Virus in wallet, new coin ann

[busminer]

virus in wallet here in ann https://bitcointalk.org/index.php?topic=5055752.new#new
https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/

[1715657811]

1715657811

[1715657811]

1715657811

[1715657811]

1715657811

[LoyceV]

User HardZix has opened 5 ANN threads in total. I can't check/confirm the virus warning, but I can see he instantly removed the warning from his self-moderated topic.

I'm willing to tag him, but would like to see conclusive evidence first. Is there a site where I can upload a Windows file for virus scanning?

Update: He has deleted many posts:

Code:

busminer
121232
47185420
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185420#msg47185420">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<span style="color: red;"><span style="font-family: Verdana;"><span style="font-size: 10pt !important; line-height: 1.3em;">VIRUS IN WALLET, DONT DOWNLOAD IT !</span></span></span><br /><a class="ul" href="https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/">https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/</a>


asiapool.trade
2223023
47185422
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185422#msg47185422">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

&nbsp;<img src="https://bitcointalk.org/Smileys/default/smiley.gif" alt="Smiley" border="0" />


busminer
121232
47185477
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185477#msg47185477">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<span style="font-family: Verdana;"><span style="color: red;"><span style="font-size: 10pt !important; line-height: 1.3em;"><span style="font-size: 10pt !important; line-height: 1.3em;">VIRUS IN WALLET, DONT DOWNLAD IT !<br /></span></span></span></span>


busminer
121232
47185481
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185481#msg47185481">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<a class="ul" href="https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/">https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/</a>


olkah
881806
47185529
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185529#msg47185529">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<a class="ul" href="https://www.virustotal.com/ru/file/9d809f1d55c16ec9b8f410a358c351577ecb85b768b8237ce975f8468fe0652a/analysis/1540295929/">https://www.virustotal.com/ru/file/9d809f1d55c16ec9b8f410a358c351577ecb85b768b8237ce975f8468fe0652a/analysis/1540295929/</a>


busminer
121232
47185569
<a href="https://bitcointalk.org/index.php#3">Economy</a> / <a href="https://bitcointalk.org/index.php?board=83.0">Scam Accusations</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055759.msg47185569#msg47185569">Virus in wallet, new coin ann</a></b>

virus in wallet here in ann <a class="ul" href="https://bitcointalk.org/index.php?topic=5055752.new#new">https://bitcointalk.org/index.php?topic=5055752.new#new</a><br /><a class="ul" href="https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/">https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/</a>


olkah
881806
47185612
<a href="https://bitcointalk.org/index.php#6">Alternate cryptocurrencies</a> / <a href="https://bitcointalk.org/index.php?board=159.0">Announcements (Altcoins)</a> / <b><a href="https://bitcointalk.org/index.php?topic=5055752.msg47185612#msg47185612">Re: [Pre-ANN][VKT]VEKTOR[POW/POS] NO ICO or Premine</a></b>

<b><span style="font-size: 30pt !important; line-height: 1.3em;"><span style="color: black;">VIRUS 100%<br /><a class="ul" href="http://prntscr.com/l9f51e">http://prntscr.com/l9f51e</a></span></span></b>

Update: I've posted this in his thread.

[coinlocket$]

User HardZix has opened 5 ANN threads in total. I can't check/confirm the virus warning, but I can see he instantly removed the warning from his self-moderated topic.

I'm willing to tag him, but would like to see conclusive evidence first.

On every thread we have links for "download" wallets. (most likely malware IMHO)
A newbie asking to install 5 differents wallets with no explanations and links about the project is a big red flag to me.

Edit also, untrusted feedback

[LoyceV]

On every thread we have links for "download" wallets. (most likely malware IMHO)
A newbie asking to install 5 differents wallets with no explanations and links about the project is a big red flag to me.

Agreed. But I don't leave red trust based on red flags, I leave it on smoking guns

Edit also, untrusted feedback

I saw that, but from a user with no posts.

I've downloaded this file and sent it to https://www.virustotal.com for testing. It shows this:


Virus explanation:

Once infected, it will change your computer setting by changing the registry entries and startup items. When you start your computer, it will run itself automatically at the background. By taking up a lot of system resources, your computer performance will be very slow. It will add its malicious file on your computer. You will find there are a lot of unwanted shortcuts and icons on the desktop.

HardZix answers this:

All claims will be resolved soon, thanks

That's not enough, so I'll tag him.

Further quotes for my Reference link:

]VIRUS IN WALLET DONT DOWNLOAD IT !
https://threats.kaspersky.com/ru/threat/Backdoor.Win32.Androm/

https://www.virustotal.com/en/file/b7fe6e0b1a26c68ab63cde8a9d7336925975493229aaf66a115f0756225b13c6/analysis/1540297688/
warning

[busminer]

someone get infected ...
https://bitcointalk.org/index.php?topic=5055752.msg47186080#msg47186080

[marlboroza]

There is link to download zip file in his thread. What to say:



OP just report them to moderator, they will permaban user in no time.

[hilariousandco]

Banned. Locked the threads as well.

[busminer]

Banned. Locked the threads as well.

hilariousandco
Thank you
and he did negative feedback for me )))

[busminer]

today we have a new one with virus in wallet https://bitcointalk.org/index.php?topic=5056434.0