SRL Archive - General

SCARBrowser.exe Trojan?


Fizzi

2007-07-12 21:46:12

Someone please tell me what's up with this? Never happened until I downloaded SCAR Divi 3.11.


Here

2007-07-12 23:02:40

I r haxing all yur passwards.

What do you think? Nothing.

Wanted

2007-07-12 23:05:56

Click the 'ignore' button.

Here

2007-07-12 23:07:22

Ah yes, there is that.

Just Kidding

2007-07-12 23:24:28

Alot of people are posting this my antivirus is not flagging scar. Dunno why.

Rikje

2007-07-13 06:26:53

its not a virus. but the virus scanner say that because its a .exe file + a wird code. just clik on ignore :D

maby make a small notice in the scar download topic where it tells you to ignore the virus detect?

sum1uallno

2007-07-13 07:24:43

Related Trojans. The package has no virus. The downloader is what brings the trojans in.
Scar Browser.exe trojan horse Generic5.1SZ
Reuakgg.exe trojan horse downloader gerneric5.ZM
ipv6mons.dll trojan horse generic5.CTG
a.exe trojan horse PSW. generic4.VCL

Theres a few sites that have had malicious attacks. Most zipped files do contain tracking loggers.
The problem is with the downloaders. And the sites they infect are well known by the moderators such as this site. Not much u can do to stop a intruder. If i want in i get in.
What u can do however is simply once again deny access and find a alternate route to what your doing.
As does this site. You do have to option to closed port access and deny. It is best to have multiple comps therefore u have one to totally fungule up. Save to disk what you desire to run and work with and make sure u deny encrypted hidden files to be saved. Then once your confident load to your play comp.

sum1uallno

2007-07-13 07:28:23

:duh:
From: sum1uallno
Related Trojans. The package has no virus. The downloader is what brings the trojans in.
Scar Browser.exe trojan horse Generic5.1SZ
Reuakgg.exe trojan horse downloader gerneric5.ZM
ipv6mons.dll trojan horse generic5.CTG
a.exe trojan horse PSW. generic4.VCL

Theres a few sites that have had malicious attacks. Most zipped files do contain tracking loggers.
The problem is with the downloaders. And the sites they infect are well known by the moderators such as this site. Not much u can do to stop a intruder. If i want in i get in.
What u can do however is simply once again deny access and find a alternate route to what your doing.
As does this site. You do have to option to closed port access and deny. It is best to have multiple comps therefore u have one to totally fungule up. Save to disk what you desire to run and work with and make sure u deny encrypted hidden files to be saved. Then once your confident load to your play comp.



From : RuneCheatz.com <admin@runecheatz.com>
Sent : Thursday, July 12, 2007 12:59 PM
To : "c h" <lrac76@msn.com>
Subject : Re: RuneCheatz.com - Runescape Cheats

| | | Inbox

MIME-Version: 1.0
Received: from py-out-1112.google.com ([64.233.166.178]) by bay0-mc1-f23.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Thu, 12 Jul 2007 05:59:38 -0700
Received: by py-out-1112.google.com with SMTP id a29so388317pyi for <lrac76@msn.com>; Thu, 12 Jul 2007 05:59:38 -0700 (PDT)
Received: by 10.35.68.16 with SMTP id v16mr1113506pyk.1184245178581; Thu, 12 Jul 2007 05:59:38 -0700 (PDT)
Received: by 10.35.94.17 with HTTP; Thu, 12 Jul 2007 05:59:38 -0700 (PDT)
Sender: [email]rotwyla98@gmail.com[/email]
X-Message-Info: 5ZHoJh3ZkQ2beHhjtR/Lqw+jGgHyYqvlcOX901YQIttX/7kYcd+iVW3Tpx/DmeMS
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:references:x-google-sender-auth; b=AVxFNITn4muAb++aFdFdJFSF9YJdANXUXEM9kzXPvXVtGKH3nyj9GaamgHmIwRG7hEDI5sKbvA47hKmWdMVfYj00RzoXaMOrJ3B6KxFnMEkElD6sMsWmxuiM4to5myJ0DjsNOzmLc0fQ/C/sQr3U0pZkuU8WqQwLP5SRukbw6Ys=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:references:x-google-sender-auth; b=k0NKoq1HxDtCnWPAbQMyt2S5Iul/64i/dWDLXmlb0ghHvuDblANiJNo0U63zp2TXYRFq2mONeXFG17nugtGQQKXEzSbOQb6WW88JCEEHdYJbj4SE+kbqunRT+x2T5rJC5it+f3Vvg2bTQ3Loq2RqXD425OM/Uv7/EO5FUhqMfi8=
References: <bb31beb331926c88caa64c290c039b8c@www.nostradamus-predictions.info> <BAY115-F38724F2C6DC71AD4125CAAD8FC0@phx.gbl>
X-Google-Sender-Auth: 4f7e5ca0dcc5ebed
Return-Path: [email]rotwyla98@gmail.com[/email]
X-OriginalArrivalTime: 12 Jul 2007 12:59:38.0789 (UTC) FILETIME=[8154BD50:01C7C484]

——————————————————————————–

View E-mail Message Source
Content-Type: multipart/alternative; boundary="—-=_Part_11620_30960317.1184245178529"


Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


which programs do you see this for?
SCAR is not a virus (I along with hundreds of others have used it).




On 7/12/07, c h < [email]lrac76@msn.com[/email]> wrote:
ScarBrowser.exe Trojanhorse Generic5.1SZ

Revakgg.exe trojanhorse Downloader generic5.ZM

a.exe trojanhorse PSW.generic4.VCL

ipv6mons.dll trojanhorse generic5.CTG



Fix this asap.

Mr.Klean

2007-07-13 11:38:28

The only reason scarbrowser.exe comes up with a trojan because how it is written and it accesses your files for saving proggies and to use SRL.

IT IS COMPLETELY SAFE.

sweetleaf

2007-07-13 16:30:20

yea i get the same thing.


Just Kidding

2007-07-13 17:36:07

Well tell you what, if you dont trust it dont use it. Too simple. As for the other 6000 active members here and the other 17,000 inactive leechers we will continue to use it with no problems.

Fizzi

2007-07-13 17:56:15

I used SCAR a long time ago back when classic was the only RS.

I have once again recently started using SCAR. I am very glad that I found this SRL community, I think it's a nice community and it is the reason I am programming again. I have wrote one script so far and posted it, and am currently working on another one.

I trust SCAR, I was just wondering why it showed up as a trojan now, and not before.. 3.06 divi, no notice, same for 3.10 divi. 3.11 for some reason got flagged by my antivirus. And I figured I'd ask the question. Thank you for your responses :). I will continue using SCAR (I was going to anyway).

freyyr

2007-07-13 20:55:02

It's a heuristic anti virus error. AVG's latest update creates a lot of false positives. For instance, World of Warcraft's sound library was flagged, which quite clearly is a safe program (unbeknown to many noobs on the WoW forums screaming "OMFG Bl1zz4rd V1ru5!").