Welcome Guest [Log In] [Register]

Add Reply
Careful what you clicky!
Topic Started: Sep 17 2008, 06:32 PM (265 Views)
Incog
Member Avatar
CHEERIO!

Today I (illegally) downloaded a CD mount .nrg file for SW2007 (that engineering software). It works fine 'n all, cept that I need a registration key to install it. That's very expensive stuff, so I tryed to find a downloadable registration generator. After googling a bit, I found one and downloaded it. .Exe file...sound suspiscious?

Īndeed, I (rather stupidly) ran the .exe program and it was a trojan horse.



As it is, it isn't all that bad, after having looked at it a bit, it's actually amusing. It's nothing more than a little script or program that gives you a false warning (figure1). Then the average people-person goes "OMG OH NOEZ" and clicks that. I did ofc as well (not at first though).

Figure1:
Posted Image

Figure2:
http://img1.imagilive.com/0908/Capturer28e.JPG

Then you come to a certain web-page (figure2) that looks quite official 'n stuff (it's in fact a very big gif, if my estimations aren't wrong). You then get those little windows that tell you that you have viruses, and that you need to download the anti-virus that the page proposes to get rid of those viruses. On that page you can click anywhere, you always get a download window for another .exe file.

It's a sly trap no doubt, and to confirm my suspicions, I invite you to see figure3.

Figure3:
http://img1.imagilive.com/0908/Capturer3.JPG

During that time, I had my anti-virus scan the comp for shit. Indeed, it found 49 infections. The names are just plain give aways. Now the comp has removed them and it seems my comp is rather safe, except that for some reason the false alarm (figure1) is still there. I dont click it at all, but it's annoying. Know any good virus removers?

Posted Image

Remember kids, dont do drugs, stay away from prostitutes, and watch what you clicky.
Black tulip

Tribute to the the greatest of the great.
Offline Profile Quote Post Goto Top
 
MxDiane
Member Avatar
Worteltjes World
wow.
great analysis, like one of those ict implementations i had to do years back.
"He orders something unusual, like a Black Russian or a Tom Collins, and when you request a beer he says that surely a complex woman deserves a complex drink. " - Travis Grandt
Offline Profile Quote Post Goto Top
 
gs
Member Avatar
Slow down
Incognoto
Sep 17 2008, 07:32 PM
As it is, it isn't all that bad, after having looked at it a bit, it's actually amusing. It's nothing more than a little script or program that gives you a false warning (figure1). Then the average people-person goes "OMG OH NOEZ" and clicks that.

:\

the average person doesn't download standalone keygenerators.

they're ALWAYS and i mean ALWAYS viruses.
Offline Profile Quote Post Goto Top
 
Incog
Member Avatar
CHEERIO!

Mart just pointed out how to get rid of that last annoying thingy at the bottom. So I'm cool.



@Mart, I dont have all the experience you do in this area, so I wouldn't have known. Now I do. OPness.
Black tulip

Tribute to the the greatest of the great.
Offline Profile Quote Post Goto Top
 
Marlonsm
Member Avatar
Sergeant
GS is right.
NEVER do it.

always I need a key for something i look for the key, not for a keygen
Posted Image
Posted Image
Offline Profile Quote Post Goto Top
 
DragonLegend
Field Marshal
I love the title of this thread.
Offline Profile Quote Post Goto Top
 
Jack the IV
Member Avatar
The Gent's Club
Whoa! That exact same thing happened to me when I was downloading this porn thing! :o
In battle, in the forest, at the precipice in the mountains,
On the dark great sea, in the midst of javelins and arrows,
In sleep, in confusion, in the depths of shame,
The good deeds a man has done before defend him.
Offline Profile Quote Post Goto Top
 
DragonLegend
Field Marshal
I haven't watched porn in months (maybe weeks)! :o
Offline Profile Quote Post Goto Top
 
Jack the IV
Member Avatar
The Gent's Club
I don't even have time anymore...
In battle, in the forest, at the precipice in the mountains,
On the dark great sea, in the midst of javelins and arrows,
In sleep, in confusion, in the depths of shame,
The good deeds a man has done before defend him.
Offline Profile Quote Post Goto Top
 
DragonLegend
Field Marshal
I have plenty of time, but these ***s won't leave me alone for 10 minutes!
Offline Profile Quote Post Goto Top
 
The_Fry_Cook_of_Doom
Member Avatar
:OOOOOOOOOOOOMAAANN
Wow, so they turned a virus into an advertising program, lofl.

The program might actually have been a real trojan connected to adware and an advertisement, dunno.
Jam
 
It's okay to be mad at your fiends sometimes
Offline Profile Quote Post Goto Top
 
Incog
Member Avatar
CHEERIO!

No nub, the virus brings me to a page that's obviously not a real anti-vrius, just something worse.

Btw, as I restarted my comp today, it came back. :o

I forgot to delete the a.exe and shit. ^^

An annoying side-effect is having "QUALITY PORN' icon on your desktop....there's also "zoo porn"....

<_<!
Black tulip

Tribute to the the greatest of the great.
Offline Profile Quote Post Goto Top
 
Ichigo1uk
Member Avatar
Huh?
Goodspeed
Sep 17 2008, 07:39 PM
Incognoto
Sep 17 2008, 07:32 PM
As it is, it isn't all that bad, after having looked at it a bit, it's actually amusing. It's nothing more than a little script or program that gives you a false warning (figure1). Then the average people-person goes "OMG OH NOEZ" and clicks that.

