| Author | Message | Time |
|---|---|---|
| MyStiCaL | If anyone wants to check it out, becasue im assuming Spht never released a beta 2 so im guessing its a trojan? |12:49:47 PM| <From: ToLLiO> New EternalChat 2 BETA! Go to http://www.bnettools.cjb.net | February 20, 2006, 8:53 PM |
| Explicit[nK] | [quote author=MyStiCaL link=topic=14314.msg146552#msg146552 date=1140468808] If anyone wants to check it out, becasue im assuming Spht never released a beta 2 so im guessing its a trojan? |12:49:47 PM| <From: ToLLiO> New EternalChat 2 BETA! Go to http://www.bnettools.cjb.net [/quote] It is a trojan. Nine completely different applications all equal to 34kb in size? Yeah, right. | February 20, 2006, 11:12 PM |
| JoeTheOdd | I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p EDIT - I got brave. Clamscan finds nothing. [tt]-------------------------------------- Scan started: Tue Feb 21 20:27:03 2006 -- summary -- Known viruses: 45396 Engine version: 0.86.2 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.03 MB Time: 1.239 sec (0 m 1 s) ------------------- Completed -------------------[/tt] | February 22, 2006, 2:25 AM |
| Spht | I confirm that there is no EternalChat 2 made by me. | February 22, 2006, 1:26 PM |
| TehUser | [code] AntiVir 6.33.1.50 02.22.2006 no virus found Avast 4.6.695.0 02.20.2006 no virus found AVG 718 02.22.2006 BackDoor.Agent.APT Avira 6.33.1.50 02.21.2006 no virus found BitDefender 7.2 02.22.2006 no virus found CAT-QuickHeal 8.00 02.16.2006 (Suspicious) - DNAScan ClamAV devel-20060126 02.21.2006 no virus found DrWeb 4.33 02.22.2006 no virus found eTrust-InoculateIT 23.71.83 02.21.2006 no virus found eTrust-Vet 12.4.2091 02.22.2006 no virus found Ewido 3.5 02.22.2006 Backdoor.Agent.rk Fortinet 2.69.0.0 02.22.2006 W32/Agent.RK!bdr F-Prot 3.16c 02.19.2006 no virus found Ikarus 0.2.59.0 02.22.2006 no virus found Kaspersky 4.0.2.24 02.22.2006 Backdoor.Win32.Agent.rk McAfee 4703 02.22.2006 no virus found NOD32v2 1.1415 02.21.2006 no virus found Norman 5.70.10 02.22.2006 no virus found Panda 9.0.0.4 02.22.2006 Suspicious file Sophos 4.02.0 02.22.2006 no virus found Symantec 8.0 02.22.2006 no virus found TheHacker 5.9.4.101 02.22.2006 Backdoor/Agent.rk UNA 1.83 02.22.2006 Backdoor.Agent VBA32 3.10.5 02.22.2006 Backdoor.Win32.Agent.rk [/code] | February 22, 2006, 5:38 PM |
| MyStiCaL | [quote author=Joe link=topic=14314.msg146720#msg146720 date=1140575100] I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p EDIT - I got brave. Clamscan finds nothing. [tt]-------------------------------------- Scan started: Tue Feb 21 20:27:03 2006 -- summary -- Known viruses: 45396 Engine version: 0.86.2 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.03 MB Time: 1.239 sec (0 m 1 s) ------------------- Completed -------------------[/tt] [/quote] does this mean you click on the exe also? :) is joe trojanned? | February 22, 2006, 8:19 PM |
| Quarantine | No..it means he scanned it.. | February 22, 2006, 9:01 PM |
| LW-Falcon | I clicked on one of the .exes yesterday thinking that my antivirus(avast) would show a warning if it was infected. After clicking it, the .exe dissappeared from the file, and I pretty much knew at that point that something wasn't right. I pulled up my processes in the taskmanager and sure enough there are 2 instances of firefox.exe running, one of them uses too little memory to be my firefox, so I tried continually to end the weird firefox.exe. It kept coming back, at this point I decided to do a full system scan with avast, but it found nothing. Now my computer really started being gay, my keyboard and mouse settings was all screwed up, I couldn't even send an IM without some problem. I had to continually end the process to get things back to normal for awhile. Thank God TehUser posted that list of the different antivirus results. I'm using VBA32 now, I'm surprised it slipped by so many antivirus products. Anyways the missing .exe showed up here: C:\WINDOWS\winupdate32.exe | February 23, 2006, 2:48 AM |
