[SlackerLX]

Download Warning on all Bitdefender products!!! Infected with pass sniffers!!.rar

Related Files: 1294, Download Speed: 9723 kb/s

I've tested all the Bitdefender products at this very forum and all the keymakers or patches are infected with Pass sniffing Trojan.PSW.Ldpinch

What makes it especially nasty that it's memory residing infection. Watch out!

Posting the log:

	=================================================================== = Spy Emergency 2008 Startup = Build: 5.0.305.0 = OS: Windows Vista+ 64-bit = Log File: 2008-07-02.txt =================================================================== =================================================================== Scan started at: 2008/07/02 22:03:23 =================================================================== Active scan type: Deep Processes scanned: 51 Registry items scanned: 90425 Cookies scanned: 15 Files scanned: 21756 Infections found: 3/3 Elapsed time: 08:33 Scan finished at: 2008/07/02 22:11:57 =================================================================== Memory shield: Found Infection signature at: c:\users\***\downloads\bit-defender-patch-by-7amada90.rar (AFC [FPC [2bdb5a3a6ace938a91e0a4184f7cb8fc]]) Infection Name: Trojan.PSW.Ldpinch Removal: Deleting c:\users\***\downloads\bit-defender-patch-by-7amada90.rar file Memory shield: Found Infection signature at: c:\users\***\downloads\bit_ts_2k8_64bit\bitdefender 2008 products keymaker.exe (FPC [2bdb5a3a6ace938a91e0a4184f7cb8fc]) Infection Name: Trojan.PSW.Ldpinch Removal: Deleting c:\users\***\downloads\bit_ts_2k8_64bit\bitdefender 2008 products keymaker.exe file Memory shield: Found Infection signature at: c:\users\***\downloads\bitdefender 2008 32 bit edition\bitdefender 2008 products keymaker.exe (FPC [2bdb5a3a6ace938a91e0a4184f7cb8fc]) Infection Name: Trojan.PSW.Ldpinch Removal: Deleting c:\users\***\downloads\bitdefender 2008 32 bit edition\bitdefender 2008 products keymaker.exe file

Download Warning on all Bitdefender products!!! Infected with pass sniffers!!.zip

Related Files: 6372, Download Speed: 4582 kb/s

You can also try to download it from our other Rapidshare Download Site

• Warning on all Bitdefender products!!! Infected with pass sniffers!! Alternative Link

[Denver1]

Thanks for this information SlackerLX, I'm sure many of our users will check into this!

[SlackerLX]

Just in case for whoever got this infection:

Virus PSW.LDPinch.p Information
Name: Trojan.PSW.LDPinch
Category: Password Capturer
Date: 2004-03-17
Dangerous: Yes
Trojan.PSW.LDPinch is Password Capturer - spyware.
You should remove it from your system as soon as possible.
This Password Capturer is also known as:
•Trj/Ldpinch.gen - named by Panda.
• Trojan Horse.LC - named by Panda.
• Trojan.PSW.LdPinch.dq - named by Kaspersky.
• Win32.Elkong.gen - named by Computer Associates.
• Win32/LDPinch.Variant!Trojan - named by Computer Associates.
To manually get rid of it, follow these instructions (at your own risk).

Trojan.PSW.LDPinch.p Removal Instructions :
Kill the following processes:
parser.exe, pinchbuilder.exe, trojan.psw.ldpinch.p.exe

Remove the following files:
parser.dpr, parser.exe, pinch.asm, pinch.dpr, pinch.tbp, pinchbuilder.cfg, pinchbuilder.dof, pinchbuilder.dpr, pinchbuilder.exe, pinchbuilder.res, trojan.psw.ldpinch.p.exe.

[shauzel]

Thank or the info

[SlackerLX]

After careful haxing of those keygens on Linux I figured that the virus sigs have been modified to bypass MAJOR AV engines, such as ESET, One Care, Bitdefender, Avira, KIS, Symantec, Outpost.

However, they are easily identified by less glamourous AVs. Spy Emergency of NETGATE Technologies, for instance does fantastic job

[ceedee]

will try. thanks.