Jump to content

Recommended Posts

Posted

I know, I found it as well.

It stores all the logs in AppData/Imminent/Logs

You run supposedly lameguard and it appears up as Google Chrome.exe (that's random). The thing is you need to kick out winlogor.exe.

I wanted to format my computer anyway, so that's why I did it. But yeah, in case someone is not capable of finding these stuff a format would be ideal to be 100% secure.

Yes you're right..

According to all that writing, i agree. And I'm sure will help many people... or at least those who bother to give a read.

I am glad that there are people who writing important things in the forum. Is needed, once has "fallen" somewhat..

Posted

friendly advice, for those that make big transactions at least since w os is unreliable in all ways.

http://s16.postimg.org/eydshecs5/CWqi_IRd.png

That's a good option too but personally I wouldn't spend even a single minute on downloading something that I know 99.9% it won't be ever shared as cracked or free or by some member who wake up after so many years and the first thing he did is to share some files.

Posted

Hello,

 

Just found something suspicious:

http://www.maxcheaters.com/topic/190276-lameguard-301-interludekamaelgraciafreyagod/

Topic is already closed, however the link to download the file is still there.

 

I just scan it with VirusTotal and found 6/57

SET-NOD32	a variant of MSIL/Injector.IOA	20150316
Jiangmin	Trojan/Generic.ajwzf	20150316
Kaspersky	HEUR:Trojan.Win32.Generic	20150316
Qihoo-360	HEUR/QVM11.1.Malware.Gen	20150316
Symantec	WS.Reputation.1	20150316
TrendMicro-HouseCall	Suspici.8D175B40	20150316 
Posted

Hello,

 

Just found something suspicious:

http://www.maxcheaters.com/topic/190276-lameguard-301-interludekamaelgraciafreyagod/

Topic is already closed, however the link to download the file is still there.

 

I just scan it with VirusTotal and found 6/57

SET-NOD32	a variant of MSIL/Injector.IOA	20150316
Jiangmin	Trojan/Generic.ajwzf	20150316
Kaspersky	HEUR:Trojan.Win32.Generic	20150316
Qihoo-360	HEUR/QVM11.1.Malware.Gen	20150316
Symantec	WS.Reputation.1	20150316
TrendMicro-HouseCall	Suspici.8D175B40	20150316 

 

This is him. In case you downloaded an ran this shit, follow my instructions in the first post.

 

@Stacy Doll

 

Please unlock the topic and let people know that it contains keyloggers and a link to my thread here. (Until someone deletes the download link).

Posted (edited)

I locked the topic, Sweets or MeVsYou will delete the download link.

I think is better if you go there and write the info of Gries.

The lock is nothing if the download link is still there!

Give a reason when you lock a topic.. it is important that people know why.

Especially when it is for an such reason..

SET-NOD32    a variant of MSIL/Injector.IOA    20150316
Jiangmin    Trojan/Generic.ajwzf    20150316
Kaspersky    HEUR:Trojan.Win32.Generic    20150316
Qihoo-360    HEUR/QVM11.1.Malware.Gen    20150316
Symantec    WS.Reputation.1    20150316
TrendMicro-HouseCall    Suspici.8D175B40    20150316
Edited by 'Baggos'
Posted

 

I think is better if you go there and write the info of Gries.

The lock is nothing if the download link is still there!

Give a reason when you lock a topic.. it is important that people know why.

Especially when it is for an such reason..

SET-NOD32    a variant of MSIL/Injector.IOA    20150316
Jiangmin    Trojan/Generic.ajwzf    20150316
Kaspersky    HEUR:Trojan.Win32.Generic    20150316
Qihoo-360    HEUR/QVM11.1.Malware.Gen    20150316
Symantec    WS.Reputation.1    20150316
TrendMicro-HouseCall    Suspici.8D175B40    20150316

It's okay.

 

I sent to all the topic viewers a PM regarding that. Hope they read it before it's too late.

Posted

in Task Manager i got only "winlogON.exe" You said its fine, but I got this directory C:\Users\Nikolay\AppData\Roaming\Identities. This folder is empty but i think its bcs my antivirus deleted files. How can I check if im protected?

Posted (edited)

in Task Manager i got only "winlogON.exe" You said its fine, but I got this directory C:\Users\Nikolay\AppData\Roaming\Identities. This folder is empty but i think its bcs my antivirus deleted files. How can I check if im protected?

WinlogoN is there from the first day you use the pc...

Also, you can use a Anti-spyware.

I use AVG Pro Internet Security... I had find Trojan and this class of viruses. Is good for me...

But again, there are things that are not detected..

Edited by 'Baggos'
Posted

http://www.maxcheaters.com/topic/188834-share-cracked-adrenaline-bot-guide/?p=2463879

 

24/56

ALYac	 Trojan.Generic.12187232	 20150322
AVG	 Dropper.Generic9.AAPJ	 20150322
AVware	 VirTool.Win32.Obfuscator.XZ (v)	 20150320
Ad-Aware	 Trojan.Generic.12187232	 20150322
Antiy-AVL	 Trojan/Win32.SGeneric	 20150322
Avira	 TR/Rogue.1900544.40	 20150322
BitDefender	 Trojan.Generic.12187232	 20150322
Bkav	 HW32.Packed.A0A8	 20150321
Comodo	 Virus.Win32.Virut.CE	 20150322
Cyren	 W32/Trojan.HETQ-7345	 20150322
Emsisoft	 Trojan.Generic.12187232 (B)	 20150322
F-Secure	 Trojan.Generic.12187232	 20150322
GData	 Trojan.Generic.12187232	 20150322
Ikarus	 Trojan.SuspectCRC	 20150322
K7AntiVirus	 Trojan ( 7000000f1 )	 20150322
K7GW	 Trojan ( 7000000f1 )	 20150322
McAfee	 Artemis!F00D847C2726	 20150322
MicroWorld-eScan	 Trojan.Generic.12187232	 20150322
Norman	 Troj_Generic.ZGKPV	 20150322
Symantec	 Trojan.Gen.2	 20150322
TrendMicro	 Mal_Opet-3	 20150322
TrendMicro-HouseCall	 Suspici.B3BC0FA9	 20150322
VIPRE	 VirTool.Win32.Obfuscator.XZ (v)	 20150322
nProtect	 Trojan.Generic.12187232	 20150320

https://www.virustotal.com/it/file/675b2ee4796cfaa8f114d5cfdaf933f0f6abcc736a5140cd6696e7487269fb76/analysis/

Guest
This topic is now closed to further replies.

×
×
  • Create New...