+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: The Lounge (https://sinister.ly/Forum-The-Lounge)
+--- Thread: never disable antivirus (/Thread-never-disable-antivirus)
Pages:
1
2
never disable antivirus - LaffyTaffy - 05-23-2017
So i saw this new post on leakforums about a cracked version of a kik autoreplyer and i thought it would make my ewhoring easier by filtering the time wasters. So i downloaded it and eset nod keep removing it so i disable eset and tried again to launch the exe. Next thing i know a command prompt comes up and then closes. I figured it to be a rat of some sort of i cleaned it with malwarebytes and ran a scan with eset. I thought everything would be a ok except the next the i getting banned from leakforums for no reason and there are posts that i didnt even make so i guess it was a password stealer
RE: never disable antivirus - Courage - 05-23-2017
Well most RATs steal your saved Chrome/Firefox/IE passwords also just keep that in mind. You may want to make sure you're not infected still are you 100% sure this was the only malware you had?
And auto reply doesn't really make E-Whoring easier as they usually send the messages right away, its so obvious that a bot is in use its retarded. You'd honestly be better off copy pasting like I do instead of trying to use those, they are just a pain in the ass in my opinion. If you ever need help with E-Whoring just message me I know lots about it.
RE: never disable antivirus - LaffyTaffy - 05-23-2017
Thanks man,i still have some uncertinties but i think i'm all clean. Ill make surento ask you for ewhoring help when the going gets rough
RE: never disable antivirus - Asura - 05-23-2017
Wouldn't it be suspicious that the Kik Auto replier was an executable? I thought it would have an apk extension since Kik is only for mobile.
Regarding the virus removal, try performing the removal procedure in safe mode if you haven't. Just to be sure.
RE: never disable antivirus - LaffyTaffy - 05-23-2017
(05-23-2017, 04:32 AM)Asura Wrote: Wouldn't it be suspicious that the Kik Auto replier was an executable? I thought it would have an apk extension since Kik is only for mobile.Thanks man ill try that
Regarding the virus removal, try performing the removal procedure in safe mode if you haven't. Just to be sure.
RE: never disable antivirus - Courage - 05-23-2017
(05-23-2017, 04:32 AM)Asura Wrote: Wouldn't it be suspicious that the Kik Auto replier was an executable? I thought it would have an apk extension since Kik is only for mobile.
Regarding the virus removal, try performing the removal procedure in safe mode if you haven't. Just to be sure.
OP says it was Scooby's Kik Automator and that is in fact an .exe its meant to be used on Android emulators.
RE: never disable antivirus - Ecks - 05-23-2017
Always stay up to date, regardless of OS. An anti-virus suite is only as good as it's user, I have had to do factory resets on many many computers from clients who have anti-virus, anti-malware, anti-out the ass protection, but never paid it any attention til it was far too late.
I however don't use any of that myself, I use Linux and stay up to date.
Don't know much about the kik autoer but you should always be weary of what you download and scan anything you can(minus game cracks that are auto deleted by protection software).
RE: never disable antivirus - Bish0pQ - 05-23-2017
An AV is fine, but if an AV detects it as a virus it would necessarly mean that it is a virus.
Run it in a VM, also run the file sandboxed and record the traffic with Fiddler (if on Windows) otherwise use something like Wireshark.
Also, it can also be something else than a password stealer/RAT. It's also possible that a coinminer gets installed, so if you notice you're PC/VM is getting slow, than that might be the reason for it.
RE: never disable antivirus - mothered - 05-23-2017
That's one reason why you should have a VM on a dedicated system for executing files of that nature.
Some viruses can bypass VMs, particularly If network sharing (or a bridged connection) has been enabled between the guest and host systems, hence a dedicated physical machine should be used. Take this as a positive note. It's a lesson learned that will be of benefit from this point forward.
RE: never disable antivirus - Pikami - 05-23-2017
Do you have a sample that you could share?
If so, pm me the sample please