03-13-2017, 02:19 PM
(03-12-2017, 12:00 AM)Tahoe Sands Wrote:Everyone kept telling me this was a "false positive" and it sort of seems legit, so I dug out an old laptop I didn't really care about and kept fooling around with the two Windows apps that were refusing to let me download the file. I finally got it downloaded and extracted from the RAR file. SURPRISE, no virus or trojan (so far anyway).[To see links please register here]
I got curious so I actually tried to determine what sort of virus the RAR archive file contains. It turns out to be a rather nasty Trojan virus...
Trojan:Win32/Spursint.T!cl
This threat can do one or all of the following:
• Download and install other malware.
• Use your computer for click-fraud.
• Record your keystrokes and the sites you visit.
• Send information about your PC, including usernames and browsing history, to a remote malicious hacker.
• Give a remote malicious hacker access to your PC.
So now I have to decide if having this tool is worth letting this virus loose on my machine. OR maybe some goonie out there has the skills to remove it from the RAR file. Anyone, anyone, Beuhler?
Now I just need to figure out how to use it. There are lots of little bits and pieces on how it works and how to use it spread out across the Goon Squad forums. I just need to copy it all into a nice text file so I can quickly find me references. If anything goes sideways, I will try to post it here.