites without hi-anon ssl proxy
NIS 04
NAV 04
Sygate pro 5.1
HERE and HERE

would definetly elimnate this problem and others.

I visit it often, have the above and never had any problems.