:\

the average person doesn't download standalone keygenerators.

they're ALWAYS and i mean ALWAYS viruses.

if it's a game it'd ethier be in the same download or in another file by the author
Incog
Jan 19 2012, 05:34 PM
I think unicorns have a higher chance of existing than gods do. I mean, if a mare fell into the ocean and a narwhal raped it, then the mare might just give birth to a unicorn.
Offline Profile Quote Post Goto Top
 
DragonLegend
Field Marshal
Incognoto
Sep 18 2008, 05:40 PM
An annoying side-effect is having "QUALITY PORN' icon on your desktop....there's also "zoo porn"....

<_<!

Nice hitit
Offline Profile Quote Post Goto Top
 
The_Fry_Cook_of_Doom
Member Avatar
:OOOOOOOOOOOOMAAANN
Incognoto
Sep 18 2008, 02:40 PM
No nub, the virus brings me to a page that's obviously not a real anti-vrius, just something worse.

Btw, as I restarted my comp today, it came back. :o

I forgot to delete the a.exe and shit. ^^

An annoying side-effect is having "QUALITY PORN' icon on your desktop....there's also "zoo porn"....

<_<!

Wtf? rofl!

You better turn off your monitor when your parents come into your room.

lolol seriously, your comp is still new and it already has worthless junk on it.
Jam
 
It's okay to be mad at your fiends sometimes
Offline Profile Quote Post Goto Top
 
Incog
Member Avatar
CHEERIO!

Ultra-Musketeer
Sep 19 2008, 06:21 AM
Incognoto
Sep 18 2008, 02:40 PM
No nub, the virus brings me to a page that's obviously not a real anti-vrius, just something worse.

Btw, as I restarted my comp today, it came back. :o

I forgot to delete the a.exe and shit. ^^

An annoying side-effect is having "QUALITY PORN' icon on your desktop....there's also "zoo porn"....

<_<!

Wtf? rofl!

You better turn off your monitor when your parents come into your room.

lolol seriously, your comp is still new and it already has worthless junk on it.

I got rid of it entirely...
Black tulip

Tribute to the the greatest of the great.
Offline Profile Quote Post Goto Top
 
The_Fry_Cook_of_Doom
Member Avatar
:OOOOOOOOOOOOMAAANN
Incognoto
Sep 19 2008, 05:52 PM
Ultra-Musketeer
Sep 19 2008, 06:21 AM
Incognoto
Sep 18 2008, 02:40 PM
No nub, the virus brings me to a page that's obviously not a real anti-vrius, just something worse.

Btw, as I restarted my comp today, it came back. :o

I forgot to delete the a.exe and shit. ^^

An annoying side-effect is having "QUALITY PORN' icon on your desktop....there's also "zoo porn"....

<_<!

Wtf? rofl!

You better turn off your monitor when your parents come into your room.

lolol seriously, your comp is still new and it already has worthless junk on it.

I got rid of it entirely...

toast
Jam
 
It's okay to be mad at your fiends sometimes
Offline Profile Quote Post Goto Top
 
Nut-k
Member Avatar
Captain
Ultra-Musketeer
Sep 19 2008, 06:06 PM
Incognoto
Sep 19 2008, 05:52 PM
Ultra-Musketeer
Sep 19 2008, 06:21 AM
Incognoto
Sep 18 2008, 02:40 PM
No nub, the virus brings me to a page that's obviously not a real anti-vrius, just something worse.

Btw, as I restarted my comp today, it came back. :o

I forgot to delete the a.exe and shit. ^^

An annoying side-effect is having "QUALITY PORN' icon on your desktop....there's also "zoo porn"....

<_<!

Wtf? rofl!

You better turn off your monitor when your parents come into your room.

lolol seriously, your comp is still new and it already has worthless junk on it.

I got rid of it entirely...

toast

Sure? Those things are hard to take out. If you don't take those well, they can return.

If you suspect a trojan, careful with info in the computer. If there's a keylogger they can easily steal your passwords.
Posted Image

Posted Image
Offline Profile Quote Post Goto Top
 
Incog
Member Avatar
CHEERIO!

Nut-k
Sep 19 2008, 08:49 PM
Ultra-Musketeer
Sep 19 2008, 06:06 PM
Incognoto
Sep 19 2008, 05:52 PM
Ultra-Musketeer
Sep 19 2008, 06:21 AM
Incognoto
Sep 18 2008, 02:40 PM
No nub, the virus brings me to a page that's obviously not a real anti-vrius, just something worse.

Btw, as I restarted my comp today, it came back. :o

I forgot to delete the a.exe and shit. ^^

An annoying side-effect is having "QUALITY PORN' icon on your desktop....there's also "zoo porn"....

<_<!

Wtf? rofl!

You better turn off your monitor when your parents come into your room.

lolol seriously, your comp is still new and it already has worthless junk on it.

I got rid of it entirely...

toast

Sure? Those things are hard to take out. If you don't take those well, they can return.

If you suspect a trojan, careful with info in the computer. If there's a keylogger they can easily steal your passwords.

I'm sure, it didn't reappear on start up.
Black tulip

Tribute to the the greatest of the great.
Offline Profile Quote Post Goto Top
 
1 user reading this topic (1 Guest and 0 Anonymous)
DealsFor.me - The best sales, coupons, and discounts for you
« Previous Topic · General chat · Next Topic »
Add Reply

Skinning by GS, Logo and bottom by Incog.