Results 1 to 14 of 14

Thread: Game Thief Trojan?

  1. #1
    Join Date
    May 2007
    Posts
    663
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default Game Thief Trojan?

    Guys .. I hesitated to even post to ask the question because I know how it can get when people talk about trojans and viruses, but when I woke up this morning I noticed that Kaspersky popped up a window saying my laptop was infected with the game thief trojan via SCAR.

    Unfortunately, I had to leave like 10 minutes later so I didn't have a chance to do anything about it .. and I'm at work right now and don't know the exact version I am using.

    I do know I downloaded it off of Freddy and I do know I've had it on my laptop for a long time - and never had this happen until today.

    When I get home I will post more information .. which version I'm using; screenshots; etc.

    But whilst here at work, I wanted to at least ask if anyone else has had this problem?? While I don't play Runescape anymore, I do conduct a lot of personal business on my laptop and I've had one Facebook account and my primary Hotmail account "hijacked" in the last few months.

    Thanks everyone!! Like I said, I will get screenshots up tonight.

    ~ G

  2. #2
    Join Date
    Dec 2006
    Location
    Sweden
    Posts
    10,812
    Mentioned
    3 Post(s)
    Quoted
    16 Post(s)

    Default

    It's probably a false-positive, if you got it off Freddy's official site. Don't worry about it, I wouldn't think


    Send SMS messages using Simba
    Please do not send me a PM asking for help; I will not be able to help you! Post in a relevant thread or make your own! And always remember to search first!

  3. #3
    Join Date
    May 2007
    Posts
    663
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    Okay .. I decided to come home for lunch and figure this out.

    The trojan is Trojan-GameThief.win32.lmir.pli .. Kaspersky picked it up around midnight from scar.exe.

    I downloaded version 3.22 in December 2009.

    Attached is the Kaspersky screeny.

    Any thoughts?

    Last edited by gillian; 11-08-2010 at 05:24 PM.

  4. #4
    Join Date
    Aug 2007
    Location
    Hawaii
    Posts
    3,880
    Mentioned
    7 Post(s)
    Quoted
    152 Post(s)

    Default

    Gill, if you got it off Freddy's site then its safe. The way SCAR works and runs may make anti-virus programs alert you about it. If its off Freddy's site then its 100% safe unless he gets hacked etc etc.

    And welcome back.
    Faith is an oasis in the heart which will never be reached by the caravan of thinking.

  5. #5
    Join Date
    May 2007
    Posts
    663
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    Crazy though, eh?? Anywho, I did get it from Freddy's site and I'm not overly stressed about it, but figured I would pass it on. I've never had any false positives from SCAR so .... always good to be careful

    xoxo

  6. #6
    Join Date
    Feb 2006
    Location
    Amsterdam
    Posts
    13,692
    Mentioned
    146 Post(s)
    Quoted
    130 Post(s)

    Default

    You mean false positives from Kaspersky?
    See if it works in Simba, and see if that also gives you a virus problem.



    The best way to contact me is by email, which you can find on my website: http://wizzup.org
    I also get email notifications of private messages, though.

    Simba (on Twitter | Group on Villavu | Website | Stable/Unstable releases
    Documentation | Source | Simba Bug Tracker on Github and Villavu )


    My (Blog | Website)

  7. #7
    Join Date
    May 2007
    Posts
    663
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    No, I've never had any false positives from SCAR, i.e. it's never set off ANY anti-virus like it does for some people .. I've run a few in the 3 years I've been using SCAR it's never set off anything until now. I will try Simba ty!!

  8. #8
    Join Date
    May 2007
    Posts
    663
    Mentioned
    0 Post(s)
    Quoted
    0 Post(s)

    Default

    O jeepers .. I had NO idea you guys had put that out .. wow .. I'm downloading it now

  9. #9
    Join Date
    Jan 2010
    Posts
    5,227
    Mentioned
    6 Post(s)
    Quoted
    60 Post(s)

    Default

    I heard that rs-hacking.com got hacked? Dunno though.

  10. #10
    Join Date
    Sep 2007
    Location
    British Columbia, Canada
    Posts
    4,047
    Mentioned
    1 Post(s)
    Quoted
    2 Post(s)

    Default

    If you tried with either norton or mcafee they shouldn't show up as trojan, as e fortunately one of the member here got in touch with them and got it verified as a non virus.
    Oh Hai Dar

  11. #11
    Join Date
    Jan 2010
    Posts
    5,227
    Mentioned
    6 Post(s)
    Quoted
    60 Post(s)

    Default

    Pretty specifically says Kapersky.

  12. #12
    Join Date
    Sep 2007
    Location
    British Columbia, Canada
    Posts
    4,047
    Mentioned
    1 Post(s)
    Quoted
    2 Post(s)

    Default

    am just saying:P
    Oh Hai Dar

  13. #13
    Join Date
    Jan 2008
    Location
    Ontario, Canada
    Posts
    7,805
    Mentioned
    5 Post(s)
    Quoted
    3 Post(s)

    Default

    Its because of how freddy packages his .exes. I wish I had more information to give you, but I remember someone else posting it.

    I believe it was Wizzup, but I'm not sure.
    Writing an SRL Member Application | [Updated] Pascal Scripting Statements
    My GitHub

    Progress Report:
    13:46 <@BenLand100> <SourceCode> @BenLand100: what you have just said shows you 
                        have serious physchological problems
    13:46 <@BenLand100> HE GETS IT!
    13:46 <@BenLand100> HE FINALLY GETS IT!!!!1

  14. #14
    Join Date
    Nov 2009
    Posts
    471
    Mentioned
    0 Post(s)
    Quoted
    4 Post(s)

    Default

    I think its false positive, maleware bytes recognise scar as a trojan aswell.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •