Pretty Sure I Got A Trojan

**arghwashier** · 10-25-2003, 10:31 AM

ok i downloaden sygate personal firewall pro and tried a keygen from astalavista.com and i'm pretty sure the keygen installed a trojan

(i was already running the free version of the sygate firewall)
first it called itself slave.exe trying to contact the internet than it tried all sorts of tricks renaming itsself mmtask0.exe (i went into my register and saw a rename)

antway i run norton 2003 antivirus but it didn't detect any trojans i looked on the internet slave.exe in a commercial program but can also be used as a trojan the normal and this version that came with the keygen. has some extra tricks up it's sleave like the renaming bit and there are a lot more registry entries than the normal version.

anyway 2 questions why didn't norton detect anything (my definition were up-to-date)

are there any good trojan scan around on the internet?

**scribblec** · 10-25-2003, 10:35 AM

http://www.webattack.com/

try searching spy sweeper that mite work

**nikita69** · 10-25-2003, 10:37 AM

The clostest any program can get ur pc to 100% anti-trojan is
TDS-3 Trojan Defence Suite easy to get the program, yet hard to get the qwak. they update their database more than anyone in the bus. Several governments' orgs use it.

look for it, if u find a working qwak for the latest version, let me know and visa versa.

**arghwashier** · 10-25-2003, 11:56 AM

Originally posted by nikita69@25 October 2003 - 10:37
The clostest any program can get ur pc to 100% anti-trojan is
TDS-3 Trojan Defence Suite easy to get the program, yet hard to get the qwak. they update their database more than anyone in the bus. Several governments' orgs use it.

look for it, if u find a working qwak for the latest version, let me know and visa versa.

well it actually found 3 trojans that came with the keygen!

neither norton antivirus, spybot, adaware or spysweep detected them, though they were in a zip!

though the program looks hard to use to but it requires you to pay instead of enter a key....

**nikita69** · 10-25-2003, 04:14 PM

on the contrary, TDS3 is by far the simplest program I've seen in a while. One reason u may see it as hard is cos it doesn't rely much on the user. I have the previous version and just last night, my server was attacked by someone from 159.137.146.49. I had TDS3, NIS 2004, Sygate, NAV 04 and my (buddy) AReplicator. ALL picked it up NAV04, NIS04 & sygate went crazy like it's the end of the world

however, TDS3 SILENTLY detected and blocked, whil AReplicator SILENTLY replicated the attack and send it back to initial source other than the above IP.

Frankly I was bothered by Sygate & Norton more than the attack it self.

**arghwashier** · 10-25-2003, 04:53 PM

nah the graphical interface looks like shit and it has a lot of functions

anyway a found a working version of 3.2.0 and i'm glad i lost those 3 trojans! (which spybot adaware spysweeper and norton all missed, luckily i had a gut feeling something was wrong.....)

although i'm a bit paranoid suppose this crack also includes some malware....

**arghwashier** · 10-25-2003, 05:25 PM

damn the program found the illegal key

**nikita69** · 10-25-2003, 05:56 PM

Originally posted by arghwashier@25 October 2003 - 23:25
damn the program found the illegal key

talking about TDS3? if so, then i'm not surprised, i've been trying for months. initially, this program was co-created by a hacker (tho they don't claim that).