someone has received an email from blackd forums?

[firestone chetos]

hey, someone received an email from blackd creator, daniel, telling us to change everything cuz there are some corrupted files, i want to ask if someone else receive it??

[Royaliti]

hey, someone received an email from blackd creator, daniel, telling us to change everything cuz there are some corrupted files, i want to ask if someone else receive it??

Yea i got one.

[firestone chetos]

Yea i got one.

lol!!! i downloaded yesterday a program of the ping from their site, man!! give me a clue, must i change my hdd and change everything to my pc (i am safe now) cuz i don´t know if that program has a virus or something and i downloaded yesterday!!!

PD: blackdping, i tested yesterday because someone from this forum send me link, i searched manually, and it didin´t work on my pc (windows 7) but i want to know if it was because it doesn´t work on win7 or it´s because it was infected and they´re waiting dude, OMG im paranoic!

[Royaliti]

lol!!! i downloaded yesterday a program of the ping from their site, man!! give me a clue, must i change my hdd and change everything to my pc (i am safe now) cuz i don´t know if that program has a virus or something and i downloaded yesterday!!!

I have no clue, just scan your computer.

[firestone chetos]

Hello,
I discovered (and deleted) some evil files while I was doing forum maintenance in blackdtools.com.
It is very possible that a hacker managed to read the forum passwords of everybody through some kind of exploit in the old forum version.
Forum version is now updated and it should be safer now, but everybody needs to change forum password.

Please login in the forum, go to your Settings menu, then go to Edit Email & Password.
Just change the password (You don't need to change email)


Kind regards,

- Daniel (Blackd)

[firestone chetos]

i don´t have antivirus!

[Furpan]

i don´t have antivirus!
I suggest Eset Smart Security with trial keys, very subtle antivirus program.

[NeeP]

i don´t have antivirus!

how can someone seriously run around with no antivir on his pc?! especially if he downloads programs from unknown not safe sources. and then cry if their accs get hacked or soemthing.

[firestone chetos]

i just downloaded esset antivirus and scan it at fastest way, i get 2 virus:

*win32/installbrain.AP--------->at uninstall program trying to get access to explorer.exe... something like that
*filescout.exe----------->it was find at windows/roaming, etc...

i desinfected my pc, before that i changed all my info obisuly, i don´t know if those virus are malware/spyware or trojans, somebody help??

[DarkstaR]

how can someone seriously run around with no antivir on his pc?! especially if he downloads programs from unknown not safe sources. and then cry if their accs get hacked or soemthing.

No AV here. yuh8in?

[ozkl]

No AV here. yuh8in?

Get him! He has no antivirus!
Send him all dem viruzes.

[DarkstaR]

Get him! He has no antivirus!
Send him all dem viruzes.

Anyone who thinks AV = protection is deluded. That's the general consensus of the entire infosec community.

[firestone chetos]

Get him! He has no antivirus!
Send him all dem viruzes.

too late!


Anyone who thinks AV = protection is deluded. That's the general consensus of the entire infosec community.

i downloaded avast and esset antivirus, idk if it´s enough?

[DarkstaR]

If you have a Tibia related virus, there's a 99% chance no AV is going to find it.

[firestone chetos]

about esset?

[Kimpan90]

The only protection on the internet is common sense.

[Xeno Scripts]

how can someone seriously run around with no antivir on his pc?! especially if he downloads programs from unknown not safe sources. and then cry if their accs get hacked or soemthing.

I don't have! :)

[NeeP]

No AV here. yuh8in?

maybe cuz you dont have avira's antivir but another antivirus program on your computer?
ye I'm hatin much!!!
btw why should a tibia related virus be undetectable? most tibiaviruses are just simple keyloggers.
and common sense helps ofc but i remember even tibia.wikia.com had a drive by virus and everyone with common sense wouldn find anything suspicius on that site. since there is no reason to NOT have an antivirus program (except of maybe 1% cpu and a 100 MB on your HDD or soemthing, just as comparison: the screenshots of Xeno of a week are already 2 GB for me ^^) everyone should have one. And also some people don't have common sense and people arent always right.
I didnt say it makes you totally safe. That's ofc impossible since new viruses are getting created every day and as antivir company the only thing you can is react on already existing viruses. So antivir will be always a little time too late.

[NeeP]

I don't have! :)

lol any drive by virus can get your pc :D even kids get told in school to never surf without antivir. also theres no reason to NOT have one while having one decreases the risk of getting hacked etc

[firestone chetos]

i´m fine, (btw) thank you all, i sent that crappy viruses to the hell abyss!

[thorekz]

No AV here too since a couple of years now
i just dont download random crap from internet and i havent been hacked ever

[pallyy]

i have downloaded blackd mc you think i got it to?

[dinmamma]

i have downloaded blackd mc you think i got it to?

Wasn't it only concerning the forum accounts? No files afaik.

[DarkstaR]

btw why should a tibia related virus be undetectable? most tibiaviruses are just simple keyloggers.

100% wrong.

[NeeP]

100% wrong.

ye right the best virus creators team up to creat the best undetectable and most advanced keylogger cuz ofc they think its so profitable to steal some kid's tibia acc that they can sell maybe for some bucks. Hacking companies by viruses and stealing information which can be worth some hundreds of thousend euros is ofc less profitable and thus less attractive to virus creators.


http://www.youtube.com/watch?v=MyjiBhJBdSo


http://www.youtube.com/watch?v=rJn4boW-LXM

;) check those viruses and tell me if their are undetectable

[NeeP]

No AV here too since a couple of years now
i just dont download random crap from internet and i havent been hacked ever

to get viruses you dont need to download soemthing. there are thigns called drive by downloads which are idk how it excactly works but you just visit a page and it downloads itself. i guess to be safe without antivir you need to disable ANY plugin such as flash player, shockwave, java etc. If you just surf at plain text sites then its ok ;) but nobody uses the web just as plain text

[reecey]

i don´t have antivirus!

Chill, it was me who linked you and ive scanned it with Avast and MBAM. The pinger is safe.

[dinmamma]

You have to run it as admin firestone chetos
Otherwise it won't show anything.

[reecey]

You have to run it as admin @firestone chetos (http://forums.xenobot.net/member.php?u=472)
Otherwise it won't show anything.

The pinger is broken, it gives me 5000ms pings to every game world, the same happened to him.

[DarkstaR]

ye right the best virus creators team up to creat the best undetectable and most advanced keylogger cuz ofc they think its so profitable to steal some kid's tibia acc that they can sell maybe for some bucks. Hacking companies by viruses and stealing information which can be worth some hundreds of thousend euros is ofc less profitable and thus less attractive to virus creators.

You must be a fucking retard. Lol. Arguing with the professional like you're going to win the battle? I'm not even going to give you the time of day because you're so far off base that you'll not even know what the hell I'm talking about.

[RoxZin xD]

I smell Darkslap on this thread.

[NeeP]

Tibia is a fucking game, an internet game. You really believe there are people who create undetectable viruses? For Tibia? what next? :D
DarkstaR you can claim anything but without proof it's nothing. Send me some virus pls that I can't detect and its ok. But until then you just base your argumentation on unproofed claims

[firestone chetos]

You have to run it as admin firestone chetos
Otherwise it won't show anything.


yeah, chat with daniel peña, he told me that, it´s okay, just concerning to some tools and not all downloads, i checked all with esset antivirus and now it´s okay, after that 2 viruses that idk where i get it (tibiamaps.org??) but keep warning, maybe from some tibia fansite, tools or proxys downloads... i really don´t remember where i get that viruses, anyway it is rubbish now.

[dedi]

Tibia is a fucking game, an internet game. You really believe there are people who create undetectable viruses? For Tibia? what next? :D
DarkstaR you can claim anything but without proof it's nothing. Send me some virus pls that I can't detect and its ok. But until then you just base your argumentation on unproofed claims

Making viruses to Tibia or other games is safer than breakin into company to get some info. Any kid won't call police if he lose crown set, company will if they lose imporntant data...

[DarkstaR]

Making viruses to Tibia or other games is safer than breakin into company to get some info. Any kid won't call police if he lose crown set, company will if they lose imporntant data...

Don't worry about him. He thinks he knows more about hacking concepts than the bot developer who gives talks at hacking conferences.

[NeeP]

Don't worry about him. He thinks he knows more about hacking concepts than the bot developer who gives talks at hacking conferences.

I never said I know more but I would love to know from you why u think hackers and virus creators who are able to make undetectable viruses are focussing on tibia. never seen an undetectable virus yet. so proove me wrong.

[DarkstaR]

I never said I know more but I would love to know from you why u think hackers and virus creators who are able to make undetectable viruses are focussing on tibia. never seen an undetectable virus yet. so proove me wrong.

Virus detection relies on 2 methods:

#1: Signature detection
#2: Predictive heuristics

Hacking Tibia relies on only 3 abilities:

#1: Run when tibia runs
#2: Read memory (not keylogging, like 99% of the community thinks)
#3: send network data


Now let's take a look at the detection methods and intersect them with Tibian viruses:

#1: Signature detection wont work. Virus companies only develop signatures for wide-spread viruses that have been analyzed by professional malware analysts. Every time Tibia updates, the virus will change, and therefore the signature will change, causing it to be FUD (fully undetectable) again. So, even if the AV companies did get a signature (unlikely), it would take months got it to get into their database, and the signature would be obsolete by that time.

#2: Heuristics wont work. The main point of heuristics is to detect packed executables, system rootkits, keyloggers, and software which tries to stay persistent. Since most Tibian viruses are in the form of bots or MCs, they can easily run when Tibia runs without a need for persistence. They can also modify Tibia to load them automatically, which can still be detectable in some cases, but is easy to hide and highly effective. Since all a Tibian virus does is read account and password from memory, and then send that over the network, they usually don't get detected by signatures or other simple heuristics, so packers and rootkits aren't needed. This is because many legitimate programs do similar things (hell, XenoBot reads memory and sends network data hundreds of times per hour), so detecting it without much more solid predictive points would cause many false positives in the real world.


Conclusion:

With just a little bit of care and misdirection, Tibia viruses can be made that wont be detected. It doesn't take some malware development god. I can do it in my sleep. And you made me waste 10 minutes explaining why, instead of just taking my word for it, you annoying little cunt.

[NeeP]

Virus detection relies on 2 methods:

#1: Signature detection
#2: Predictive heuristics

Hacking Tibia relies on only 3 abilities:

#1: Run when tibia runs
#2: Read memory (not keylogging, like 99% of the community thinks)
#3: send network data


Now let's take a look at the detection methods and intersect them with Tibian viruses:

#1: Signature detection wont work. Virus companies only develop signatures for wide-spread viruses that have been analyzed by professional malware analysts. Every time Tibia updates, the virus will change, and therefore the signature will change, causing it to be FUD (fully undetectable) again. So, even if the AV companies did get a signature (unlikely), it would take months got it to get into their database, and the signature would be obsolete by that time.

#2: Heuristics wont work. The main point of heuristics is to detect packed executables, system rootkits, keyloggers, and software which tries to stay persistent. Since most Tibian viruses are in the form of bots or MCs, they can easily run when Tibia runs without a need for persistence. They can also modify Tibia to load them automatically, which can still be detectable in some cases, but is easy to hide and highly effective. Since all a Tibian virus does is read account and password from memory, and then send that over the network, they usually don't get detected by signatures or other simple heuristics, so packers and rootkits aren't needed. This is because many legitimate programs do similar things (hell, XenoBot reads memory and sends network data hundreds of times per hour), so detecting it without much more solid predictive points would cause many false positives in the real world.


Conclusion:

With just a little bit of care and misdirection, Tibia viruses can be made that wont be detected. It doesn't take some malware development god. I can do it in my sleep. And you made me waste 10 minutes explaining why, instead of just taking my word for it, you annoying little cunt.

still, only because some ppl can do undetectable viruses, there's no reason to have no AV at all. It's like driving a car without any security measures cuz 60% of all crashes are deadly anyway, with or without security measures. Means, you still can filter out alot of detectable viruses. That's why there are AV on the market, even for free. If the general opinion on it would be like you said, it's useless anyway why would ppl then make those AV? Not all AV are paid so it's not the profit they are aiming for

[DarkstaR]

still, only because some ppl can do undetectable viruses, there's no reason to have no AV at all. It's like driving a car without any security measures cuz 60% of all crashes are deadly anyway, with or without security measures. Means, you still can filter out alot of detectable viruses. That's why there are AV on the market, even for free. If the general opinion on it would be like you said, it's useless anyway why would ppl then make those AV? Not all AV are paid so it's not the profit they are aiming for

I never said anything about that. I said two completely unrelated things:

#1: I don't use an AV
#2: Tibian viruses aren't detected by AV

There is no relation intended those two statements. So why the hell are you trying to find a reason to correct me? If you want to use an AV, fine, use one. But I don't. Because I have better methods of defense and common sense.

[NeeP]

I never said anything about that. I said two completely unrelated things:

#1: I don't use an AV
#2: Tibian viruses aren't detected by AV

There is no relation intended those two statements. So why the hell are you trying to find a reason to correct me? If you want to use an AV, fine, use one. But I don't. Because I have better methods of defense and common sense.

which methods of defense are better than AV?

[DarkstaR]

which methods of defense are better than AV?

Common sense plus a firewall. Anything that gets passed a good firewall on it's own will be using a 0-day exploit. If you're using a z-day, you have some serious juice and definitely have already evaded any anti-virus. The only other way to get on the system (and the most common way) is by exploiting a much less solid system: the human brain. Social engineering is the main distribution method for malware and the only way to prevent it is common sense.

Good examples that back this up can be found all over the place. Stuxnet, for instance, used a chain of 20 z-days and was undetected by AV's for 3+ years. However, things like RAT's and trojans, for instance, are all detected by AV's but have no z-days for spreading, and use social engineering to spread.

[spudger]

which methods of defense are better than AV?
common sense for example....
like : DOWNLOAD THIS TIBIA CASH BOT AND EARN 100KK IN 10 MINUTES , NO VIRUSES 100% SAFE , WOULD U DOWNLOAD IT ?
no! it's Common sense not to do it

[NeeP]

common sense for example....
like : DOWNLOAD THIS TIBIA CASH BOT AND EARN 100KK IN 10 MINUTES , NO VIRUSES 100% SAFE , WOULD U DOWNLOAD IT ?
no! it's Common sense not to do it

yes for example i know that....
go away little bug