Porn dialer found in NAV key cracker (scan results)

Porn dialer found in NAV key cracker (scan results)

Secure Home | Search | About
 Anti-Virus Software    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Porn dialer found in NAV key cracker (scan results) Virus Guy 09-23-2005
Posted by Virus Guy on September 23, 2005, 9:47 am
If you were  Registered and logged in, you could reply and use other advanced thread options
The file in question (see below) was downloaded in Feb this year
(from, I believe, www.thecrack.net).

I never ran it. NAV and The Cleaner (my 2 main AV progs) did not (and
still do not) detect it as a threat. While doing a de-frag on the
drive (by having it slaved to an alternate computer) I ran Spybot and
it was the one that alerted me to the problem with this file (!).

I then submitted it as described. Clearly, many AV programs are
behind the curve with this one. I'm surprised that Spybot found it.
I guess we should consider it as a legit piece of AV software?

-------------------------

Files scanned by Jotti are indicated by ??.??.???? in the date field.
(http://virusscan.jotti.org/)

Other results come from Virustotal. Duplicate scans are not repeated
(unless they differ, which none do in this case).

09/23/2005
File: "Norton_Antivirus_2003__by_Napster_GSMPT_create_keys.exe"

BitDefender 7.2 09.23.2005 Application.Pornware.Kitt.A
ClamAV devel-20050917 09.22.2005 Pornware.KittenSex
DrWeb 4.32b 09.23.2005 Trojan.StartPage.870
F-Prot 3.16c 09.23.2005 security risk or a "backdoor" program
Kaspersky 4.0.2.24 09.23.2005
not-a-virus:Porn-Tool.Win32.NortonCrack
McAfee 4588 09.22.2005 potentially unwanted program
Dialer-Generic
Panda 8.02.00 09.23.2005 Adware/Startpage.ADH
TheHacker 5.8.2.114 09.22.2005 Dialer/generic
VBA32 3.10.4 09.21.2005 PornWare.Tool.NortonCrack
Fortinet ??.??.???? Found Dial/Generic.5111

AntiVir 6.32.0.6 09.23.2005 no virus found
ArcaVir ??.??.???? Found nothing
Avast 4.6.695.0 09.23.2005 no virus found
AVG 718 09.22.2005 no virus found
Avira 6.32.0.6 09.23.2005 no virus found
CAT-QuickHeal 8.00 09.22.2005 no virus found
eTrust-Iris 7.1.194.0 09.23.2005 no virus found
eTrust-Vet 11.9.1.0 09.23.2005 no virus found
Ikarus 0.2.59.0 09.22.2005 no virus found
NOD32v2 1.1230 09.22.2005 no virus found
Norman 5.70.10 09.23.2005 no virus found
Symantec 8.0 09.22.2005 no virus found
The Cleaner v3847 09.21.2005 no threat found
UNA ??.??.???? Found nothing


Posted by Clay on September 23, 2005, 10:54 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>The file in question (see below) was downloaded in Feb this year
>(from, I believe, www.thecrack.net).
>
>I never ran it. NAV and The Cleaner (my 2 main AV progs) did not (and
>still do not) detect it as a threat. While doing a de-frag on the
>drive (by having it slaved to an alternate computer) I ran Spybot and
>it was the one that alerted me to the problem with this file (!).
>
>I then submitted it as described. Clearly, many AV programs are
>behind the curve with this one. I'm surprised that Spybot found it.
>I guess we should consider it as a legit piece of AV software?

Personally, I wouldn't classify Spybot as AV software. Just another
tool for underware detection in my book. In fact, they don't even
describe it themselves as AV software.... of course you can consider
it whatever you please.

From: http://www.safer-networking.org/en/spybotsd/index.html

"Spybot - Search & Destroy can detect and remove spyware of different
kinds from your computer."

[snippage of Files scanned by Jotti ]

Seems to be a porn dialer and not a virus.

--
Clay mania dot com


Posted by Roger Wilco on September 23, 2005, 1:51 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> The file in question (see below) was downloaded in Feb this year
> (from, I believe, www.thecrack.net).
>
> I never ran it. NAV and The Cleaner (my 2 main AV progs) did not (and
> still do not) detect it as a threat. While doing a de-frag on the
> drive (by having it slaved to an alternate computer) I ran Spybot and
> it was the one that alerted me to the problem with this file (!).
>
> I then submitted it as described. Clearly, many AV programs are
> behind the curve with this one. I'm surprised that Spybot found it.
> I guess we should consider it as a legit piece of AV software?

Because "Virus Guy" still doesn't know what a virus is and is not.




Posted by Art on September 23, 2005, 4:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>The file in question (see below) was downloaded in Feb this year
>(from, I believe, www.thecrack.net).
>
>I never ran it. NAV and The Cleaner (my 2 main AV progs) did not (and
>still do not) detect it as a threat. While doing a de-frag on the
>drive (by having it slaved to an alternate computer) I ran Spybot and
>it was the one that alerted me to the problem with this file (!).
>
>I then submitted it as described. Clearly, many AV programs are
>behind the curve with this one. I'm surprised that Spybot found it.
>I guess we should consider it as a legit piece of AV software?

<snip results>

I have a small collection now of such "underware" as Clay called them.
The results you got on the file you submitted are just another
indicator of how one must use several kinds of scanners on-demand
nowdays to get a better chance of detecting underware. In addition
to KAV, Ad-Aware and Spybot, I've installed Ewido as well. It's coming
along nicely IMO.

Art

http://home.epix.net/~artnpeg


Similar ThreadsPosted
Porn-Dialer.Win32.Intexdial September 22, 2005, 6:01 pm
Confusing scan results March 18, 2006, 5:25 am
Can NOD32 results be auto-closed if no threats found ? October 21, 2005, 12:00 am
Different packing = different scan results (remember Zlob posts?) April 20, 2006, 11:38 pm
Trojan or something diverting browser to porn sites August 26, 2005, 9:05 pm
= = GET THE CONVENIENCE OF A NETFLIX FOR PORN - TRY IT FREE FOR 15 DAYS! = = December 28, 2007, 9:25 pm
dialer.nh August 8, 2005, 2:20 pm
Dialer.ABA September 13, 2005, 4:43 pm
Dialer: rimozione July 27, 2006, 3:43 pm
Dialer Platform virus December 28, 2005, 9:48 pm

The site map in XML format XML site map

Contact Us | Privacy Policy