Bitcoin Forum
May 24, 2024, 03:48:14 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Mr.Dreamanonym - tradercoin cointains virus/keylogger  (Read 1514 times)
markj113 (OP)
Legendary
*
Offline Offline

Activity: 2254
Merit: 1043



View Profile
October 24, 2013, 10:00:55 AM
 #1

Carefull this newly released coin seems to contain a virus or keylogger -

https://bitcointalk.org/index.php?topic=316943.0

It creates the a fake crss file in the C:\Users\acer\AppData\Local\Temp\crss.exe

then creates the following registry directory too:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MXsound

The process is then found in msconfig under the name MXsound (crss.exe)"
Shallow
Sr. Member
****
Offline Offline

Activity: 938
Merit: 255


SmartFi - EARN, LEND & TRADE


View Profile
October 24, 2013, 10:09:57 AM
 #2

Thanks for the warning  Shocked be sure to flag the thread for the mods.

████
██
██
██
██
██
██
██
██
██
██
██
████
...The Open..............
...Lending Platform...
████
████
████
████
████
████
████
████
████
████
████
████
████
▄▄█████████▄▄
▄█████████████████▄
▄██████████▀▀▀▀███████▄
█████████▀        ███████
████████▀        ▄█████████
█████████       ▄▀▀██████████
█████████     ▄▀   ▀█████████
██████████  ▄▀      █████████
█████████▀▀       ▄████████
███████        ▄█████████
▀███████▄▄▄▄██████████▀
▀█████████████████▀
▀▀█████████▀▀
.SMARTFI..████
████
████
████
████
████
████
████
████
████
████
████
████
...Join the SmartFi.....
...Token Sale...
████
██
██
██
██
██
██
██
██
██
██
██
████
████████████████████████████
████████████████████████████
████████████████████████████
█████████████████▀▀  ███████
█████████████▀▀      ███████
█████████▀▀   ▄▄     ███████
█████▀▀    ▄█▀▀     ████████
█████████ █▀        ████████
█████████ █ ▄███▄   ████████
██████████████████▄▄████████
████████████████████████████
████████████████████████████
████████████████████████████
████████████████████████████
████████████████████████████
████████████████████████████
████████▀▀▄██████▄▀▀████████
███████  ▀        ▀  ███████
██████                ██████
█████▌   ███    ███   ▐█████
█████▌   ▀▀▀    ▀▀▀   ▐█████
██████                ██████
███████▄  ▀██████▀  ▄███████
████████████████████████████
████████████████████████████
████████████████████████████
n00ber
Sr. Member
****
Offline Offline

Activity: 560
Merit: 253



View Profile
October 24, 2013, 11:42:00 AM
 #3

Thank for your vigilance.
The software contains a trojan. https://www.virustotal.com/en/file/b0f5d774044b5dbe362ee592d15d48625caf1d28e694eda6aacd7b6caf36bb7d/analysis/1382614790/

cryptasm
Legendary
*
Offline Offline

Activity: 997
Merit: 1002


Gamdom.com


View Profile WWW
October 24, 2013, 02:38:03 PM
 #4

Can confirm, installed this shitty client and now got the keylogger.

It also creates a text file with all you keystrokes in:
C:\Users\acer\AppData\Local\Temp\afsdsjk

My antivirus also flagged up xlo.exe, though not 100% sure if it's related

Mr.Dreamanonym had posted a thread asking for devs help create coins, maybe admin could see who this motherf*cker had contact with.
SaltySpitoon
Legendary
*
Offline Offline

Activity: 2590
Merit: 2154


Welcome to the SaltySpitoon, how Tough are ya?


View Profile
October 24, 2013, 03:12:52 PM
 #5

I trashed the thread a bit earlier today after recieving the reports. Thanks guys, requesting a ban as well. Theres very few things you can't do on the forums, but malware is frowned upon.
Mr.Dreamanonym
Newbie
*
Offline Offline

Activity: 56
Merit: 0



View Profile
October 26, 2013, 09:11:11 PM
 #6

I'm sorry for that, i asked to someone to make me a coin, and the result, i loose 79 btc and 2800 ltc ...
I juste answer now cause i have change my hd ...

Sorry ...
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!