2nd Big Malware Archive!

Viruses and worms
1

2nd big malware archive deleted site adress
web site in program keygens cracks
program keygens cracks are malware antivirus programs detected malware

2

Hi antimalware3456,

Whenever a site has software that has been packed it is not very easy for the moderate user to determine what this software will do, so you will never know. First run inside a VM and scan, but again if you haven’t analyzed or unpacked the file manually or reverse engineered it, you well nver know wheta else it does than what it claims to do. So how can one label a site with keygen as safe is beyond me,

polonus

3

You should know the drill by now from your 1st “Big Malware Archive!” topic.

4

1st big malware archive is deleted site adress

5

deleted site adress in program cracks keygens antivirus programs detected malware
w32.agent,trojan downloader,dropper,hacktool,ırcbot,zbot,backdoor,trojan,banker

6

Hi antimalware3456,

If you go to that ip, you get a variety of JS:ScriptIP-inf malware and PUA.Packed.ASPack malcoded files, and avast is the one to flag them: http://www.virustotal.com/file-scan/report.html?id=11a2fcc9e9323522ffae5810d18cd986e11983fc866774cca83ccd70b28f8273-1273216681

polonus

7

The idea wasn’t to A) reference the original topic, but B) to follow the advice/suggestions given there about submission of further samples.

So there really shouldn’t be a need to create multiple topic about what is essentially the same thing, but to send any samples directly to avast as posting about it doesn’t get the samples to avast.

8

Hi DavidR,

This topic is one of a big generalisation.
Re: http://sitevet.com/db/asn/AS43350
AS Name: NFORCE NFOrce Entertainment BV
IPs allocated: 12544
Blacklisted URLs: 83
malicious URLs and badware
It goes without saying that keygens as a rule should be flagged, as they are being used to circumvent legit protection, and not only from the point of view that they can additionally become wrapped with additional malware. Besides who is going to complain when he has become infected while getting or unpacking keygens and/or cracks. So the whole discussion seems such an open door to me.

polonus

9

It is just that I honestly don’t see the point of any discussion, it achieves nothing. If there are suspect samples then they should be sent directly to avast. Talking about it isn’t going to get them or any URL added to any malicious sites list.

10

+1

polonus

11

Keygens program trial cracks are unsafe programs
for example ı used keygen and my computer crashed
once my ınternet crashed
once My computer started to reset itself

12

STOP POSTING ACTIVE LINKS TO KNOWN MALWARE SITES.

13

Please stop posting the links here and send them to avast, as you have been told before now.

As it is now, you are just spamming the forum with links that are all of similar nature.

[OT] This is why I feel that active links should NOT be allowed on the forum. Too many ACTIVE links to potentially dangerous sites that many users MAY click. (And not enough people with the privileges to do something about it...) [/OT]
14

+1

Please change them, using either wxw or hxxp…!!!

15

I submitted 1000+ suspicious files to Avast
and Avast detected malware gen

16

Great, still no reason to post live links to malware here…!!!
I ask you again to edit your links.

17

That is nice, now go through EVERY one of your posts and check that you have disabled the links (And once you have done that, don’t activate them again. Yes, the first post has been active/inactive/active)

EDIT: I’m bored of this, all you are doing is deactivating one link, and activating another…reported as spam…
EDIT2: Just in case…check the times…

18

Edit: Why are you instead of deactivating your links activating them…??? >:(

19

+1

20

Don’t worry, I saw it, too.