|
You last visited: Today at 23:41
Advertisement
Keyloggers Are Spread on EPVP *WARNING*
Discussion on Keyloggers Are Spread on EPVP *WARNING* within the SRO Private Server forum part of the Silkroad Online category.
01/15/2010, 11:24
|
#1
|
elite*gold: 0
Join Date: Nov 2009
Posts: 321
Received Thanks: 129
|
Keyloggers Are Spread on EPVP *WARNING*
okay so today i manually checked some of my files that i got off from here i checked it with manual unpacking (ollydbg) i did some reverse on them and they seemed like infected
so i download some anti viruses and rechecked if i am really right because i couldnt belive in my eyes
my results were this
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 4
Registry Keys Infected:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\R oot\LEGACY_RPCHGM (Trojan.Keylogger) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\RPCHGM (Trojan.Keylogger) -> Quarantined and deleted successfully.
Files Infected:
C:\Documents and Settings\Owner\Desktop\loader.exe (BackDoor.Bifrost) -> Quarantined and deleted successfully.
C:\Misc\SRO Keypresser.exe (BackDoor.Bifrost) -> Quarantined and deleted successfully.
C:\Misc\SWSRO\asd.exe (BackDoor.Bifrost) -> Quarantined and deleted successfully.
C:\Misc\SWSRO\SWSRO Potion\bot.exe (BackDoor.Bifrost) -> Quarantined and deleted successfully.
we must know that "C:\Documents and Settings\Owner\Desktop\loader.exe" is lolkops older loader which seems like it is really infected with a rat keylogger named bifrost
C:\Misc\SRO Keypresser.exe this is also lolkops work its his old "bot" so i got really angry because seems like he really infected some of his old work
C:\Misc\SWSRO\asd.exe this is an old autopotion i dont know who made it but its a packetbased one that i got from there long time ago for swsro old patch (it needed nuconnector and some other ****)
C:\Misc\SWSRO\SWSRO Potion\bot.exe this is TeamImperials bot which is also infected
really guys take care of what you download
its really sad that peoples i trusted have infected some of their files but oh well
i succesfully removed the keyloggers from my pc and changed all my passwords
i would recommend you do a huge clean up with this software named "Malwarebytes' Anti-Malware 1.44" if you used any of these programs like me
|
|
|
01/15/2010, 11:30
|
#2
|
elite*gold: 0
Join Date: Apr 2009
Posts: 642
Received Thanks: 377
|
If any of these are made in Autoit then ofc it will come up as a virus, just be aware of that, as near-none of Autoit programs are viruses which have been posted so far, but always scan/decompile anything you download (if you can decompile it) for safety
|
|
|
01/15/2010, 11:32
|
#3
|
elite*gold: 0
Join Date: Nov 2009
Posts: 321
Received Thanks: 129
|
Quote:
Originally Posted by Epic_Rage
If any of these are made in Autoit then ofc it will come up as a virus, just be aware of that, as near-none of Autoit programs are viruses which have been posted so far, but always scan/decompile anything you download (if you can decompile it) for safety
|
i know what are false positives but i checked these myself with ollydbg
and they were infected
and also 3 anti viruses (kaspersky, avira, malware bytes anti malware) has proven that these files have been infected with a very well known keylogger named bifrost
(also some that i compiled myself from public sources made totally different results)
|
|
|
01/15/2010, 11:32
|
#4
|
elite*gold: 20
Join Date: Oct 2007
Posts: 3,085
Received Thanks: 1,109
|
in lolkops original tools (bot,loader,autopotion) is not infected in keyloggers 200%.
only who download tools from the game chat links it's 100% virus.
|
|
|
01/15/2010, 11:34
|
#5
|
elite*gold: 0
Join Date: Nov 2009
Posts: 321
Received Thanks: 129
|
Quote:
Originally Posted by _FoulSoul_
in lolkops original tools (bot,loader,autopotion) is not infected in keyloggers 200%.
only who download tools from the game chat links it's 100% virus.
|
i downloaded them from here like 4months ago
also u must know those tools were working for me but they had hidden malwares
also the new ones are not infected for me either
|
|
|
01/15/2010, 11:48
|
#6
|
elite*gold: 20
Join Date: Oct 2007
Posts: 3,085
Received Thanks: 1,109
|
any tool for silkroad has bad positives, but they are not effective( i talking about lolkop tools)
|
|
|
01/15/2010, 12:09
|
#7
|
elite*gold: 19
Join Date: Aug 2007
Posts: 2,731
Received Thanks: 1,801
|
"Hidden viruses is lurking behind the corners, Watch out!"
|
|
|
01/15/2010, 12:55
|
#8
|
elite*gold: 5
Join Date: Jun 2007
Posts: 3,702
Received Thanks: 1,546
|
Do that and you`ll be ok.
#closed
|
|
|
 |
Similar Threads
|
keyloggers
02/19/2010 - S4 League - 11 Replies
their has been many hacks for s4 league that had key-loggers in them that started off from one person who wanted to be a pain in the butt. here in this topic ill put a website that will give u a program called "search and destroy" download it from any of the links and run it. if u find any key loggers or some sort of virus and well delete it.
hat schon viele ihrer Hacks für S4 League hatte, dass Key-Logger in ihnen, die aus gestartet von einer Person, die ein Schmerz in den Hintern wollte....
|
KEYLOGGERS
04/26/2009 - Soldier Front - 2 Replies
GUYS WAG KAYO MAG DL NG MGA FILES NA HINDI NYO SIGURADO...
MERON ISANG FILES DITO NA AKALA NYO AY BAGONG WALLHACK....
HINDI NYO ALAM ITO AY ISANG KEYLOGGER...
AT WAG KAYO MAG BIBIGAY NG ANUMANG DATA ABOUT YOUR ACCOUNT ESPECIALLY SA INYONG COMPUTER
AHEHEHE....
|
about keyloggers
12/09/2008 - Kal Online - 7 Replies
ich möchte keine keylogger benutzen!! und wenn ich das motto dieses forums richtig verstanden habe, dann ist alles, was andere spieler schädigt hier auch nicht erwünscht. was ich sehr gut finde! cheating, bugging ... ok aber alles in richtung scamm find ich ein wenig stil-los lol
aber trotzdem mal ne frage zu keyloggern: war seit sehr langer zeit mal wieder auf int. und hab dort dieses "neue" secondary password gesehen. es ist nur über maus einzugeben und ich fand es derbe nervig am...
|
Keyloggers
05/28/2007 - World of Warcraft - 6 Replies
Guide is indended for the WoW forums, but the programs/info is good none the less.
------------------------------------------------- ------------------------
There appears to be alot of keyloggers going around our forums these days.
So here's some tips on IDing a keylogger!
* Any URL that you cannot readily identify the address from a well known source, such as youtube, imageshack, photobucket, break, etc should be considered highly suspicious.
|
All times are GMT +1. The time now is 23:42.
|
|