If anyone wants to check it out, becasue im assuming Spht never released a beta 2 so im guessing its a trojan?
|12:49:47 PM| <From: ToLLiO> New EternalChat 2 BETA! Go to http://www.bnettools.cjb.net
Quote from: MyStiCaL on February 20, 2006, 02:53 PM
If anyone wants to check it out, becasue im assuming Spht never released a beta 2 so im guessing its a trojan?
|12:49:47 PM| <From: ToLLiO> New EternalChat 2 BETA! Go to http://www.bnettools.cjb.net
It is a trojan. Nine completely different applications all equal to 34kb in size? Yeah, right.
I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p
EDIT -
I got brave. Clamscan finds nothing.
--------------------------------------
Scan started: Tue Feb 21 20:27:03 2006
-- summary --
Known viruses: 45396
Engine version: 0.86.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.03 MB
Time: 1.239 sec (0 m 1 s)
-------------------
Completed
-------------------
I confirm that there is no EternalChat 2 made by me.
AntiVir 6.33.1.50 02.22.2006 no virus found
Avast 4.6.695.0 02.20.2006 no virus found
AVG 718 02.22.2006 BackDoor.Agent.APT
Avira 6.33.1.50 02.21.2006 no virus found
BitDefender 7.2 02.22.2006 no virus found
CAT-QuickHeal 8.00 02.16.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 02.21.2006 no virus found
DrWeb 4.33 02.22.2006 no virus found
eTrust-InoculateIT 23.71.83 02.21.2006 no virus found
eTrust-Vet 12.4.2091 02.22.2006 no virus found
Ewido 3.5 02.22.2006 Backdoor.Agent.rk
Fortinet 2.69.0.0 02.22.2006 W32/Agent.RK!bdr
F-Prot 3.16c 02.19.2006 no virus found
Ikarus 0.2.59.0 02.22.2006 no virus found
Kaspersky 4.0.2.24 02.22.2006 Backdoor.Win32.Agent.rk
McAfee 4703 02.22.2006 no virus found
NOD32v2 1.1415 02.21.2006 no virus found
Norman 5.70.10 02.22.2006 no virus found
Panda 9.0.0.4 02.22.2006 Suspicious file
Sophos 4.02.0 02.22.2006 no virus found
Symantec 8.0 02.22.2006 no virus found
TheHacker 5.9.4.101 02.22.2006 Backdoor/Agent.rk
UNA 1.83 02.22.2006 Backdoor.Agent
VBA32 3.10.5 02.22.2006 Backdoor.Win32.Agent.rk
Quote from: Joe on February 21, 2006, 08:25 PM
I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p
EDIT -
I got brave. Clamscan finds nothing.
--------------------------------------
Scan started: Tue Feb 21 20:27:03 2006
-- summary --
Known viruses: 45396
Engine version: 0.86.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.03 MB
Time: 1.239 sec (0 m 1 s)
-------------------
Completed
-------------------
does this mean you click on the exe also? :) is joe trojanned?
No..it means he scanned it..
I clicked on one of the .exes yesterday thinking that my antivirus(avast) would show a warning if it was infected. After clicking it, the .exe dissappeared from the file, and I pretty much knew at that point that something wasn't right. I pulled up my processes in the taskmanager and sure enough there are 2 instances of firefox.exe running, one of them uses too little memory to be my firefox, so I tried continually to end the weird firefox.exe. It kept coming back, at this point I decided to do a full system scan with avast, but it found nothing. Now my computer really started being gay, my keyboard and mouse settings was all screwed up, I couldn't even send an IM without some problem. I had to continually end the process to get things back to normal for awhile. Thank God TehUser posted that list of the different antivirus results. I'm using VBA32 now, I'm surprised it slipped by so many antivirus products.
Anyways the missing .exe showed up here: C:\WINDOWS\winupdate32.exe
Quote from: Joe on February 21, 2006, 08:25 PM
I got brave. Clamscan finds nothing.
WOAH, so brave..
Quote from: MyStiCaL on February 22, 2006, 02:19 PM
Quote from: Joe on February 21, 2006, 08:25 PM
I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p
EDIT -
I got brave. Clamscan finds nothing.
--------------------------------------
Scan started: Tue Feb 21 20:27:03 2006
-- summary --
Known viruses: 45396
Engine version: 0.86.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.03 MB
Time: 1.239 sec (0 m 1 s)
-------------------
Completed
-------------------
does this mean you click on the exe also? :) is joe trojanned?
Well, now we know who made it.
Quote from: Joe on February 23, 2006, 03:58 PM
Well, now we know who made it.
Not necessarily true.
the maker is obviously teen who goes by noah now find in op kill hes been trojanning people which is pretty gay if u dl stuff from people you dont know
His AIM is 'DeadMike06' according to one of the screenshots.
Quote from: Joe on February 23, 2006, 03:58 PM
Quote from: MyStiCaL on February 22, 2006, 02:19 PM
Quote from: Joe on February 21, 2006, 08:25 PM
I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p
EDIT -
I got brave. Clamscan finds nothing.
--------------------------------------
Scan started: Tue Feb 21 20:27:03 2006
-- summary --
Known viruses: 45396
Engine version: 0.86.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.03 MB
Time: 1.239 sec (0 m 1 s)
-------------------
Completed
-------------------
does this mean you click on the exe also? :) is joe trojanned?
Well, now we know who made it.
That's kinda sad if you are pointing the finger at me... trojaning is a useless way to get things done nowa days if i really needed somthing anyway. -_-
Haha, I saw him do a version command on this so called EternalChat 2, it looks to me as a StealthBot!
Quote from: MyStiCaL on February 26, 2006, 05:00 AM
Quote from: Joe on February 23, 2006, 03:58 PM
Quote from: MyStiCaL on February 22, 2006, 02:19 PM
Quote from: Joe on February 21, 2006, 08:25 PM
I'll never go to a cjb.net site advertised by a spambot. It's just not a bright idea. =p
EDIT -
I got brave. Clamscan finds nothing.
--------------------------------------
Scan started: Tue Feb 21 20:27:03 2006
-- summary --
Known viruses: 45396
Engine version: 0.86.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.03 MB
Time: 1.239 sec (0 m 1 s)
-------------------
Completed
-------------------
does this mean you click on the exe also? :) is joe trojanned?
Well, now we know who made it.
That's kinda sad if you are pointing the finger at me... trojaning is a useless way to get things done nowa days if i really needed somthing anyway. -_-
Haha, I saw him do a version command on this so called EternalChat 2, it looks to me as a StealthBot!
Set required access on !ver to 1000 and write a script. Oh, burn.
Sad thing was how the version was typed....
EterNaL ChaT v2 by SpHT
LOL
I think Spht Should make an eternalchat 2, i still use it.. i think alot of people use that bot.. except i made a manifest file for it so it looks more XP themed. =)