Does TwinR contain a keylogger??

[DoTheRobot]

Where do you get off telling people that TwinR has a keylogger in it?

AVG (and 4 other virus engines) have simply told you that TwinR is packed using Themida software, it never has once told you it logs anything.

Not to mention that AVG is known to be ****** when it comes to detecting viruses. (But what can you ask for- it's free.)

Your account got compromised, but you said you've shared your password with somebody else, and who knows how secure your system is.

There are a lot of possibilities and coincidences, but you can't say for certain that it was TwinR.

You spreading around false information is just as annoying. Anybody should be cautious when using any piece of software from this site, in fact if you're really paranoid you can make an account for botting and supplement your normal account.

But this is a f2p game people. Relax and chill out. You get what you pay for.

Add my name on the list of people who have used the timerless trial of TwinR and had no problems at all.

[Izeliae]

*shrug* dont use it if you dont trust it, i dont give a ****.


dont worry about them robot, if they are too stupid to know what a packer is then let them think its a keylogger.
i could make a virus that fries their entire pc for life by simply erasing the bypass (omg flash the eeprom with null values~!! OMGZ THE KIDS ARE GOOGLING EEPROM WTF ISZ AN EEPROM!?~!) and it would be 100% undetectable to ANYTHING.

you know how easy it is to remove the themida packer tag if someone wants to actually keylog you?

oni is an imbecile he always has been
as for the OP - tough **** kid, you lost your **** (im sure it was .6b worth oh yeah your account was worth that much and you were HACKING ON IT!?) get over it your a dumbass.

[lastknight213]

Trend micro anti virus doesn't pick it up.

[Izeliae]

or the guys at twinr had him post that **** so that people would be scared to download the cracked trial

btw thx for spelling my name right, but i have no gang nor would i care about anything below forcium double slotted amp gear.

did anyone notice this?!

[Izeliae]

Originally Posted by UWKS

When i read this i got scared but i did alot of checkin up on it u can to check your runnin process and hijackthis n spy ware n adware i found nothin is only avg is pickin this up. i dont use avg someone told me about it also but i dont think it is a key logger its like normal key gen virus i think i am not sure. Also i did some checkin on the orginial Twinr site it self the paid version has no virus but the trial has the same sort of trojan.

The trail one from TwinR = trojan horse sheur.bkok
The Timerless Trail same trail just edited = trojan horse sheur.bkvy

The only difference when edited was the Twinr file it self. Therefore i dont think it can key log from that file if it had to key log it would be from rain as it is the actually game start takin in your user n pw.

I still wonder why Izeliae hasn't said anything to this thread still u all should not be so quick to blame the guy. I am no big techie but i'll contiune lookin on this as i have a few 100 mil my self.

thank you for logic
i told everyone in the thread all i did was remove the timer and i did nothing else with the file so the scan should result the same
reason i havent posted - i have a life:
i havent been home for the last 14 hours i've been practicing some new songs with my band then i met my gf and we watched sweeny todd (******* sucked) and AVP-R (not bad)

i'll post some scans here in a moment, uploads suck on cable internet.

[MiniVan2k]

Originally Posted by Izeliae

or the guys at twinr had him post that **** so that people would be scared to download the cracked trial

btw thx for spelling my name right, but i have no gang nor would i care about anything below forcium double slotted amp gear.

did anyone notice this?!

I'm LOLing xD

[Izeliae]

ClamAV 0.92.1 2008.05.19 PUA.Packed.Themida
Sophos 4.29.0 2008.05.19 Sus/ComPack

these 2 are only present with themida

Webwasher-Gateway 6.6.2 2008.05.19 Win32.Malware.gen (suspicious)

this one is only present in the FULL version, not the trial

if you remove themida then the trial is entirely clear, the full version only has the above malware.gen which is a false positive

check it out


you can download this

and pack a safe file of your own and then scan it just to see the difference.

[IceB0y]

U hack ppl, ppl hack u =)
It's nature.

[riddance]

Well I've only ever downloaded this bot, and I think that Izeliae is legit. Why would mods sticky it and why would he ruin his rep and friends he's made here by sticking a trojan in there? My trend micro doesn't pick up anything on my entire computer that looks wrong, so I think it's legit. If not, meh... Sucks for me? Lol.

