Bitcoin Forum

Economy => Reputation => Topic started by: zazarb on December 20, 2015, 09:19:42 AM



Title: Beware trojan
Post by: zazarb on December 20, 2015, 09:19:42 AM
Self-moderated Topic:
https://bitcointalk.org/index.php?topic=1259902.0
I downloaded candlecoin wallet via link provided in OP, my antivirus software found virus.
C:\Users\******\Downloads\Candle-qt.rar » RAR » Candle-qt.exe » DEEPSEA » deobfuscated.exe - a variant of MSIL/Injector.NGC trojan


I PM's OP , but no reaction, then post in topic, today got message that my post deleted:

Quote
Deleted Post
« Sent to: zazarb on: Today at 08:08:29 AM »
   Reply with quoteReply with quote Remove this messageDelete
A reply of yours, quoted below, was deleted by the starter of a self-moderated topic. There are no rules of self-moderation, so this deletion cannot be appealed. Do not continue posting in this topic if the topic-starter has requested that you leave.

You can create a new topic if you are unsatisfied with this one. If the topic-starter is scamming, post about it in Scam Accusations.

Quote
hello
since you did not reply me via PM, I ask you here:
18 december I download candlecoin wallet from link in your OP and try install in my pc , my antivirus found trojan

C:\Users\******\Downloads\Candle-qt.rar » RAR » Candle-qt.exe » DEEPSEA » deobfuscated.exe - a variant of MSIL/Injector.NGC trojan

today I try download again and now file clear

you are aware of this fact?

Admin Dave4You behavior very shady, amateurish.

edit: got reply:
Quote
Ok,ok you use infected wallet and other 250+ people use clean wallet??
and that's it?

,


Title: Re: Beware trojan
Post by: mexxer-2 on December 20, 2015, 10:31:18 AM
Please show a virustotal link along with the file link,preferably mediafire,and the link from which you downloaded the file to prove your claims


Title: Re: Beware trojan
Post by: InvoKing on December 20, 2015, 10:39:44 AM
Hey zarzarb, which anti-virus do you use? The candlecoin admin posted a virus total link to his ''Candle-qt.exe'' here https://www.virustotal.com/en/file/543e3874be615567bb08b509685b4d527175de09501c6d6de329b34e9c4daeb4/analysis/1448484116/ (https://www.virustotal.com/en/file/543e3874be615567bb08b509685b4d527175de09501c6d6de329b34e9c4daeb4/analysis/1448484116/)
Can you re-analyse the file with virustotal as mexxer said? If the results isn't the same then...


Title: Re: Beware trojan
Post by: zazarb on December 20, 2015, 10:58:14 AM
I do not seek something slander, I have plan to participate in candlecoin avatar campaign, so to get CD address downloaded wallet from link in OP, I did not think that possible found other place to download this wallet.

https://www.virustotal.com/en/file/8a257675c9b7584bd14cc5680ffbbb654938ad7ae554ccbb7e80b16417c66f91/analysis/1450608977/


Title: Re: Beware trojan
Post by: mexxer-2 on December 20, 2015, 01:54:11 PM
-snip-

Sorry if I caused any confusion due to my laziness for using a list . Now could you point to the file source you downloaded it from? And do you have any proof that it was indeed in the OP(of the ANN thread), archive link or something similar?


Title: Re: Beware trojan
Post by: zazarb on December 22, 2015, 01:52:10 PM
-snip-

Sorry if I caused any confusion due to my laziness for using a list . Now could you point to the file source you downloaded it from? And do you have any proof that it was indeed in the OP(of the ANN thread), archive link or something similar?
I not have proof, so this my submission at no in scam section. I don know how track, from where came files.


Title: Re: Beware trojan
Post by: MissCrypto on December 22, 2015, 04:11:58 PM
Many users reported the same in the thread and the posts got deleted.

The download link may have been switched from clean wallet to infected one and back.

Here is something https://bitcointalk.org/index.php?topic=1257893.0 (https://bitcointalk.org/index.php?topic=1257893.0)


Title: Re: Beware trojan
Post by: zazarb on January 13, 2016, 03:58:07 PM
hm...nevertheless I was right :(
https://bitcointalk.org/index.php?topic=1325261.0


Title: Re: Beware trojan
Post by: arbitrage on January 28, 2016, 03:20:34 PM
And what will happen to lucky user who accidentally install this wallet?
And what they must do in that situation? Wiping HD?
Any help of antivirus? :-\


Title: Re: Beware trojan
Post by: teddy5145 on January 29, 2016, 08:39:41 PM
And what will happen to lucky user who accidentally install this wallet?
And what they must do in that situation? Wiping HD?
Any help of antivirus? :-\
Antivirus should detect this virus and remove it
Considering that you have an updated antivirus and turned on the shield ;)
Are you asking this question because you downloaded the infected wallet ?
You should scan your PC if you do so :(