Warning : MDKII update infected with Virus !

[9lives]

Date: 1/7/01 Time: 15:41:04
Rule "Default Block Spy Sender Trojan" stealthed (ninepc-i1,1807). Details:
Inbound TCP connection
Local address,service is (ninepc-i1,1807)
Remote address,service is (ballcap.bioware.com,ftp-data)
Process name is "J:\PROGRAM FILES\MDK2\UPDATE.EXE"

 

[NicColt]

so you got this from the original MDK2 cd ?

 

[damocles]

ack, thats a worry

 

[9lives]

yes, orginal MDKII. came with my SB Live DE 5.1

 

[NicColt]

you normally see this on pirated software, these trojan's piggyback on the distributed software and nicely fit onto your computer, once there and if you don't have a firewall you putter get's pinged to see if you have a RAT "Remote Administration Tool" in this case the Spy Sender trojan. This permits the hacker to "access" your computer to do whatever they want todo, this is also how Denial of Service attacks are made. If you have Norton Internet Security, it will pick it up and will also stop the Ping's from comming into your putter. However what is unusual is that you said it came from the Original CD, that aint right.

 

[9lives]

ok, anyone have SB LIVE Pentinum/DE/Gamer 5.1 version? MDK2 came with it. Why not you try to run update from the game?

This is very serious, thanks NicColt for the info. I will noticed others on other forums.