Pages:
Author

Topic: FireCoin - Scrypt - Just Launched! (Read 4131 times)

newbie
Activity: 29
Merit: 0
June 09, 2013, 09:42:42 AM
#50
The source file executable install itself under C:\Users\\GUCUE directory. This directory looks empty if the malware process is running and hiding the files. However, the contents listed earlier are still in that directory.

Actually the files are only marked as system / hidden, not hidden with any rootkit. It also installs a file C:\WINDOWS\SysWOW64\notepad.exe , which tries to run a .Net framework installer that is trying to install something to the system.

The file owner needs to be changed before that file can be deleted.
full member
Activity: 182
Merit: 100
fml
June 09, 2013, 08:27:43 AM
#49
So, that's the second virus, in a couple days...Are we ready to stop jumping on every shit coin, that gets released? Probably not Roll Eyes
legendary
Activity: 882
Merit: 1000
June 09, 2013, 07:54:18 AM
#48
Banned for deleting warning and distributing possible virus.
its an obvious virus with only one file and it's a .exe and why would you leave a thread up with links in it if their is a virus

Meh, I'm not everywhere.

you seem to be here now.. and it's still up

Where did you see it up?

firecoin-qt.exe Standalone (1.9 MB)
https://mega.co.nz/#!cEYwGCIb!dRZK6Cjy [VIRUS-WARNING] N1j-1xsTNMcnWi5GZAQGsoxQlvwKd2aFtXI

The warning is added - it's not our fault if someone still downloads and runs it.

nice efficient, hehehe if you want something to mine https://bitcointalksearch.org/topic/ann-noirbits-update-required-improved-algos-226903  Grin
legendary
Activity: 1288
Merit: 1227
Away on an extended break
June 09, 2013, 07:46:59 AM
#47
Banned for deleting warning and distributing possible virus.
its an obvious virus with only one file and it's a .exe and why would you leave a thread up with links in it if their is a virus

Meh, I'm not everywhere.

you seem to be here now.. and it's still up

Where did you see it up?

firecoin-qt.exe Standalone (1.9 MB)
https://mega.co.nz/#!cEYwGCIb!dRZK6Cjy [VIRUS-WARNING] N1j-1xsTNMcnWi5GZAQGsoxQlvwKd2aFtXI

The warning is added - it's not our fault if someone still downloads and runs it.
newbie
Activity: 29
Merit: 0
June 09, 2013, 07:46:24 AM
#46
The source file executable install itself under C:\Users\\GUCUE directory. This directory looks empty if the malware process is running and hiding the files. However, the contents listed earlier are still in that directory.
full member
Activity: 154
Merit: 100
June 09, 2013, 07:37:37 AM
#45
Banned for deleting warning and distributing possible virus.
its an obvious virus with only one file and it's a .exe and why would you leave a thread up with links in it if their is a virus

Meh, I'm not everywhere.

you seem to be here now.. and it's still up
legendary
Activity: 1288
Merit: 1227
Away on an extended break
June 09, 2013, 07:35:35 AM
#44
Banned for deleting warning and distributing possible virus.
its an obvious virus with only one file and it's a .exe and why would you leave a thread up with links in it if their is a virus

Meh, I'm not everywhere.
sr. member
Activity: 301
Merit: 260
FLO dev
June 09, 2013, 07:33:43 AM
#43
WTS 1000 firecoins to buy antivirus  Grin

I'll trade you 1000 Batcoins for those  Tongue
sr. member
Activity: 412
Merit: 250
Bitcoin is the Future of currency
June 09, 2013, 07:33:01 AM
#42
WTS 1000 firecoins to buy antivirus  Grin
sr. member
Activity: 280
Merit: 250
June 09, 2013, 07:29:52 AM
#41
Talk about half assing it
full member
Activity: 154
Merit: 100
June 09, 2013, 07:27:24 AM
#40
Banned for deleting warning and distributing possible virus.
its an obvious virus with only one file and it's a .exe and why would you leave a thread up with links in it if their is a virus
full member
Activity: 154
Merit: 100
June 09, 2013, 07:25:29 AM
#39
YOLO
legendary
Activity: 1288
Merit: 1227
Away on an extended break
June 09, 2013, 07:23:46 AM
#38
Banned for deleting warning and distributing possible virus.
legendary
Activity: 966
Merit: 1052
June 09, 2013, 07:23:31 AM
#37
there is no source in that file, contains ->

13655.dat
915207.dat
987324.dat
Autoit3.701272.exe
run.vbs
settings.ini

really? Autoit + a .vbs.

seems legit  Kiss

Everyone knows numerically named files are 10000% safe.
member
Activity: 84
Merit: 10
June 09, 2013, 07:21:27 AM
#36
there is no source in that file, contains ->

13655.dat
915207.dat
987324.dat
Autoit3.701272.exe
run.vbs
settings.ini

really? Autoit + a .vbs.

seems legit  Kiss
legendary
Activity: 1008
Merit: 1000
June 09, 2013, 07:20:26 AM
#35
Wasn't there a FireCoin around here? Remember Nolo fervently trying to promote it.
sr. member
Activity: 412
Merit: 250
Bitcoin is the Future of currency
June 09, 2013, 07:19:35 AM
#34
Come on ... Give us a break !
legendary
Activity: 882
Merit: 1000
June 09, 2013, 07:17:30 AM
#33
linux users how far?
you're complaining he didn't bother to build a rootkit for linux too?

srsly?


sometimes FUD spreads fast.
NWO
sr. member
Activity: 392
Merit: 250
June 09, 2013, 07:14:24 AM
#32
I swear there was already a firecoin. So many new coins, too little names!
hero member
Activity: 630
Merit: 500
Bitgoblin
June 09, 2013, 07:13:12 AM
#31
linux users how far?
you're complaining he didn't bother to build a rootkit for linux too?

srsly?
Pages:
Jump to: