Author

Topic: locked (Read 1919 times)

sr. member
Activity: 464
Merit: 252
January 22, 2014, 10:00:48 AM
#34
Backdoor:Win32/Zegost.L found!

Backdoor:Win32/Zegost.L is a trojan that allows unauthorized access and control of an affected computer.


scam scam scam
full member
Activity: 238
Merit: 100
January 22, 2014, 09:43:07 AM
#33
A question.
Do you need to backup wallet.dat after finding each block?

no you can backup right after starting the client, but be sure to encrypt both wallets,  if you backup your unprotected wallet then encrypt the original - the backup is still without password
legendary
Activity: 2702
Merit: 1030
Yes I am a pirate, 300 years too late!
January 22, 2014, 09:32:42 AM
#32
Way too many rejects for me.  Plus MS Forefront did detect and delete a trojan.    PASS on this one.
newbie
Activity: 12
Merit: 0
January 22, 2014, 09:30:22 AM
#31
A question.
Do you need to backup wallet.dat after finding each block?
full member
Activity: 238
Merit: 100
January 22, 2014, 09:28:44 AM
#30
everything is fine there is no virus  Cheesy , people stop bitching

yea keep feeling save.. but don't cry us a river if you realize you're wrong
full member
Activity: 210
Merit: 100
January 22, 2014, 09:17:38 AM
#29
everything is fine there is no virus  Cheesy , people stop bitching
full member
Activity: 238
Merit: 100
January 22, 2014, 09:08:39 AM
#28
For those who infected, you can use free Dr. Web scanner for cure!

http://download.geo.drweb.com/pub/drweb/cureit/cureit.exe

I have ran it, but it did not find any thing except my cgminer...

Your AV must been deleted this trojan.

Anyway do not forget encrypt with long password ALL your coins, even new.

Encryption doesn't help because trojans have a keylogger.
hero member
Activity: 616
Merit: 526
January 22, 2014, 08:53:57 AM
#27
Thanks people for the advice to skip this. I'll skip this coin.
sr. member
Activity: 420
Merit: 250
January 22, 2014, 08:47:29 AM
#26
For those who infected, you can use free Dr. Web scanner for cure!

http://download.geo.drweb.com/pub/drweb/cureit/cureit.exe

I have ran it, but it did not find any thing except my cgminer...

Your AV must been deleted this trojan.

Anyway do not forget encrypt with long password ALL your coins, even new.

I don't have any AV. thanks
hero member
Activity: 574
Merit: 500
January 22, 2014, 08:45:45 AM
#25
For those who infected, you can use free Dr. Web scanner for cure!

http://download.geo.drweb.com/pub/drweb/cureit/cureit.exe

I have ran it, but it did not find any thing except my cgminer...

Your AV must been deleted this trojan.

Anyway do not forget encrypt with long password ALL your coins, even new.
sr. member
Activity: 420
Merit: 250
January 22, 2014, 08:42:15 AM
#24
For those who infected, you can use free Dr. Web scanner for cure!

http://download.geo.drweb.com/pub/drweb/cureit/cureit.exe

I have ran it, but it did not find any thing except my cgminer...
full member
Activity: 126
Merit: 100
January 22, 2014, 08:41:38 AM
#23
bastard!
full member
Activity: 238
Merit: 100
January 22, 2014, 08:36:58 AM
#22
Is it advisable to go ahead with mining this coin? I haven't installed the coin yet and would like to know whether to proceed or not.

no, better not.. you can lose all your coins like btc and all other altcoins the guy will grab everything
hero member
Activity: 616
Merit: 526
January 22, 2014, 08:35:45 AM
#21
Is it advisable to go ahead with mining this coin? I haven't installed the coin yet and would like to know whether to proceed or not.
full member
Activity: 238
Merit: 100
January 22, 2014, 08:28:06 AM
#20
oh man and i was happy that the mining runned so well.. found 85 blocks with my 500 kh/s  Cry
member
Activity: 99
Merit: 10
January 22, 2014, 08:24:47 AM
#19
The email address on the site bounces back immediately as deliverable... pretty f'ing shady...
hero member
Activity: 574
Merit: 500
January 22, 2014, 08:24:08 AM
#18
For those who infected, you can use free Dr. Web scanner for cure!

http://download.geo.drweb.com/pub/drweb/cureit/cureit.exe
member
Activity: 238
Merit: 10
January 22, 2014, 08:23:09 AM
#17
It is true. It adds an exe called ekc.exe in your startup folder check it in your running processes.
that ekc. exe is:
https://www.virustotal.com/en/file/7fafb9212d86a6564903b2f2456e3318d383077bf689d036d416d4091ab622d7/analysis/1390391865/


Strangely enough, I do not have this file

You are a SCAMER ....

