Etheria & Aetheria

[Blockaium]

when malicious software or criminal acts are involved yes

how exactly would that be enforced easily, it's only a matter of time before badspot comes on and removed the link and anyone could have ran it before then

[Ad Bot]

[King of the Bill]

you're gonna get all your stuff stolen within a week.

and this comes from where?
it was some guy making an arg and his thing created all of two files (neither of which did anything serious) as part of a bat to exe converter that is apparently made with mediocrity
idfk tho

[King of the Bill]

noedit: dug more into it. the arg OP is in the clear and the bat to exe converter doesn't appear to be malware exactly, it just does a stuffty job of handling itself and has been used by malware distributors to hide malware in the past, which is probably part of why it's being flagged.

[McZealot]

everyone is trying to be a detective when we've already figured out it's a false positive due to a crappy converter :l

[Flame]

everyone is trying to be a detective when we've already figured out it's a false positive due to a crappy converter :l

that, and the fact the only ones that flagged it as DarkKomet were four AV programs i have never heard of. those are supposed to be more reliable than larger-name companies? i'll bet more on a false positive.

[SeventhSandwich]

noedit: dug more into it. the arg OP is in the clear and the bat to exe converter doesn't appear to be malware exactly, it just does a stuffty job of handling itself and has been used by malware distributors to hide malware in the past, which is probably part of why it's being flagged.

I don't think that's how malware detection works, but you're completely free to risk your entire online identity on it. You should keep in mind that even if nothing has happened yet, you could be surveyed for weeks before the hacker decides to hijack all of your accounts.

[King of the Bill]

I don't think that's how malware detection works, but you're completely free to risk your entire online identity on it. You should keep in mind that even if nothing has happened yet, you could be surveyed for weeks before the hacker decides to hijack all of your accounts.

it's because of the weird stuff it does in the temp folder that it gets flagged afaik
idk anyway, i mean i might wind up backing up and reformatting anyway cause it's something i shoulda done a while ago.

[hillkill]

but where does badspot make his claims from then? he clearly didn't just get proof from VT. i would rather trust badspot more than any e-detective here. going to go out on a limb here and that that it is in fact a rat, and that this whole topic was a rather ingenious way of hiding a rat.

[hillkill]

but where does badspot make his claims from then? he clearly didn't just get proof from VT. i would rather trust badspot more than any e-detective here. going to go out on a limb here and that that it is in fact a rat, and that this whole topic was a rather ingenious way of hiding a rat.

NOEDIT:

but where does badspot make his claims from then? he clearly didn't just get proof from VT. i would rather trust badspot more than any e-detective here. going to go out on a limb here and say that it is in fact a rat, and that this whole topic was a rather ingenious way of hiding a rat.

[Flame]

malwarebytes doesn't scan for rootkits by default, i found out. i just did it

i found some weird things.. but those are all part of the recycle bin, some garbage i recycled earlier after my sister installed. those are gone now

i don't have the original .exe because i just cleared my recycle bin but does anyone remember the .exe's name in the ytmp folder?



this is the only thing i didn't recognize off the bat

[Citrus]

Doesn't Malwarebytes scan for rootkits now? Or am I getting that confused with poweliks support.

[Becquerel]

Doesn't Malwarebytes scan for rootkits now? Or am I getting that confused with poweliks support.

It can but you have to enable it in options, IIRC its off by default

[King of the Bill]

the ytmp folder contained:
tmp33507.bat
tmp95157.exe

[Flame]

the ytmp folder contained:
tmp33507.bat
tmp95157.exe

ah, that's right, thank you

[§am§on]

Could someone be so kind as to giving me a summary of why this Off Topic thread is in the Drama aisle?