Fake Trojaned Backdoored Maphack STAY AWAY

[FlAWD]

I recived this maphack from a friend who got it from another friend and so on.
I won't link it, because it is trojaned/backdoored.
The file name is "D2 Maphack 70A.zip"
This IS NOT a new maphack for 1.11



That's what happens when you try to run the "Make CD Key Hash"

And that program, Winstart.exe is a backdoor. Much more than a mere keylogger.
It basically allows an attacker to access any part of your computer at any time. Allowing him/her to install keyloggers, or other malitious software.

More information:
http://www.tasklist.org/task_winstart_exe_4165.html
http://www.auditmypc.com/process/winstart.asp
http://securityresponse.symantec.com/avc...tanex.html

Also more info and other forum posts about it here:
http://diablo.flawd.info/modules.php?nam...opic&t=392


BE CAREFUL WHAT YOU DOWNLOAD

And if you see Mousepads Maphack 7.0A ANYWHERE, do not download it.

[Neon]

Thank you for the info, Flawd!

[FlAWD]

File: mhhashgen.exe
Status: INFECTED/MALWARE (Note: only non-destructive malware has been found. Considering the non-destructive nature of samples like these - although they can be a pain -, results will not be stored in the database.)
MD5 6686fcced41e9a2fa8ee0c304b60ac5e
Packers detected:
-
Scanner results
AntiVir -Found nothing
ArcaVir -Found nothing
Avast -Found nothing
AVG Antivirus -Found nothing
BitDefender -Found nothing
ClamAV -Found nothing
Dr.Web -Found nothing
F-Prot Antivirus -Found nothing
Fortinet -Found W32/Startpage.DU-dr (same was shown in d2loader)
Kaspersky Anti-Virus -Found not-a-virus:Monitor.Win32.Ardamax.20
NOD32 -Found nothing
Norman Virus Control -Found nothing
UNA -Found I-Worm.Yanz.b
VBA32 -Found nothing




No problem
Just trying to protect everyone from all the bad crap going around.
I'll post more updates as I come across them

[rpflip]

i recently dloaded a similar program but i did get that trojan backdoor virus....do yu kno wat it does bcuz i dont really kno how to get rid of it, lol

[FlAWD]

Well, my SpyBot caught it before it even had a chance to run. (I love the SpyBot TeaTimer)

Here's a link for SpyBot:
http://www.download.com/3001-8022_4-10401314.html

And when you are going thru the install, be sure to check off "Install TeaTimer" and the Internet Explorer protection is good to use also, that is, if you still use IE

[Zyclo]

thx alot bro

[volcom]

I scan everything that I download

[Shellz]

Thx Man ima Get that

[Aemaeth]

Well, my SpyBot caught it before it even had a chance to run. (I love the SpyBot TeaTimer)

Here's a link for SpyBot:
http://www.download.com/3001-8022_4-10401314.html

And when you are going thru the install, be sure to check off "Install TeaTimer" and the Internet Explorer protection is good to use also, that is, if you still use IE

Teatimer is good. but the gui isn't.

[FlAWD]

Teatimer is good. but the gui isn't.

how so?

if you mean when tea timer pops up and asks you to approve, then yes its messed up but im sure they will fix that

as for the SpyBot gui... i don't see what isn't good about it... ive always understanded it just fine

[Aemaeth]

how so?

if you mean when tea timer pops up and asks you to approve, then yes its messed up but im sure they will fix that

as for the SpyBot gui... i don't see what isn't good about it... ive always understanded it just fine

I dont use a normal windows shell, and it messes up to the point i have to change my shell. =/ tad annoying.

[Squirlz]

windows alos has a spyware program.. it found something that spybot and adware missed.. and it runs all the time just like spybot. let me know if you want it and cant find it. its on one of microsofts websites.

[Aemaeth]

windows alos has a spyware program.. it found something that spybot and adware missed.. and it runs all the time just like spybot. let me know if you want it and cant find it. its on one of microsofts websites.

Alexa. thats what its called.

[FlAWD]

windows alos has a spyware program.. it found something that spybot and adware missed.. and it runs all the time just like spybot. let me know if you want it and cant find it. its on one of microsofts websites.

I remember reading a news article about the Windows spyware program a long time ago, back when it was still in beta.

The reason that the link was sent to me, was because the biggest bug in the beta testing, was that it DELETED internet explorer labeling it as spyware.

GG Microsoft:devilish:

[Squirlz]

oh.. it still is beta but my ie still works.. i havent run into any probs yet, key word yet because it still is a windows program.