Author Topic: Tarek701 & DiBtool malware warning (Read 2667 times)

SeventhSandwich · June 30, 2011, 01:19:26 PM

As some of you may remember, Tarek701(known by other aliases) made a thread roughly two weeks ago advertising his, "Hack" for blockland. Tarek701 posed as someone who just found the website and wanted to show it, just to remove his facade a few minutes later. The thread contained a link to a blog with numerous fake updates about this non-existent software such as:

"RTB Byassing Barred(It’s very simple it changes the C# Scripts in the System_ReturnToBlockland.zip)"

"Added Alpha Trajectory Path for known Brick Buildings of other People."

"Added an Auto Respawner. After the Secounds reach 1 the Auto Clicker will activated and automaticly respawns you."

If you've been looking back at the website, a few days ago he released the file, "DiBToolV16.exe". Below is a link to a virus scan of the file.

http://www.virustotal.com/file-scan/report.html?id=e0752144dce21d35737131a688497a96ba8a307da7620b6a68267f8a85749772-1309401103

Which indicates it's the TrojanDropper:MISL keylogger. I highly suggest that if any of you have downloaded his software, you should definitely run a virus scan.

The original website has been banned off wordpress as well:

Quote from: Badspot on June 30, 2011, 11:50:23 AM

Hah. I made a report to wordpress and they removed the blog. You should still post though.

I've met Tarek701 one or two times and based on his personality, he's no doubt going to recreate another fake website to try and infect you guys. Stay away from all websites posing as hacks for Blockland and avoid Tarek701 like the plague.

Tarek701's aliases:
UksaTheMuska
Allstarland
Tarek701

Tarek's drama thread:
http://forum.blockland.us/index.php?topic=144754.0

Ad Bot · Advertisement

Edman · June 30, 2011, 01:32:09 PM

I made the UksaTheMuksa drama C:

Trymos · June 30, 2011, 01:41:18 PM

Tarek really needs his key revoked and disallowed from even viewing the forums.

SeventhSandwich · June 30, 2011, 01:43:17 PM

Looks like he's back with a new alt

TheMightyBee

spreading his malware in off topic. Don't even try downloading it.

Quote from: Trymos on June 30, 2011, 01:41:18 PM

Tarek really needs his key revoked and disallowed from even viewing the forums.

After this, Badspot should wordfilter for his name and Dibtool

DrenDran · June 30, 2011, 01:52:22 PM

Don't forget his "TheFutureOfDark" alias too.
But yeah, he's also german, by the way.
He was admin on my server and I knew him farily well before I realized he was, well, an idiot.