SRO Patch Trojan

Diz · Post by **Diz** » Tue May 22, 2007 10:41 pm

About that trojan...i never got a trojan from that patch, my virus scanner didn't pick it up when the patch was finished so i did a manual scan and still nothing...did everyone get the trojan, or only a few people?

So i wanted to see how many got the trojan or didn't, if you did vote yes, if you didn't vote no. Thanks.

tyfly · Post by **tyfly** » Tue May 22, 2007 10:45 pm

they re patched it, so anyone who didn't update rate when server inspection was complete are fine, hopefully... knowing Joymax my computer is gonna blow up in about a month :shock:

NuclearSilo · Post by **NuclearSilo** » Tue May 22, 2007 10:57 pm

Scan from latest version.
AhnLab-V3 2007.5.21.1 05.22.2007 no virus found
AntiVir 7.4.0.27 05.22.2007 no virus found
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 05.22.2007 no virus found
AVG 7.5.0.467 05.22.2007 no virus found
BitDefender 7.2 05.22.2007 no virus found
CAT-QuickHeal 9.00 05.22.2007 no virus found
ClamAV devel-20070416 05.22.2007 no virus found
DrWeb 4.33 05.22.2007 no virus found
eSafe 7.0.15.0 05.21.2007 no virus found
eTrust-Vet 30.7.3654 05.23.2007 no virus found
Ewido 4.0 05.22.2007 no virus found
FileAdvisor 1 05.23.2007 no virus found
Fortinet 2.85.0.0 05.22.2007 no virus found
F-Prot 4.3.2.48 05.22.2007 no virus found
F-Secure 6.70.13030.0 05.23.2007 no virus found
Ikarus T3.1.1.8 05.22.2007 no virus found
Kaspersky 4.0.2.24 05.23.2007 no virus found
McAfee 5036 05.22.2007 no virus found
Microsoft 1.2503 05.22.2007 no virus found
NOD32v2 2285 05.22.2007 no virus found

DarkLaw · Post by **DarkLaw** » Tue May 22, 2007 10:59 pm

NuclearSilo wrote:Scan from latest version.
AhnLab-V3 2007.5.21.1 05.22.2007 no virus found
AntiVir 7.4.0.27 05.22.2007 no virus found
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 05.22.2007 no virus found
AVG 7.5.0.467 05.22.2007 no virus found
BitDefender 7.2 05.22.2007 no virus found
CAT-QuickHeal 9.00 05.22.2007 no virus found
ClamAV devel-20070416 05.22.2007 no virus found
DrWeb 4.33 05.22.2007 no virus found
eSafe 7.0.15.0 05.21.2007 no virus found
eTrust-Vet 30.7.3654 05.23.2007 no virus found
Ewido 4.0 05.22.2007 no virus found
FileAdvisor 1 05.23.2007 no virus found
Fortinet 2.85.0.0 05.22.2007 no virus found
F-Prot 4.3.2.48 05.22.2007 no virus found
F-Secure 6.70.13030.0 05.23.2007 no virus found
Ikarus T3.1.1.8 05.22.2007 no virus found
Kaspersky 4.0.2.24 05.23.2007 no virus found
McAfee 5036 05.22.2007 no virus found
Microsoft 1.2503 05.22.2007 no virus found
NOD32v2 2285 05.22.2007 no virus found

O.o

Avg says im clear so im in the clear :wink:

Avg

NuclearSilo · Post by **NuclearSilo** » Tue May 22, 2007 11:03 pm

But that's only sro_client.exe, i wonder if they inject another trojan in other big file like data.pk2

DarkLaw · Post by **DarkLaw** » Tue May 22, 2007 11:09 pm

lol i just scanned the whole file with avg tbh (Which is over 1.3Gb) :shock:

Senjai · Post by **Senjai** » Tue May 22, 2007 11:14 pm

By definition, a Trojan can be any malicious program or any program at all that is booted up froma nother program to download or upload files, just because it said its a trojan means nothing, it could just be an un masked silkroad network protocol

PureOwnage · Post by **PureOwnage** » Tue May 22, 2007 11:15 pm

omfg there are like 20 posts on this stop making posts on the same subject ......

Diz · Post by **Diz** » Wed May 23, 2007 12:01 am

PureOwnage wrote:omfg there are like 20 posts on this stop making posts on the same subject ......

Yea, but this is the only one with a poll so far, beat that!

I also scanned the whole SRO folder and didn't find anything after the patch, so i guess they fixed it.

Drew_Benton · Post by **Drew_Benton** » Wed May 23, 2007 12:03 am

Read the new notice.

cin · Post by **cin** » Wed May 23, 2007 12:05 am

lol if theres a trojan in there and it farks up my laptop, ill just format again.

whats the fuzz about? nowadays you get trojans from almost anything

i did get a message string error or something with the latest update. didnt
get the start button. i just logged off my laptop, logged back in and it worked.

^^

Diz · Post by **Diz** » Wed May 23, 2007 12:08 am

cin wrote:lol if theres a trojan in there and it farks up my laptop, ill just format again.

whats the fuzz about? nowadays you get trojans from almost anything

i did get a message string error or something with the latest update. didnt
get the start button. i just logged off my laptop, logged back in and it worked.

