Ok, before a mod gives me a warning or deleets this post let me explain my self. One of my LinkShell mates recently saw a shout in Jeuno saying something like "Download Mr. Argus from EDITED URL OUT REGARDLESS for free!" (part of the address has been changed to prevent anyone to acdently downloading the file) my friend decided to check out the site to see if it was real. I am unsure about the exact details on how he checked it out but less then 24hrs latter he went to log on his alt. When he tryed to go back to his main, he realised that he could not access his account, and realised he has been hacked.
SE, as usaly, wont do nothing for various reasons. I have invistageated the file and found this from http://virusscan.jotti.org/
File: Mr._Argus.zip
Status: INFECTED/MALWARE
MD5 a643d72333853daa935418d966ae358a
Packers detected: PE-CRYPT.XORPE, UPX
Scanner results
AntiVir Found Trojan/Spy.Perfloger.O
ArcaVir Found Trojan.Spy.Perfloger.O
Avast Found Win32
erfloger-D
AVG Antivirus Found PSW.Perfloger.CA
BitDefender Found Trojan.Keylogger.RT.A
ClamAV Found nothing
Dr.Web Found Trojan.Peflog.31, BackDoor.Srvlite, Trojan.DownLoader.2605
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found not-a-virus:Monitor.Win32.Perflogger.az, Trojan-Spy.Win32.Perfloger.o
NOD32 Found Win32/Spy.PerfKey.N
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Trojan.Perflog
This file is heavely infected with Keylogers and backdoors.
I usaly wont post something like this on public but as of late this person has been shouting in jeuno with this website every few days and when I went to download it to scan it today I found that the bandwidth has been used. So, I am under the conclusion that several people have been downloading this and possibly being hacked.
SE, as usaly, wont do nothing for various reasons. I have invistageated the file and found this from http://virusscan.jotti.org/
File: Mr._Argus.zip
Status: INFECTED/MALWARE
MD5 a643d72333853daa935418d966ae358a
Packers detected: PE-CRYPT.XORPE, UPX
Scanner results
AntiVir Found Trojan/Spy.Perfloger.O
ArcaVir Found Trojan.Spy.Perfloger.O
Avast Found Win32
![Tongue](http://www.ffxionline.com/forums/images/smilies/new/tongue.gif)
AVG Antivirus Found PSW.Perfloger.CA
BitDefender Found Trojan.Keylogger.RT.A
ClamAV Found nothing
Dr.Web Found Trojan.Peflog.31, BackDoor.Srvlite, Trojan.DownLoader.2605
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found not-a-virus:Monitor.Win32.Perflogger.az, Trojan-Spy.Win32.Perfloger.o
NOD32 Found Win32/Spy.PerfKey.N
Norman Virus Control Found nothing
UNA Found nothing
VirusBuster Found nothing
VBA32 Found Trojan.Perflog
This file is heavely infected with Keylogers and backdoors.
I usaly wont post something like this on public but as of late this person has been shouting in jeuno with this website every few days and when I went to download it to scan it today I found that the bandwidth has been used. So, I am under the conclusion that several people have been downloading this and possibly being hacked.
Comment