[Attention] Ddos Attacks through the virus Ramnit.A

12/18/2012 21:04 _HouseMusicx3#16
Funny to see that almost every client in the advertising section got this virus in it :d
12/18/2012 21:26 Chernobyl*#17
Ramnit - Wikipedia, the free encyclopedia

G.T.F.O.


Probably, false positive. Or.. there is still a possibility i were infected with it.
12/18/2012 21:58 PortalDark#18
Quote:
Originally Posted by Chernobyl* View Post
Ramnit - Wikipedia, the free encyclopedia

G.T.F.O.


Probably, false positive. Or.. there is still a possibility i were infected with it.
remember your impostor months ago?
maybe it was that, cuz your current exe is clean(btw, any issue if you could share the source with me, i want to take a look at it and be sure[no publication will be made. dont worry])
12/18/2012 22:00 Chernobyl*#19
PortalDark, might be it. Well, why don't you just disassemble it with .net reflector, and compile back ?
12/18/2012 23:06 PortalDark#20
Quote:
Originally Posted by Chernobyl* View Post
PortalDark, might be it. Well, why don't you just disassemble it with .net reflector, and compile back ?
you didn't obscured the code?
wow, i thought it was


Edit: current SrPatcher is clean
use a .net decompiler to check it yourself
12/21/2012 21:54 theross#21
releasing a beasty virus which would spread easily, and because the "latest" tool is clean the accused one is not guilty anymore?

cool. I'll rape a dog and later I'll NOT rape a dog. it's like i have never raped a dog =)

I kill someone at the park, and go home. as there are people passing by me on my way home, which didn't get killed by me, I'm not a killer. YAY!
12/21/2012 22:33 PortalDark#22
Quote:
Originally Posted by theross View Post
releasing a beasty virus which would spread easily, and because the "latest" tool is clean the accused one is not guilty anymore?

cool. I'll rape a dog and later I'll NOT rape a dog. it's like i have never raped a dog =)

I kill someone at the park, and go home. as there are people passing by me on my way home, which didn't get killed by me, I'm not a killer. YAY!
some time ago, cherno got hacked by this same virus and the hacker spread over cherno's tools the virus(i think that was one of the reasons cherno got demoted at RZ. I can confirm that it was indeed a guy spreading the virus, but i can assure Cherno(the real one) wasn't the responsible for that
as for the virus, it is not very dangerous. The real danger is the virus that is based over this one, which is identified by other names
12/21/2012 22:51 boOoO0oris#23
told you days ago, all clients are infected
12/21/2012 22:53 PortalDark#24
Quote:
Originally Posted by boOoO0oris View Post
told you days ago, all clients are infected
not mine at least
scanned with 4 different AV(home) and VirusTotal
but good for me that I always run SRO files(client too) on sandbox
12/21/2012 22:56 naty48#25
yeah , i found out that one day all my files&clients were infected with that.

installed malewarebytes + ESET = they got deleted.

also this shit caused my entire stuff wiped.

i can confirm it has nothing to do with the tools of chernobyl since i never downloaded any of those.

it was inside the original vsro 1.188 server files (which shown has clean a few days ago).

this virus will infect your website and everyone who get inside it will get infected too also it's infecting dlls , .exes , .ico , .png , .php ,.html files .

really nice spreader , didn't looked about what this one actually does.

and i dont really care since it was cleared by malewarebytes.

just beware and make sure your servers are SAFE and you got AV/MLB Installed there!!.

so yeah , chernobyl has nothing to do with that as far as i know.
12/21/2012 23:18 PortalDark#26
Quote:
Originally Posted by naty48 View Post
yeah , i found out that one day all my files&clients were infected with that.

installed malewarebytes + ESET = they got deleted.

also this shit caused my entire stuff wiped.

i can confirm it has nothing to do with the tools of chernobyl since i never downloaded any of those.

it was inside the original vsro 1.188 server files (which shown has clean a few days ago).

this virus will infect your website and everyone who get inside it will get infected too also it's infecting dlls , .exes , .ico , .png , .php ,.html files .

really nice spreader , didn't looked about what this one actually does.

and i dont really care since it was cleared by malewarebytes.

just beware and make sure your servers are SAFE and you got AV/MLB Installed there!!.

so yeah , chernobyl has nothing to do with that as far as i know.
no doubt many servers have the favicon.png infected on their websites
vSRO files virus is just a false positive, nothing to do with the real one
good thing im not infected