| Author |
Topic |
Elgar Lightfoot
Lightfoot Industries
|
Posted - 2006.10.08 11:14:00 - [ 1]
Not a nice program. It's not a keylogger, but it is a very nasty bruteforce password cracker.
I suggest CCP place a maximum failed password limit on all EVE accounts. |
Death Kill
Caldari
SolaR KillerS
UN1CUM |
Posted - 2006.10.08 11:17:00 - [ 2]
Yeah, CCP please boost security. |
kassandra kaine |
Posted - 2006.10.08 11:19:00 - [ 3]
So how can i stop him accessing my account cause this tit looked at his link |
Giddions Clone
Gallente |
Posted - 2006.10.08 11:19:00 - [ 4]
I clicked this link on my laptop, i didnt se anything activly download but it did close my browser. does this mean iv got it? |
Death Kill
Caldari
SolaR KillerS
UN1CUM |
Posted - 2006.10.08 11:20:00 - [ 5]
Start windows in safe mode, then run anti spyware/virus client to remove it. Then restart windows and change your passwords.
|
Elgar Lightfoot
Lightfoot Industries
|
Posted - 2006.10.08 11:21:00 - [ 6]
Edited by: Elgar Lightfoot on 08/10/2006 11:22:08
You don't need to panic (as in the title of this thread). He can't access your account through you downloading this program. He can't even access it if you run it. However if you do then you are likely to spend some time in jail.
Simply delete it from your machine and forget about it.
It contains no trojan or virus. It's just highly illegal, traceable and does warrant time in a federal prison in just about every country in the world (excluding asia) for using such a program. |
viral storm |
Posted - 2006.10.08 11:26:00 - [ 7]
if the file auto downloaded where would it be?
im running norton antivirus as we speak |
Elgar Lightfoot
Lightfoot Industries
|
Posted - 2006.10.08 11:29:00 - [ 8]
There is no virus or trojan, but if it auto downloaded then it's likely to be in your MyDocuments or wherever you save your downloads.
Do a search for 'eve_hack' on your PC. If you don't find it, then you don't have it.
Most importantly. Don;t panic. It will do nothing so long as you don't attempt to use it. If you do try to use it, pack a bag, your going on a vacation paid for by the state ;). |
kassandra kaine |
Posted - 2006.10.08 11:33:00 - [ 9]
Ilmao is this thing really that bad? WTF can it do that makes it so nasty and gives u a free holiday?  |
Elgar Lightfoot
Lightfoot Industries
|
Posted - 2006.10.08 11:36:00 - [ 10]
Well firstly it's not very efficient and it will be detected long before you actually see it do anything. Really this is one quick way to get your own account banned.
Secondly it's classed as hacking/theft and highly illegal in most countries. It does carry a LONG prison sentence. |
Shi'ra Kull |
Posted - 2006.10.08 11:39:00 - [ 11]
Edited by: Shi''ra Kull on 08/10/2006 11:44:33
Something infected my machine from that link, I had two internet access requests pop up from csrss.exe and my virus kicked up something as well which I deleted.
Running a full scan now to look for other unwanted gifts.
I might add that just following the link he posted on the forums, I didnt download anything, just immediatley gotinfected. |
celous
Caldari
Dark Skyes
|
Posted - 2006.10.08 11:42:00 - [ 12]
|
Elgar Lightfoot
Lightfoot Industries
|
Posted - 2006.10.08 11:44:00 - [ 13]
 Originally by: Shi'ra Kull
Something infected my machine from that link, I had two internet access requests pop up from csrss.exe and my virus kicked up something as well which I deleted.
Running a full scan now to look for other unwanted gifts.
Sorry it has to be a coincidence. There is nothing in that link (removed). Well I lie there is a sun Java counter that can trick some Anti Virus programs into thinking it's a virus, but you really are safe if you did click it. Run yoru anti virus to reasure yourself (it's always good to do anyway). |
celous
Caldari
Dark Skyes
|
Posted - 2006.10.08 11:47:00 - [ 14]
|
Darth Vroevl
Base Delta Zero |
Posted - 2006.10.08 12:38:00 - [ 15]
Originally by: Elgar Lightfoot
I suggest CCP place a maximum failed password limit on all EVE accounts.
If they did that, people could use a modified version of this program to lock each other out of the game. Whether it would be worth it is anyones guess, but there are likely a few banned players out there who'd relish the chance to stir up ****. Originally by: celous
then run from the police afterwards!!
Running from the cops is an exploit  |
wystler
ISD YARR
Interstellar Services Department |
Posted - 2006.10.08 12:42:00 - [ 16]
If anyone opened this link please ensure you change all your passwords to make sure your accounts have not been compromised.
This is only a precaution! But a worthwhile one I think!! |
Joshua Foiritain
Gallente
Coreli Corporation
Naraka. |
Posted - 2006.10.08 12:47:00 - [ 17]
Originally by: Darth Vroevl
If they did that, people could use a modified version of this program to lock each other out of the game. Whether it would be worth it is anyones guess, but there are likely a few banned players out there who'd relish the chance to stir up ****.