[Oni Me no Kyo]

Originally Posted by Izeliae

ClamAV 0.92.1 2008.05.19 PUA.Packed.Themida
Sophos 4.29.0 2008.05.19 Sus/ComPack

these 2 are only present with themida

Webwasher-Gateway 6.6.2 2008.05.19 Win32.Malware.gen (suspicious)

this one is only present in the FULL version, not the trial

if you remove themida then the trial is entirely clear, the full version only has the above malware.gen which is a false positive

check it out


you can download this

and pack a safe file of your own and then scan it just to see the difference.

then why did youtube show many videos with themida for keylogging and spywares?

[riddance]

Originally Posted by Izeliae

if i wanted to keylog you, i'd put up a jpg avatar with a keylogger imbedded and nail you all without you even knowing it.

This is all you need. Izeliae is talking about nulls and eeprom. Pretty sure he could fry your harddrive by making a simple script that open all applications on your computer at once 10000000 times, and evertime you logged into your computer it was the first program that started. The OP got keylogged by someone else if he even got keylogged at all. So stupidly downloading bots without even knowing wtf to do will get you keylogged. Oni I don't think you even got keylogged, I think this bot didn't work for you so you think it's a zomg trojun.

The bot works, and works very well mind you. Nothing is wrong with the prog, GTFOOOO.

[cogpbot]

I'm still wondering why TwinR contains a trojan (Both timeless and original **** version) and CabalRider doesn't?

[DoTheRobot]

Originally Posted by Oni Me no Kyo

then why did youtube show many videos with themida for keylogging and spywares?

Yes, your youtube search shows 22 videos, (only one in english and most of them being bullshit 5 second long "videos") showing how a virus can avoid detection while using themida.

A youtube search for unicorns brings up 17,900 results. 17,880 more than themida, are you going to tell me that's sufficient evidence to show that they exist?

Do you know anything about themida? No you don't.

It's a library for programmers to protect their applications from reverse engineering and software cracking. Thousands of programs that do all sorts of things use it.

In this instance, whoever it is made a cabal bot called TwinR and hoped to make a profit off of it, he's selling it for $20 a month or whatever, so in order to protect his software he used themida.

Yes, a themida protected software could contain an evil virus that killed you in your sleep, but would a person who intends to make a profit off of it do something like this? No they wouldn't, not if they wanted to make money off of it. (And the TwinR forums have shown us that a bunch of people want to pay for it.) - They would lose all of their potential money.

So whoever it was went through the TwinR exe with a hex editor or something to that effect and modified it to the point of where it doesn't expire.

That's all that's happened - no other files have been modified.

Both people involved here could program something dastardly that would not only log your keys, it would fry them, you're on a cheating website.. you're downloading shit from rapidshare. Be careful.

But shop being so vengeful when it comes to blaming somebody for cracking your account. I know you want to blame somebody else, but everybody here who knows at least a little bit about how programming and computers work know that it's nobody's fault but your own.

Hundreds, maybe thousands of people have used TwinR and we're fine.

Originally Posted by cogpbot

I'm still wondering why TwinR contains a trojan (Both timeless and original crap version) and CabalRider doesn't?

No virus software anywhere says it's a trojan.

Man I don't even give a shit about TwinR, but some of you people are idiots.

[Oni Me no Kyo]

well then someone explain why SHeur.BKOK/themida duplicated itself 4 times on my pc after deleting it?

[ToHellD2]

Oni, just a quick question, but how many other bot programs have you installed and for which games? Also remember, that someone with half a brain that wanted to successfully install keyloggers usually throw in an install delay (ie...let the main program run 5 times to let you think everything is safe, then activate/install the logger).

Best bet is if you don't feel comfortable running it....don't. And I'm sure the people that can install a VM knows how to safely run the bot in the VM without compromising their main system.

And as for someone really wanting to get revenge, you better believe they can null flash your eeprom without you knowing. I've seen people fry 1200 baud modems back in the day (and that is WAY back).