Just want to share my findings to warn every Cabal Players using "just another trainer".
Scan log using avast antivirus:
[Only registered and activated users can see links. Click Here To Register...]
As you can see, here are the files being installed into your computer. I scanned the executable file using avast and found out that there are 3 more embedded files in Jat.exe (possible file dropper)
Comparison between Perx injector and JAT considering that both are Code injectors.
Virus total scan result for perx injector:
[Only registered and activated users can see links. Click Here To Register...]
Well, the result clearly says that it is a malware (Backdoor/ Injector)
Virus total scan result for JAT:
[Only registered and activated users can see links. Click Here To Register...]
As you can see here, the result are far different from an injector. It is classified as (Trojan.Heur Family)
Description of this type of malware:
Back to Pic. 1, the 2 dll files
Isn't 4mb to big for a jat.dll file?
Let's change the file extension to .exe.
[Only registered and activated users can see links. Click Here To Register...]
Hmm, looks like a .net application? Why change the extension to .dll? :confused:
I disassembled the file using .net reflector and yeah, it looks like its the actual injector. Looks like there is a renaming of file extension that always happens in the background.
That's where my investigation ends as it is already 1am here in Philippines. To sleepy to go deeper.
I just want to give you warning guys. You decide. :D
Scan log using avast antivirus:
[Only registered and activated users can see links. Click Here To Register...]
As you can see, here are the files being installed into your computer. I scanned the executable file using avast and found out that there are 3 more embedded files in Jat.exe (possible file dropper)
Comparison between Perx injector and JAT considering that both are Code injectors.
Virus total scan result for perx injector:
[Only registered and activated users can see links. Click Here To Register...]
Well, the result clearly says that it is a malware (Backdoor/ Injector)
Virus total scan result for JAT:
[Only registered and activated users can see links. Click Here To Register...]
As you can see here, the result are far different from an injector. It is classified as (Trojan.Heur Family)
Description of this type of malware:
Source: [Only registered and activated users can see links. Click Here To Register...]Quote:
Gen.Trojan.Heur is an aggressive type of trojan virus that provides remote access and control of target PC to perform certain malicious actions and install more payloads. The Gen.Trojan.Heur could disable antivirus applications, track your personal financial data, and delete registry entries. The trojan horse could seriously compromise your security and cause your PC to crash. We advise you to scan your PC and eradicate Gen.Trojan.Heur once detected.
Back to Pic. 1, the 2 dll files
Isn't 4mb to big for a jat.dll file?
Let's change the file extension to .exe.
[Only registered and activated users can see links. Click Here To Register...]
Hmm, looks like a .net application? Why change the extension to .dll? :confused:
I disassembled the file using .net reflector and yeah, it looks like its the actual injector. Looks like there is a renaming of file extension that always happens in the background.
That's where my investigation ends as it is already 1am here in Philippines. To sleepy to go deeper.
I just want to give you warning guys. You decide. :D