| Newby | [quote author=Joe link=topic=14314.msg146720#msg146720 date=1140575100] I got brave. Clamscan finds nothing. [/quote] WOAH, so brave.. | February 23, 2006, 2:25 PM |
| JoeTheOdd | [quote author=MyStiCaL link=topic=14314.msg146806#msg146806 date=1140639542] [quote author=Joe link=topic=14314.msg146720#msg146720 date=1140575100] I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p EDIT - I got brave. Clamscan finds nothing. [tt]-------------------------------------- Scan started: Tue Feb 21 20:27:03 2006 -- summary -- Known viruses: 45396 Engine version: 0.86.2 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.03 MB Time: 1.239 sec (0 m 1 s) ------------------- Completed -------------------[/tt] [/quote] does this mean you click on the exe also? :) is joe trojanned? [/quote] Well, now we know who made it. | February 23, 2006, 9:58 PM |
| Newby | [quote author=Joe link=topic=14314.msg146925#msg146925 date=1140731892] Well, now we know who made it. [/quote] Not necessarily true. | February 24, 2006, 1:12 AM |
| Track | the maker is obviously teen who goes by noah now find in op kill hes been trojanning people which is pretty gay if u dl stuff from people you dont know | February 25, 2006, 8:23 PM |
| Newby | His AIM is 'DeadMike06' according to one of the screenshots. | February 26, 2006, 2:50 AM |
| MyStiCaL | [quote author=Joe link=topic=14314.msg146925#msg146925 date=1140731892] [quote author=MyStiCaL link=topic=14314.msg146806#msg146806 date=1140639542] [quote author=Joe link=topic=14314.msg146720#msg146720 date=1140575100] I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p EDIT - I got brave. Clamscan finds nothing. [tt]-------------------------------------- Scan started: Tue Feb 21 20:27:03 2006 -- summary -- Known viruses: 45396 Engine version: 0.86.2 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.03 MB Time: 1.239 sec (0 m 1 s) ------------------- Completed -------------------[/tt] [/quote] does this mean you click on the exe also? :) is joe trojanned? [/quote] Well, now we know who made it. [/quote] That's kinda sad if you are pointing the finger at me... trojaning is a useless way to get things done nowa days if i really needed somthing anyway. -_- Haha, I saw him do a version command on this so called EternalChat 2, it looks to me as a StealthBot! | February 26, 2006, 11:00 AM |
| JoeTheOdd | [quote author=MyStiCaL link=topic=14314.msg147111#msg147111 date=1140951606] [quote author=Joe link=topic=14314.msg146925#msg146925 date=1140731892] [quote author=MyStiCaL link=topic=14314.msg146806#msg146806 date=1140639542] [quote author=Joe link=topic=14314.msg146720#msg146720 date=1140575100] I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p EDIT - I got brave. Clamscan finds nothing. [tt]-------------------------------------- Scan started: Tue Feb 21 20:27:03 2006 -- summary -- Known viruses: 45396 Engine version: 0.86.2 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.03 MB Time: 1.239 sec (0 m 1 s) ------------------- Completed -------------------[/tt] [/quote] does this mean you click on the exe also? :) is joe trojanned? [/quote] Well, now we know who made it. [/quote] That's kinda sad if you are pointing the finger at me... trojaning is a useless way to get things done nowa days if i really needed somthing anyway. -_- Haha, I saw him do a version command on this so called EternalChat 2, it looks to me as a StealthBot! [/quote] Set required access on !ver to 1000 and write a script. Oh, burn. | February 27, 2006, 1:05 PM |
| MyStiCaL | Sad thing was how the version was typed.... EterNaL ChaT v2 by SpHT LOL I think Spht Should make an eternalchat 2, i still use it.. i think alot of people use that bot.. except i made a manifest file for it so it looks more XP themed. =) | February 27, 2006, 11:56 PM |