SRL Archive - News and General

SwiftKit is infected DONT USE.


Bwuk

2012-05-30 18:23:35

SwiftKit got hacked about 5 hours ago I don't know if anybody else made a thread about this already but do not RUN anykind of Java Driveby's from their program/website if you did scan your computer asap and uninstall swiftkit.

Proof: http://www.zybez.net/news/1875/precautions_for_swiftkit_users/

Wetish

2012-05-30 18:26:52

Swiftkit is not infected. The website was hijacked. Unless you were on the swiftkit website and ran a java applet you are fine. I will be editing this and posting a tutorial on how to remove the infection if you did happen to get infected.

All credit goes to Dont Be Fail. Images have been removed due to their side.
From: Dont Be Fail

Right, So as we all know up to this point, Swiftkit's been Hacked.

And if you reboot your client you'll get an update, The update will lead you to a Java Drive-by

Question: What's a Java Drive-by?
Question: What does a Java Driveby do? A Java Driveby can be used to inject a RAT/Keylogger into your computer, soon as you click that Run, it's downloaded and probably watching your screen!

This is a Java-Drive-by
http://www.picz.ge/img/s4/1201/26/3/383e66de308f.png

So how do you go about removing it?

Step One - Go to Start and type Run.exe/Msconfig.exe
As you can see here
http://i.imgur.com/PO8Ab.png
Then run Msconfig.exe
http://i.imgur.com/6gwwo.png
Go to Start-up and remove all from start-up, it'll prompt you to restart, Don't do it yet!
http://i.imgur.com/tclUb.png

http://i.imgur.com/tGnPX.png
Then go to Services, and hide microsoft ones and remove the others you aren't sure about or don't trust. after doing this, Reboot your computer I hope this guide was simple and easy enough for you to use! Also, just to be super safe download MalwareBytes here

http://www.malwarebytes.org/


Bwuk

2012-05-30 18:30:07

From: Siel
Swiftkit is not infected. The website was hijacked. Unless you were on the swiftkit website and ran a java applet you are fine. I will be editing this and posting a tutorial on how to remove the infection if you did happen to get infected.

I ain't infected and yes swiftkit is infected, a lot of people is saying its trying to download an trojan through the software (on the update thingy).

Wetish

2012-05-30 18:32:16

From: Bwuk
I ain't infected and yes swiftkit is infected, a lot of people is saying its trying to download an trojan through the software (on the update thingy).


The update sends people to the infected website where it would usually get the update from. The client is completely clean. Your antivirus detects this as a virus and block swiftkit from accessing the website.

Bwuk

2012-05-30 18:35:10

From: Siel
The update sends people to the infected website where it would usually get the update from. The client is completely clean. Your antivirus detects this as a virus and block swiftkit from accessing the website.

I wont be so sure I am not taking any chance/risks at all, I wont be using their program for like 3 days until I know its 100% safe to use again.

Wetish

2012-05-30 18:37:21

From: Bwuk
I wont be so sure I am not taking any chance/risks at all, I wont be using their program for like 3 days until I know its 100% safe to use again.


Yep. That is the safest thing to do. http://swiftkit.net/ seems to be back to normal now with no JDB but I would still wait. Personally I have not used swiftkit in months and I do not plan to.