^^

Very true... :arrow:

jdoex · Post by **jdoex** » Wed May 23, 2007 12:13 am

Meh all they probably did was twiddle a few bits so it wouldn't trigger the antivirus.
Its a large .exe file its not surprising that there will be a pattern of bits that matches some signature of a virus or trojan. Big whooop. Thats why software installers _always_ tells you to disable the antivirus when installing so dumb stuff like this doesn't happen.

BTW...Joymax doesn't have to use some _known_ trojan to access computer info. The program itself already has access to whatever it needs on your computer. Antivirus aren't smart enough to figure out if its _acting_ like a trojan...only that the files _look_ like one. Well some are smart and do behavior analysis, but it sure as hell isn't gonna stop SRO from deleting everything in your home directory if it wanted to.

Mahnitu · Post by **Mahnitu** » Wed May 23, 2007 1:04 am

i know a trojan is bad but what is it realy,explain a bit

NuclearSilo · Post by **NuclearSilo** » Wed May 23, 2007 1:11 am

Mahnitu wrote:i know a trojan is bad but what is it realy,explain a bit

http://en.wikipedia.org/wiki/Trojan_hor ... mputing%29

This remind me the film "Troy" with Brad Pitt

MrJoey · Post by **MrJoey** » Wed May 23, 2007 1:27 am

jdoex wrote:Meh all they probably did was twiddle a few bits so it wouldn't trigger the antivirus.
Its a large .exe file its not surprising that there will be a pattern of bits that matches some signature of a virus or trojan. Big whooop. Thats why software installers _always_ tells you to disable the antivirus when installing so dumb stuff like this doesn't happen.

BTW...Joymax doesn't have to use some _known_ trojan to access computer info. The program itself already has access to whatever it needs on your computer. Antivirus aren't smart enough to figure out if its _acting_ like a trojan...only that the files _look_ like one. Well some are smart and do behavior analysis, but it sure as hell isn't gonna stop SRO from deleting everything in your home directory if it wanted to.

You do realize that above the text spot for adding a post, there's buttons for underlining? Same for bold, and italics. Try using rather than _going_ _like_ _this_ _which_ _is_ _completely_ _retarded._

1337BLADER · Post by **1337BLADER** » Wed May 23, 2007 3:43 am

Complete scanning result of "sro_client.exe", received in VirusTotal at 05.23.2007, 05:32:27 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.5.21.1 05.22.2007 no virus found
AntiVir 7.4.0.27 05.22.2007 TR/Spy.VB.QP.59
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 05.22.2007 no virus found
AVG 7.5.0.467 05.22.2007 no virus found
BitDefender 7.2 05.23.2007 no virus found
CAT-QuickHeal 9.00 05.22.2007 no virus found
ClamAV devel-20070416 05.23.2007 no virus found
DrWeb 4.33 05.22.2007 no virus found
eSafe 7.0.15.0 05.21.2007 no virus found
eTrust-Vet 30.7.3654 05.23.2007 no virus found
Ewido 4.0 05.22.2007 no virus found
FileAdvisor 1 05.23.2007 no virus found
Fortinet 2.85.0.0 05.23.2007 Spy/VB
F-Prot 4.3.2.48 05.22.2007 no virus found
F-Secure 6.70.13030.0 05.23.2007 no virus found
Ikarus T3.1.1.8 05.22.2007 no virus found
Kaspersky 4.0.2.24 05.23.2007 no virus found
McAfee 5036 05.22.2007 no virus found
Microsoft 1.2503 05.22.2007 no virus found
NOD32v2 2285 05.22.2007 no virus found
Norman 5.80.02 05.22.2007 no virus found
Panda 9.0.0.4 05.23.2007 no virus found
Prevx1 V2 05.23.2007 no virus found
Sophos 4.17.0 05.23.2007 no virus found
Sunbelt 2.2.907.0 05.17.2007 no virus found
Symantec 10 05.23.2007 no virus found
TheHacker 6.1.6.120 05.21.2007 no virus found
VBA32 3.12.0 05.22.2007 no virus found
VirusBuster 4.3.23:9 05.22.2007 no virus found
Webwasher-Gateway 6.0.1 05.23.2007 Trojan.Spy.VB.QP.59

Aditional Information
File size: 7598080 bytes
MD5: 1d9e4b97959bb4b19d974c05f3274733
SHA1: 8facdd74de8daf355398420b5af1f0fdaa45b669

jdoex · Post by **jdoex** » Wed May 23, 2007 4:42 am

You do realize that above the text spot for adding a post, there's buttons for underlining? Same for bold, and italics. Try using rather than _going_ _like_ _this_ _which_ _is_ _completely_ _retarded._

Sorry I'm just used to typing in an ASCII only environment that has no HTML.

Hmm...only 2/32 checks register a threat. False positive to me.

Kill_4_FooD · Post by **Kill_4_FooD** » Wed May 23, 2007 5:25 am

i think joymax is going after modded clients :roll:

bladecarlo · Post by **bladecarlo** » Wed May 23, 2007 6:04 am

poiule · Post by **poiule** » Wed May 23, 2007 6:06 am

hey guy
you got trojan in the patch?
so crazy and I got it too
and I donno what to do then
shiiit! curses!

Silkroad Online Forums

SRO Patch Trojan

Did you get a trojan after the new patch for silkroad?

SRO Patch Trojan