[ShawnReynolds]

I got it, it did not work because of an exclamation point in the folder name.

This is the result: 608672723ed45e3b6da36e5136719b60

[roger_smith]

//
// File Checksum Integrity Verifier version 2.05.
//
608672723ed45e3b6da36e5136719b60 .\pastebin-v1.1.exe

That's what I got. straight from pastebin's download on their site.


so far that file does not appear malicious to me, so you may have contracted your bug elsewhere. can you get some stats on the malicious file such as when it was created/modified/accessed?

I'm running a check on the pastebin download just to be sure

---

https://malwr.com/analysis/ZDYyMGExMmNmN...zYmU3M2Y/# here's the analysis. Doesn't look to be overly malicious.

[The Toilet Paper King]

So a site that's been up since 2000 has been distributing malware to over 100,000 people over 14ish years? Ok.

Websites of popular software have been known to be get compromised and the attacker replacing legit software with those containing malware.

The most significant example I can think of was when a popular remote access tool like openvpn or maybe ssh had a backdoor written in to one of the binary versions a couple years ago.

It does happen though.

[roger_smith]

Websites of popular software have been known to be get compromised and the attacker replacing legit software with those containing malware.

The most significant example I can think of was when a popular remote access tool like openvpn or maybe ssh had a backdoor written in to one of the binary versions a couple years ago.

It does happen though.

This, which is why I want Shawn to help double check this stuff, just in case. It's not likely though based on analysis so far and md5sum checks.

[Senka]

Websites of popular software have been known to be get compromised and the attacker replacing legit software with those containing malware.

The most significant example I can think of was when a popular remote access tool like openvpn or maybe ssh had a backdoor written in to one of the binary versions a couple years ago.

It does happen though.

I can agree that it does happen, but are you implying that is has been happening for 12-14 years and nobody gave a shit till now?

[The Toilet Paper King]

I can agree that it does happen, but are you implying that is has been happening for 12-14 years and nobody gave a shit till now?

Could have happened 3 days ago for all we know. Just because the software has been around 14 years doesnt mean its been compromised for 14 years.

Please, use some common sense.

[roger_smith]

I'm pretty sure mrtstub.exe isn't malware btw.

http://www.sevenforums.com/general-discu...tstub.html

[ShawnReynolds]

I'm pretty sure mrtstub.exe isn't malware btw.

http://www.sevenforums.com/general-discu...tstub.html

Okay, I was not exactly sure, as all the Google searches I was getting said it was malware and should be removed.

[Bannedshee]

Okay, I was not exactly sure, as all the Google searches I was getting said it was malware and should be removed.

Or you didn't read the whole article, saw malicious software and thought "virus wtf".

stop

[gym]

I installed Pastebin desktop on my laptop, and it put a virus/malware on my hard drive. The malware it put on my hard drive is mrtstub, this might not be a malicious software, but after some research on it, it seems that it is. So I strongly suggest that you do not install pastebin's desktop client. I had never used pastebin before, and I was curious, so I downloaded and installed it, and I saw this file on my hard drive. I searched it up, found out what it is. I did not know what put it there at first, but when I uninstalled pastebin, the file was completely removed.

Thanks for the warning! It is most likely where you downloaded it from.