Assuming they can guess your login name? Making your char name and login name the same just aint safe  |
Anders Kraneled |
Posted - 2006.10.08 12:55:00 - [ 18]
It seems he's at it again.
Username: SiaKharn
|
swoj
The New Order.
|
Posted - 2006.10.08 13:31:00 - [ 19]
Edited by: swoj on 08/10/2006 13:33:51If this program is not a keylogger, can anyone suggest a reason why since I stupidly clicked on the link, I have had two files turn up in c:\windows called hook.txt and ie-hook.txt? Here are the contents of hook.txt, which appears to contain the keyboard actions of my girlfriend using the computer after me and then me trying to delete the csrss.exe program that has show up as well: Quote:
[about:blank - Microsoft Internet Explorer]
www.rsjournal.co.uk
www.next.co.uk
[about:blank - Microsoft Internet Explorer]
www.ma[BACKSPACE]&s.com
[BACKSPACE]and
[NEXT Directory Online :: Womenswear : Shoes : Boots - Microsoft Internet Explorer]
www.s1homes.com
r[DOWN][DOWN][]
[about:blank - Microsoft Internet Explorer]
www.corumpropere[BACKSPACE][BACKSPACE]rty.co.uk
[WINDOWS]
cc[DELETE]
[Confirm File Delete]
[ESC]
[WINDOWS]
[ESC][DELETE]
[Confirm File Delete]
[WINDOWS]
[F2][LEFT][LEFT][LEFT][END][BACKSPACE]_
[DELETE]
[Confirm File Delete]
[WINDOWS]
[DELETE]
[Confirm File Delete]
Edit: After clicking on that link, I certainly seem to have been infected with this trojan/keylogger: http://www.avira.com/en/threats/section/fulldetails/id_vir/2842/tr_psw.ldpinc.axf.2.html |
Dark Shikari
Caldari
Deep Core Mining Inc.
|
Posted - 2006.10.08 13:35:00 - [ 20]
|
Jenny Spitfire
Caldari |
Posted - 2006.10.08 13:36:00 - [ 21]
Originally by: Dark Shikari
Perhaps Elgar is wrong then.
Or even lying. Maybe he's Den's alt? 
|
swoj
The New Order.
|
Posted - 2006.10.08 13:38:00 - [ 22]
Edited by: swoj on 08/10/2006 13:37:42
possible Den's file was changed after it was analysed? |
Jenny Spitfire
Caldari |
Posted - 2006.10.08 13:39:00 - [ 23]
Edited by: Jenny Spitfire on 08/10/2006 13:39:37Swoj, not sure this helps. |
swoj
The New Order.
|
Posted - 2006.10.08 13:42:00 - [ 24]
thanks.
Got my current AV scanning just now - it will be coming off if it doesn't detect that!
Adaware didn't find it, so looks like I'm dependant on the AV for now. |
Dark Shikari
Caldari
Deep Core Mining Inc.
|
Posted - 2006.10.08 13:44:00 - [ 25]
Originally by: swoj
thanks.
Got my current AV scanning just now - it will be coming off if it doesn't detect that!
Adaware didn't find it, so looks like I'm dependant on the AV for now.
There is a website that allows you to scan a file with about 20 different AVs, so even if its hard to catch at least some will find what you're looking for. Forgot its address though, but someone will know. |
Jenny Spitfire
Caldari |
Posted - 2006.10.08 13:44:00 - [ 26]
I doubt your AV can remove it. Might have to manually check it. I know I would. /me thinks of BackSomething.  |
Xenofur
Aliastra
|
Posted - 2006.10.08 13:45:00 - [ 27]
Edited by: Xenofur on 08/10/2006 13:46:01
ok, this time a real alarm: whoever uses this, DO NOT enter your login data. first thing it does is send that via icq/aim to someone.
ethereal ftw. :D
no trace of a keylogger tho. to the person above: with which browser did you visit the site? |
Jim McGregor |
Posted - 2006.10.08 13:46:00 - [ 28]
Originally by: Xenofur
ok, this time a real alarm: whoever uses this, DO NOT enter your login data. first thing it does is send that via icq/aim to someone.
ethereal ftw. :D
Time to change the thread name to Panic...  |
Jenny Spitfire
Caldari |
Posted - 2006.10.08 13:46:00 - [ 29]
Originally by: Xenofur
ok, this time a real alarm: whoever uses this, DO NOT enter your login data. first thing it does is send that via icq/aim to someone.
ethereal ftw. :D
I recommend unplug PC from internet until threat is secured. |
St Dragon
Deep Core Mining Inc.
|
Posted - 2006.10.08 13:49:00 - [ 30]
Edited by: St Dragon on 08/10/2006 13:49:34
Well just logged on and read this first of all what is it about and why is it illegal noone is saying what it takes you too and to the linker.
You Bastard
Oh BTW i just searched for 'eve_hack' and got nothing so i guess im ok |
All Channels
EVE General Discussion