Title: Mr.Dreamanonym - tradercoin cointains virus/keylogger Post by: markj113 on October 24, 2013, 10:00:55 AM Carefull this newly released coin seems to contain a virus or keylogger -
https://bitcointalk.org/index.php?topic=316943.0 It creates the a fake crss file in the C:\Users\acer\AppData\Local\Temp\crss.exe then creates the following registry directory too: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MXsound The process is then found in msconfig under the name MXsound (crss.exe)" Title: Re: Mr.Dreamanonym - tradercoin cointains virus/keylogger Post by: Shallow on October 24, 2013, 10:09:57 AM Thanks for the warning :o be sure to flag the thread for the mods.
Title: Re: Mr.Dreamanonym - tradercoin cointains virus/keylogger Post by: n00ber on October 24, 2013, 11:42:00 AM Thank for your vigilance.
The software contains a trojan. https://www.virustotal.com/en/file/b0f5d774044b5dbe362ee592d15d48625caf1d28e694eda6aacd7b6caf36bb7d/analysis/1382614790/ Title: Re: Mr.Dreamanonym - tradercoin cointains virus/keylogger Post by: cryptasm on October 24, 2013, 02:38:03 PM Can confirm, installed this shitty client and now got the keylogger.
It also creates a text file with all you keystrokes in: C:\Users\acer\AppData\Local\Temp\afsdsjk My antivirus also flagged up xlo.exe, though not 100% sure if it's related Mr.Dreamanonym had posted a thread asking for devs help create coins, maybe admin could see who this motherf*cker had contact with. Title: Re: Mr.Dreamanonym - tradercoin cointains virus/keylogger Post by: SaltySpitoon on October 24, 2013, 03:12:52 PM I trashed the thread a bit earlier today after recieving the reports. Thanks guys, requesting a ban as well. Theres very few things you can't do on the forums, but malware is frowned upon.
Title: Re: Mr.Dreamanonym - tradercoin cointains virus/keylogger Post by: Mr.Dreamanonym on October 26, 2013, 09:11:11 PM I'm sorry for that, i asked to someone to make me a coin, and the result, i loose 79 btc and 2800 ltc ...
I juste answer now cause i have change my hd ... Sorry ... |