Bitcoin Forum

Economy => Gambling => Topic started by: Stunna on October 12, 2013, 04:49:44 AM



Title: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: Stunna on October 12, 2013, 04:49:44 AM
Re-Posting http://www.reddit.com/r/Bitcoin/comments/1o9tmi/ann_someone_has_cloned_my_bitcoin_website_and_put/   for increased awareness.

Hey Everyone,

I run www.primedice.com , unfortunately right now when you google primedice the first result is a google ad for a clone called [PLEASE DO NOT VISIT THIS SITE]: (Primedicebot.com) which prompts you to download the latest version of java which will thus infect your computer. They even appear slightly convincing as they have copy and pasted the source to our site.
I'd strongly appreciate it if everyone could report that malware/clone website (primedicebot.com) to http://www.google.com/safebrowsing/report_badware/

Thank you


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: Shallow on October 12, 2013, 04:52:17 AM
Wow. Well at least you know you've made it when people start trying to impersonate you :P


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: escrow.ms on October 12, 2013, 07:21:52 AM
Reported to google and godaddy.


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: cowandtea on October 12, 2013, 07:30:30 AM
Reported, hopefully google take down the website before someone lost their wallet.


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: Stunna on October 12, 2013, 07:36:16 AM
Reported to google and godaddy.

Reported, hopefully google take down the website before someone lost their wallet.

Really appreciate it, thanks


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: escrow.ms on October 12, 2013, 07:39:35 AM
I have checked that java file, some stupid guy from HF is probably doing this.

http://gyazo.com/53e803e4be4f2d73f3db5ef4da55b2d2.png

This Java driveby downloads exe file from here
http://gyazo.com/2d212bc3f5fdde8ba7c657c0dbba2990.png

Virus scan of jar : 0/48 (It's FUD)
https://www.virustotal.com/en/file/4be0944c1ba24240798c1de430c9592c0d56e6338c84c18a7c2084aecb227aa8/analysis/1381564324/

Virus scan of exe file: 2/48 (It's crypted)

https://www.virustotal.com/en/file/c2c20a1f614402b93fe79d11bffda53b35c07e37eebd44e1455cd80ad590aa00/analysis/1381564166/



Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: marcotheminer on October 12, 2013, 09:43:07 AM
Reported, hope this clears!


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: nenelsparadise on October 12, 2013, 09:55:41 AM
Reported !!!!


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: icey on October 12, 2013, 09:59:54 AM
Reported, hopefully it gets taken down soon


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: ninjaboon on October 13, 2013, 03:37:19 AM
reported to Google too


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: Stunna on October 13, 2013, 08:09:50 AM
Appreciate  the help, unfortunately it appears to still be up and their ads are still running. As long as their ads get cancelled users should be safe, waiting on google still.


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: ITsTanked on October 13, 2013, 05:18:41 PM
I think I find a time based sql injection place for the file host of the virus.  Is too unethical to try to remove virus from host?  Host not seem care what file kind it host.


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: niallog1 on October 13, 2013, 06:24:37 PM
Thanks for the heads up Stunna, reported it, hopefully it gets taken down soon.


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: b!z on October 14, 2013, 09:04:46 AM
I think I find a time based sql injection place for the file host of the virus.  Is too unethical to try to remove virus from host?  Host not seem care what file kind it host.

Depends on how legal that is in your jurisdiction.


Title: Re: ANN: Someone made a PD clone and put a virus on their clone. Please Report
Post by: escrow.ms on October 14, 2013, 09:15:18 AM
Appreciate  the help, unfortunately it appears to still be up and their ads are still running. As long as their ads get cancelled users should be safe, waiting on google still.

Looks like godaddy guys are lazy, filed a report again.