Results 1 to 13 of 13

Thread: Subversion 1.4.5 - Backdoor / Trojan

  1. #1
    Join Date
    Feb 2007
    Location
    @ SRL
    Posts
    402
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Subversion 1.4.5 - Backdoor / Trojan

    Hi guys,

    Backdoor.Win32.Dilf.ibx, found while installing SRL Rev #17 using Subversion 1.4.5

    I posted this information yesterday but someone deleted my thread. -.-
    So I messaged Wizzup? and he told me to post again to see what you guys think.

    So, I cbf typing it all out again so I just posted the message I sent to Wizzup and his reply.

    Thanks,
    Turbobk.

    Originally Posted by turbobk
    Hi Wizzup?.

    My name is Luke Jordan.

    A few days ago I installed SCAR 3.15 on my sister's pc, and today I thought I might download subversion so I could download the newest SRL for her.

    I did the normal installation and I opened SCAR then,
    Tools > Options > SRL Download. I changed to 'Subversion Repository' and clicked 'Checkout'.

    Then the CMD window opened and started to install SRL Revision #17, when it got to installing 'SCSS' the window closed and my sister's Antivirus program (ZoneAlarm Secuity Suite PRO, latest updates) popped up and said that a file in the SCSS folder was infected with a virus called 'Backdoor.Win32.Delf.ixb'.

    I was very confused so I copyed the SCSS folder and RAR'ed it, then I scanned it on Jotti.org and it said it was Infected aswell. So I posted on the Forums in the General News section just to warn people and my thread got deleted.

    I have made a quick video to show you exactly what happens. I have RAR'ed the .avi (31.6 Mb) to 452Kb, for ease of downloading and I have also scanned the .avi RAR folder on Jotti.org for your convenience.

    I also took a picture of the scan for the 'SCSS' folder on Jotti.org

    Link to Video (.avi): http://www.mediafire.com/?dmbnxm3bxlx

    Link to Scan for Video (.bmp): http://i28.tinypic.com/zx4j8w.jpg

    Link to Scan for SCSS (.bmp): http://i29.tinypic.com/dwt854.jpg


    Thanks Alot for your time.
    I just wanted you to check this out.

    Thanks again,
    TurboBk.
    Originally Posted by Wizzup?
    Who deleted your thread...? Odd.
    I remember people mentioning these was a trojan on SCAR/SCSS sometimes, check out these threads:

    http://www.srl-forums.com/forum/anyo...ht=scss+trojan
    http://www.srl-forums.com/forum/scar...ht=scss+trojan

    Hope that clears some stuff up...
    Repost your thread anyway, we will see what other people think. Also, you might want to attach this message, so your thread won't be deleted again...

    ~Wizz
    The game has an unexplainable attraction that convinces the player they are having fun, despite the fact that all they are doing is performing repetitive tasks to increase their statistics. "The game is actually a graphical nightmare and its gameplay is simple at best. Yet something, perhaps by subliminal means, forces the player - against his will - to play the game, and to believe that they are having fun".

  2. #2
    Join Date
    Mar 2007
    Posts
    937
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    Might be a false alarm, don't worry about it


    -Ashur
    Exam period.

  3. #3
    Join Date
    Apr 2008
    Location
    Northwest england
    Posts
    1,179
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    yes i believe it is a false alarm i know that sophos blocks and deletes scar.exe
    took me about 4 hours to help someone install it overmsn and about 50 printscreens =]
    Blank!

  4. #4
    Join Date
    Dec 2006
    Location
    .̿̂̔͋͗̎̆ͥ̍̒ͤ͂̾̌̀̅
    Posts
    3,012
    Mentioned
    1 Post(s)
    Quoted
    3 Post(s)

    Default

    Hmm. If it was SCSS I suggest just deleting it if your AV goes gay about it as it's not that necessary. Although SCSS is safe and coded by Freddy1990, atleast as far as I know, some AV's think it's a trojan, most likely because of it's behaviour (connects to the internet probably in a similar way that some trojan does).. Atleast I think

  5. #5
    Join Date
    Oct 2007
    Location
    If (Online) then Loc := ('On comp') else Loc := ('Somewhere else!');
    Posts
    2,020
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    yes its jus avg that is gay about it all scar etc will have to have a backdoor coz of updates to svn etc etc and sel

  6. #6
    Join Date
    Jun 2008
    Posts
    0
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    Like ashur said it might be a false alarm Hopfuly it is

  7. #7
    Join Date
    Dec 2006
    Location
    Copy pastin to my C#
    Posts
    3,788
    Mentioned
    8 Post(s)
    Quoted
    29 Post(s)

    Default

    I got it yesterday too, it's just a false alarm...

  8. #8
    Join Date
    May 2007
    Posts
    106
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    My f-secure found a virus too...

  9. #9
    Join Date
    Jul 2007
    Posts
    1,431
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    Problably SRL community is trying to map all rs cheaters by infecting them with virus.

    ...
    [CENTER][SIZE="4"]Inactive[/SIZE]I forgot my password[/CENTER]

  10. #10
    Join Date
    May 2008
    Posts
    210
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    Edit in your firewall, make it allow the .exe and then see what happens

  11. #11
    Join Date
    Apr 2007
    Location
    Colchester, UK
    Posts
    1,220
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    thats weird i have never had this problem when installing and i use AVG and Avast. has to be false alarm

  12. #12
    Join Date
    Feb 2007
    Location
    @ SRL
    Posts
    402
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    Ok guys, thanks alot for the Information..

    But the suspicious thing is, that it's not actually connecting to the internet at all, so my sisters antivirus wouldnt be flagging it as a virus because of that. It only finds the Backdoor when im actually installing it..

    But if you guys are sure, then I'll take your word for it

    Thanks alot for the help.

    Sincerely,
    TurboBk.
    The game has an unexplainable attraction that convinces the player they are having fun, despite the fact that all they are doing is performing repetitive tasks to increase their statistics. "The game is actually a graphical nightmare and its gameplay is simple at best. Yet something, perhaps by subliminal means, forces the player - against his will - to play the game, and to believe that they are having fun".

  13. #13
    Join Date
    May 2007
    Location
    Location:= USA
    Posts
    238
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    AVG for me, never does anything gay to me. Only detects REAL viruses... Nothing happens with AVG to scar or anything that all you guys say...
    Please, I need money, and you don't lose anything, except get money! Join BUX.TO with http://bux.to/?r=twistedvip50

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Trojan in SRL
    By firefoxx in forum News and General
    Replies: 3
    Last Post: 07-15-2008, 07:40 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •