PDA

View Full Version : crack-loactor spyware mirrors


sebfernando
August 9th, 2004, 02:39 PM
there are loadeds of crack-locator mirrors on the web

They appear on the web search engines (yahoo, google) when you search for legal freeware apps, hacked versions of p2p apps (e.g overnet lite) and other legal trailware.

went on one mirror accidently while looking for ares file sharing app and found my browser had downloaded a trojan. I cant find the log of my virus scanner so i cant give much detailed info on the virus, but i do know a bit about it. Its a trojan which sits in your internet temp folder where all your cookies are stored and it has to be manually exectued for effects to happen, its a key logger and backdoor trojan It can be deleted by running a scan from ur virus scan.

Other than the the trojan, the website auto installs 1 browser hijack and 5 regestery edits along with 7 sim advert popups.

I did a whois lookup on the domain and it came up with

Registered Domains: 41,253,157
On-Hold Domains: 1,761,606
Search Term: wwwcrack-locator
Matches Found: 109

list of all crack locator mirrors (http://www.whois.net/search.cgi2?str=wwwcrack-locator&Search=Search&last_str=wwwcrack-locator&page=1)

Im warning you, because i saw a person saying to go on crack-locator in the thread "DVDXCOPY = illegal "

I hope this post is useful to people and will save a few computers from being hijacked by spammers.

zaphodiv
August 9th, 2004, 03:42 PM
It should not be possible for a website to install software on your computer without your knowledge or permission.Dump IE and install firefox.

black_magiic
August 9th, 2004, 03:50 PM
definately get rid of IE I made the move almost a year ago and I could never go back

ducttapeBigSexy
August 9th, 2004, 03:56 PM
Yep, Firefox - with IE, people can install whatever they want to on your computer - with Firefox, you need to give it explicit permission - www.getfirefox.com

sebfernando
August 10th, 2004, 01:49 AM
OK i tested firefox (0.93) on an old computer and went to one of the crack-locator mirrors.
It still installs a trojan on your computer and the regestry edits still happen. however with the adblock filter there were no pop ups or browser hijack.

BUT, there is no comparison between firefox and M$ IE as firefox is very much more reliable.

juliana65
September 3rd, 2008, 06:08 AM
They appear on the web search engines (yahoo, google) when you search for legal freeware apps, hacked versions of p2p apps (e.g overnet lite) and other legal trailware.went on one mirror accidently while looking for ares file sharing app and found my browser had downloaded a trojan. I cant find the log of my virus scanner so i cant give much detailed info on the virus, but i do know a bit about it. Its a trojan which sits in your internet temp folder where all your cookies are stored and it has to be manually exectued for effects to happen, its a key logger and backdoor trojan It can be deleted by running a scan from ur virus scan.
-------------------------------------------------------
juliana