19-Apr-2024 09:45 GMT.		 UNDER CONSTRUCTION
Anonymous, there are 5 items in your selection
[News] Warning: FBlit 3.84 is a fakeANN.lu
Posted on 09-Apr-2001 13:03 GMT by Christian Kemp5 comments
View flat
View list
K Harrison writes: FBlit 3.84 ( Also Aminet ) also exibits grave suspicions, installing 2 tasks called zakahackandpatch and meddling with the HD, after stupidly installing it. This seems to be the second hack/trojan/backdoor, after the StackAttack one distributed on the same day.
Warning: FBlit 3.84 is a fake : Comment 1 of 5ANN.lu
Posted by Fnarr on 08-Apr-2001 22:00 GMT
The "new" version of BlazeWCP looks kinda suspicious too...
Warning: FBlit 3.84 is a fake : Comment 2 of 5ANN.lu
Posted by Electric Head on 08-Apr-2001 22:00 GMT
Plus the 'hipsamtab' pics seemed to look a little bit suspicious. From the same camp as the trojans I guess. :/
It looks like they've been taken down now though. Strange.. since Fblit is still up.
Warning: FBlit 3.84 is a fake : Comment 3 of 5ANN.lu
Posted by Anonymous on 08-Apr-2001 22:00 GMT
Current internal beta of FBlit isn't up to V3.8 yet. Definitely avoid the Aminet release.
Warning: FBlit 3.84 is a fake : Comment 4 of 5ANN.lu
Posted by Stephen Illingworth on 08-Apr-2001 22:00 GMT
"meddles with the hard drive"? Any more information on what that means?
I can't say as I've noticed anything funny apart from the rogue processes.
Warning: FBlit 3.84 is a fake : Comment 5 of 5ANN.lu
Posted by K Harrison on 08-Apr-2001 22:00 GMT
In reply to Comment 4 (Stephen Illingworth):
I meant meddles as in accessing or trying to access files
which it shouldn't be, notably bsdsocket.library.
But please understand under no circumstances did i sit there
watching everything it was doing for too long a time, i'm not
going to sit and watch it play around with my system !
What I have done however, in the early hours when I first found this
malicious behaviour, is send the FBlit archive to Virus Help Denmark,
and to notify Aminet to remove StackAttack 1.2b and FBlit 3.84, and I can't
comment on BlazeWCP as having a backdoor, as I never saw it on the recent
uploads.
Anonymous, there are 5 items in your selection
Back to Top