Holy sh*t!!!!! "gr3pbot trojan horse is installed on your system"

ILikeSprite

Banned
Oct 14, 2001
1,772
0
0
The following window appeared on my screen.............



<< gr3pbot trojan horse is installed on your system
You are seeing this page because you have retrieved and executed a WarCraft 3 keygenerator which installed a trojan horse on your computer.

The trojan will put a client on EFNet IRC and is remotely controllable from there. The IRC channel used to control these trojans is now under control of EFNet administrators and operators, and all trojans seen joining this channel will now automatically direct you to this page and then remove themselves.

DO NOT RUN THE WARCRAFT 3 KEYGENERATOR AGAIN, as this will reinstall the trojan. In the future please do not trust such binaries.

A little addition. I've gotten several e-mails where people are quite annoyed for me giving them a trojan. I did NOT create this, the responsible person have been reported to proper authorities. I am an operator on the EFNet IRC network, I discovered these trojans, watched them a while to figure out how they work, then took control over the IRC channel they gathered in, for the purpose of automating trojan removal and user warning.


Best regards,

einride@EFNet

einride@einride.org
>>



btw, the file I ran was called "warcraft 3 key gen (1).EXE". this isn't the working one, it's some POS i got off kazaa! :|
 

BooneRebel

Platinum Member
Mar 22, 2001
2,229
0
0


<< btw, the file I ran was called "warcraft 3 key gen (1).EXE". this isn't the working one, it's some POS i got off kazaa! :| >>




BWAHAHAHAHAHAHAHAHAHA!

Guess you get what you pay for.

You need to contact Blizzard Technical Support right away to report this virus in order to prevent it's spread. Be sure to give them your name, phone number, and address so that they can send you the appropriate award & recognition for finding this flaw in the key generator. Their number is (949) 955-1382
 

docmanhattan

Golden Member
Jul 31, 2001
1,332
0
0


<<

<< btw, the file I ran was called "warcraft 3 key gen (1).EXE". this isn't the working one, it's some POS i got off kazaa! :| >>




BWAHAHAHAHAHAHAHAHAHA!

Guess you get what you pay for.

You need to contact Blizzard Technical Support right away to report this virus in order to prevent it's spread. Be sure to give them your name, phone number, and address so that they can send you the appropriate award & recognition for finding this flaw in the key generator. Their number is (949) 955-1382
>>

D/L-ing ANY executeable pulled from ANY file sharing app is a dumb, DUMB idea. Unless I knew the person I was getting the .EXE from, I wouldn't even consider running it. Too many monkeys that enjoy writing viruses out there.