Don´t trust in this guy

Real Virus inside







I do not have it as well

Understood. Kaspersky deleted it turns out.

Quote
You are a SCAMER ....

Don´t trust in this guy

Responsible for your words?

Зa тaкиe cлoвa oтвeчaть нyжнo.
sr. member
Activity: 420
Merit: 250
January 22, 2014, 08:21:48 AM
#16
the startup file is droped in  C:\Windows\pss   "ekc.exe"
can't find it.  what is the full path, please?
hero member
Activity: 574
Merit: 500
January 22, 2014, 08:21:09 AM
#15
Tested in VirtualBox with Shadow Defender, ESET detected ekc.exe as Win32/Farfli.APB
full member
Activity: 238
Merit: 100
January 22, 2014, 08:14:47 AM
#14
the startup file is droped in  C:\Windows\pss   "ekc.exe"
sr. member
Activity: 420
Merit: 250
January 22, 2014, 08:13:49 AM
#13
It is true. It adds an exe called ekc.exe in your startup folder check it in your running processes.
that ekc. exe is:
https://www.virustotal.com/en/file/7fafb9212d86a6564903b2f2456e3318d383077bf689d036d416d4091ab622d7/analysis/1390391865/


Strangely enough, I do not have this file

You are a SCAMER ....

Don´t trust in this guy

Real Virus inside





I do not have it as well
full member
Activity: 238
Merit: 100
January 22, 2014, 08:13:00 AM
#12
It is true. It adds an exe called ekc.exe in your startup folder check it in your running processes.
that ekc. exe is:
https://www.virustotal.com/en/file/7fafb9212d86a6564903b2f2456e3318d383077bf689d036d416d4091ab622d7/analysis/1390391865/


Strangely enough, I do not have this file

mhh i have it in taskmngr and its not the client, its also added in  msconfig startup.. fking shit
hero member
Activity: 686
Merit: 500
January 22, 2014, 08:12:57 AM
#11
It is true. It adds an exe called ekc.exe in your startup folder check it in your running processes.
that ekc. exe is:
https://www.virustotal.com/en/file/7fafb9212d86a6564903b2f2456e3318d383077bf689d036d416d4091ab622d7/analysis/1390391865/


Strangely enough, I do not have this file
It makes your startup folder hidden and creates another startup folder. Browse it in total commander with enabled hidden files
member
Activity: 238
Merit: 10
January 22, 2014, 08:10:18 AM
#10
It is true. It adds an exe called ekc.exe in your startup folder check it in your running processes.
that ekc. exe is:
https://www.virustotal.com/en/file/7fafb9212d86a6564903b2f2456e3318d383077bf689d036d416d4091ab622d7/analysis/1390391865/


Strangely enough, I do not have this file
full member
Activity: 154
Merit: 100
January 22, 2014, 08:10:15 AM
#9
Yep, Kaspersky deleted it as soon as i tried to install it Wink

DO NOT DOWNLOAD!
hero member
Activity: 686
Merit: 500
January 22, 2014, 08:05:14 AM
#8
It is true. It adds an exe called ekc.exe in your startup folder check it in your running processes.
that ekc. exe is:
https://www.virustotal.com/en/file/7fafb9212d86a6564903b2f2456e3318d383077bf689d036d416d4091ab622d7/analysis/1390391865/
full member
Activity: 238
Merit: 100
January 22, 2014, 08:03:28 AM
#7
Wallet with a Trojan virus!

false alarm

all rejected , i am out , another shitty coin

false comment, everything works smooth
sr. member
Activity: 420
Merit: 250
January 22, 2014, 08:03:25 AM
#6
sr. member
Activity: 434
Merit: 251
January 22, 2014, 08:00:02 AM
#5
Wallet with a Trojan virus!

True .... be carefull
member
Activity: 62
Merit: 10
January 22, 2014, 07:49:14 AM
#4
Wallet with a Trojan virus!
full member
Activity: 210
Merit: 100
January 22, 2014, 07:44:00 AM
#3
all fine  Grin
full member
Activity: 126
Merit: 100
January 22, 2014, 07:38:17 AM
#2
pools?
newbie
Activity: 3
Merit: 0
January 22, 2014, 07:21:40 AM
#1
locked
Jump to: