suspicious files need help

01/12/2008 08:17 betatest#1
hello .. i found in a forum this
Quote:
I found this working bot on some korean sites. Credits goes to MiKa43.

First of all you have to download the bot. Link here: 2moons bot

Then you have to download and install the crack. Link here: Botsmall crack

Open crack file first, and in right corner you have to choose the process you want to lock. You`ll have to wait for a while. Keep the crack open, and open 2moons_bot, set it up... and then open your 2moons launcher. when you press start... you have to choose "dekaron.exe" form the crack file and then press okey.

While you`re ingame , you can minimize and let the bot play for you.

AutoPot works fine
AutoAttack works
AutoLoot works
Back to town when dead works
BuyPots works.

Enjoy it !!

Oh, btw:
Antivirus Version Last Update Result
AhnLab-V3 2008.1.5.11 2008.01.05 -
AntiVir 7.6.0.46 2008.01.06 -
Authentium 4.93.8 2008.01.06 -
Avast 4.7.1098.0 2008.01.06 -
AVG 7.5.0.516 2008.01.07 -
BitDefender 7.2 2008.01.07 -
CAT-QuickHeal 9.00 2008.01.05 -
ClamAV 0.91.2 2008.01.07 -
DrWeb 4.44.0.09170 2008.01.06 -
eSafe 7.0.15.0 2008.01.06 -
eTrust-Vet 31.3.5432 2008.01.04 -
Ewido 4.0 2008.01.06 -
FileAdvisor 1 2008.01.07 -
Fortinet 3.14.0.0 2008.01.06 -
F-Prot 4.4.2.54 2008.01.06 -
F-Secure 6.70.13030.0 2008.01.06 -
Ikarus T3.1.1.15 2008.01.07 -
Kaspersky 7.0.0.125 2008.01.07 -
McAfee 5200 2008.01.04 -
Microsoft 1.3109 2008.01.07 -
NOD32v2 2768 2008.01.06 -
Norman 5.80.02 2008.01.04 -
Panda 9.0.0.4 2008.01.06 -
Prevx1 V2 2008.01.07 -
Rising 20.25.62.00 2008.01.06 -
Sophos 4.24.0 2008.01.07 -
Sunbelt 2.2.907.0 2008.01.05 -
Symantec 10 2008.01.07 -
TheHacker 6.2.9.182 2008.01.06 -
VBA32 3.12.2.5 2008.01.06 -
VirusBuster 4.3.26:9 2008.01.06 -
Webwasher-Gateway 6.6.2 2008.01.06 -
i downloaded the files .. and open them .. the crack does nothing .. nothing appears .. and i think it is a scam ... and the bot .. is from silkroad just renamed the file..

Can someone scan them and find out if are a danger for me cuz i opened them?

they can be keyloger ? or dont know .. and if is something bad in this .. haw can i remove from my pc ... thanks for helping in advice and sorry about bad english
01/12/2008 09:28 nuclearfusion#2
yeah it was infected with a virus, i did post the scan results in that post...
here is a free online virus scanner. [Only registered and activated users can see links. Click Here To Register...] scan your computer and make sure to delete/clean anything. If you can't clean it there should be instructions on how to remove the virus/worm/keylogger manually after it is identified.
01/12/2008 19:11 betatest#3
verry big thanks nuclearfusion ... that crack is keylogger .. i removed it manual

should i worry about my mail / account / ... my logins ?
01/12/2008 19:25 cgck77#4
change your password just incase
01/12/2008 20:25 maui1911#5
I tested all the files when they were put up on this forum aswell, and its a keylogger, dont download it.
01/13/2008 00:37 Sillyrabbit#6
its bad, i banned the user that posted it here to begin with. and I also deleted the links in the first post that was made here in this thread so that no one downloads the file.


thread closed