Nine Years of Service
Posts: 92
Threads: 16
never disable antivirus 05-23-2017, 01:37 AM
#1
So i saw this new post on leakforums about a cracked version of a kik autoreplyer and i thought it would make my ewhoring easier by filtering the time wasters. So i downloaded it and eset nod keep removing it so i disable eset and tried again to launch the exe. Next thing i know a command prompt comes up and then closes. I figured it to be a rat of some sort of i cleaned it with malwarebytes and ran a scan with eset. I thought everything would be a ok except the next the i getting banned from leakforums for no reason and there are posts that i didnt even make so i guess it was a password stealer
•
Nine Years of Service
Posts: 53
Threads: 3
RE: never disable antivirus 05-23-2017, 02:18 AM
#2
Well most RATs steal your saved Chrome/Firefox/IE passwords also just keep that in mind. You may want to make sure you're not infected still are you 100% sure this was the only malware you had?
And auto reply doesn't really make E-Whoring easier as they usually send the messages right away, its so obvious that a bot is in use its retarded. You'd honestly be better off copy pasting like I do instead of trying to use those, they are just a pain in the ass in my opinion. If you ever need help with E-Whoring just message me I know lots about it.
(This post was last modified: 05-23-2017, 02:19 AM by Courage.)
•
Twelve Years of Service
Posts: 372
Threads: 28
RE: never disable antivirus 05-23-2017, 04:32 AM
#4
Wouldn't it be suspicious that the Kik Auto replier was an executable? I thought it would have an apk extension since Kik is only for mobile.
Regarding the virus removal, try performing the removal procedure in safe mode if you haven't. Just to be sure.
•
Nine Years of Service
Posts: 1,200
Threads: 348
RE: never disable antivirus 05-23-2017, 05:01 AM
#7
Always stay up to date, regardless of OS. An anti-virus suite is only as good as it's user, I have had to do factory resets on many many computers from clients who have anti-virus, anti-malware, anti-out the ass protection, but never paid it any attention til it was far too late.
I however don't use any of that myself, I use Linux and stay up to date.
Don't know much about the kik autoer but you should always be weary of what you download and scan anything you can(minus game cracks that are auto deleted by protection software).
If my threads help you feel free to Like and Rep
Keybase | https://keybase.io/ecks  ProtonMail | n3r0nu77@protonmail.com  Steam | Nu77v47u3  Discord | Ecks#2162
•
Ten Years of Service
Posts: 3,024
Threads: 155
RE: never disable antivirus 05-23-2017, 09:16 AM
#8
An AV is fine, but if an AV detects it as a virus it would necessarly mean that it is a virus.
Run it in a VM, also run the file sandboxed and record the traffic with Fiddler (if on Windows) otherwise use something like Wireshark.
Also, it can also be something else than a password stealer/RAT. It's also possible that a coinminer gets installed, so if you notice you're PC/VM is getting slow, than that might be the reason for it.
~~ Might be back? ~~
•
Thirteen Years of Service
Posts: 74,304
Threads: 317
RE: never disable antivirus 05-23-2017, 04:05 PM
#9
That's one reason why you should have a VM on a dedicated system for executing files of that nature.
Some viruses can bypass VMs, particularly If network sharing (or a bridged connection) has been enabled between the guest and host systems, hence a dedicated physical machine should be used. Take this as a positive note. It's a lesson learned that will be of benefit from this point forward.
•