

| Careful what you clicky! | |
|---|---|
| Tweet Topic Started: Sep 17 2008, 06:32 PM (265 Views) | |
| Incog | Sep 17 2008, 06:32 PM Post #1 |
|
CHEERIO!
![]()
|
Today I (illegally) downloaded a CD mount .nrg file for SW2007 (that engineering software). It works fine 'n all, cept that I need a registration key to install it. That's very expensive stuff, so I tryed to find a downloadable registration generator. After googling a bit, I found one and downloaded it. .Exe file...sound suspiscious? Īndeed, I (rather stupidly) ran the .exe program and it was a trojan horse. As it is, it isn't all that bad, after having looked at it a bit, it's actually amusing. It's nothing more than a little script or program that gives you a false warning (figure1). Then the average people-person goes "OMG OH NOEZ" and clicks that. I did ofc as well (not at first though). Figure1: Figure2: http://img1.imagilive.com/0908/Capturer28e.JPG Then you come to a certain web-page (figure2) that looks quite official 'n stuff (it's in fact a very big gif, if my estimations aren't wrong). You then get those little windows that tell you that you have viruses, and that you need to download the anti-virus that the page proposes to get rid of those viruses. On that page you can click anywhere, you always get a download window for another .exe file. It's a sly trap no doubt, and to confirm my suspicions, I invite you to see figure3. Figure3: http://img1.imagilive.com/0908/Capturer3.JPG During that time, I had my anti-virus scan the comp for shit. Indeed, it found 49 infections. The names are just plain give aways. Now the comp has removed them and it seems my comp is rather safe, except that for some reason the false alarm (figure1) is still there. I dont click it at all, but it's annoying. Know any good virus removers? Remember kids, dont do drugs, stay away from prostitutes, and watch what you clicky. |
|
Black tulip Tribute to the the greatest of the great. | |
![]() |
|
| MxDiane | Sep 17 2008, 06:34 PM Post #2 |
![]()
Worteltjes World
|
wow. great analysis, like one of those ict implementations i had to do years back. |
| "He orders something unusual, like a Black Russian or a Tom Collins, and when you request a beer he says that surely a complex woman deserves a complex drink. " - Travis Grandt | |
![]() |
|
| gs | Sep 17 2008, 06:39 PM Post #3 |
![]()
Slow down
|
:\ the average person doesn't download standalone keygenerators. they're ALWAYS and i mean ALWAYS viruses. |
![]() |
|
| Incog | Sep 17 2008, 06:39 PM Post #4 |
|
CHEERIO!
![]()
|
Mart just pointed out how to get rid of that last annoying thingy at the bottom. So I'm cool. @Mart, I dont have all the experience you do in this area, so I wouldn't have known. Now I do. OPness. |
|
Black tulip Tribute to the the greatest of the great. | |
![]() |
|
| Marlonsm | Sep 17 2008, 08:21 PM Post #5 |
![]()
Sergeant
|
GS is right. NEVER do it. always I need a key for something i look for the key, not for a keygen |
![]()
| |
![]() |
|
| DragonLegend | Sep 18 2008, 12:49 AM Post #6 |
|
Field Marshal
|
I love the title of this thread. |
![]() |
|
| Jack the IV | Sep 18 2008, 01:14 AM Post #7 |
![]()
The Gent's Club
|
Whoa! That exact same thing happened to me when I was downloading this porn thing!
|
|
In battle, in the forest, at the precipice in the mountains, On the dark great sea, in the midst of javelins and arrows, In sleep, in confusion, in the depths of shame, The good deeds a man has done before defend him. | |
![]() |
|
| DragonLegend | Sep 18 2008, 01:16 AM Post #8 |
|
Field Marshal
|
I haven't watched porn in months (maybe weeks)!
|
![]() |
|
| Jack the IV | Sep 18 2008, 01:17 AM Post #9 |
![]()
The Gent's Club
|
I don't even have time anymore... |
|
In battle, in the forest, at the precipice in the mountains, On the dark great sea, in the midst of javelins and arrows, In sleep, in confusion, in the depths of shame, The good deeds a man has done before defend him. | |
![]() |
|
| DragonLegend | Sep 18 2008, 01:18 AM Post #10 |
|
Field Marshal
|
I have plenty of time, but these ***s won't leave me alone for 10 minutes! |
![]() |
|
| The_Fry_Cook_of_Doom | Sep 18 2008, 11:57 AM Post #11 |
|
:OOOOOOOOOOOOMAAANN
|
Wow, so they turned a virus into an advertising program, lofl. The program might actually have been a real trojan connected to adware and an advertisement, dunno. |
| |
![]() |
|
| Incog | Sep 18 2008, 02:40 PM Post #12 |
|
CHEERIO!
![]()
|
No nub, the virus brings me to a page that's obviously not a real anti-vrius, just something worse. Btw, as I restarted my comp today, it came back. I forgot to delete the a.exe and shit. ^^ An annoying side-effect is having "QUALITY PORN' icon on your desktop....there's also "zoo porn".... <_<! |
|
Black tulip Tribute to the the greatest of the great. | |
![]() |
|
| Ichigo1uk | Sep 18 2008, 04:04 PM Post #13 |
![]()
Huh?
|
if it's a game it'd ethier be in the same download or in another file by the author |
| |
![]() |
|
| DragonLegend | Sep 19 2008, 12:57 AM Post #14 |
|
Field Marshal
|
Nice
|
![]() |
|
| The_Fry_Cook_of_Doom | Sep 19 2008, 04:21 AM Post #15 |
|
:OOOOOOOOOOOOMAAANN
|
Wtf? rofl! You better turn off your monitor when your parents come into your room. lolol seriously, your comp is still new and it already has worthless junk on it. |
| |
![]() |
|
| Incog | Sep 19 2008, 05:52 PM Post #16 |
|
CHEERIO!
![]()
|
I got rid of it entirely... |
|
Black tulip Tribute to the the greatest of the great. | |
![]() |
|
| The_Fry_Cook_of_Doom | Sep 19 2008, 06:06 PM Post #17 |
|
:OOOOOOOOOOOOMAAANN
|
|
| |
![]() |
|
| Nut-k | Sep 19 2008, 06:49 PM Post #18 |
|
Captain
|
Sure? Those things are hard to take out. If you don't take those well, they can return. If you suspect a trojan, careful with info in the computer. If there's a keylogger they can easily steal your passwords. |
![]()
| |
![]() |
|
| Incog | Sep 19 2008, 07:26 PM Post #19 |
|
CHEERIO!
![]()
|
I'm sure, it didn't reappear on start up. |
|
Black tulip Tribute to the the greatest of the great. | |
![]() |
|
| 1 user reading this topic (1 Guest and 0 Anonymous) | |
|
|
| « Previous Topic · General chat · Next Topic » |
| Track Topic · E-mail Topic |
4:38 PM Jul 13
|















4:38 PM Jul 13