wacatac.B!ml trojan

Home Page › Forums › General Chat › wacatac.B!ml trojan

Tagged: 

Viewing 7 posts - 1 through 7 (of 7 total)
  • Author
    Posts
  • #2048691
    Cage
    Participant
    Rank: Rank 3

    Hey everybody. Nice to see ya all again.

    So I downloaded this version of KeyShot cause I wanna do some product renders and am dissappointed cause it looks easy to use and like an industry standard. But I can't even extract the crack folder with 7zip because Windows Defender Blocks it, saying it has the trojan mentioned in the title. A Google search identifies it as real nasty...

    The Wacatac trojan virus is a malicious program that affects Windows devices. A Wacatac trojan can download and install other malware onto your computer, or record your keystrokes to steal personal information, such as login credentials or bank account details.

    Maybe the B!ml is a nicer sibling 😀

    Defender scans the files in the zip and comes up with the Trojan and the Keygen that shows as a hacktool. The keygen I can understand, sure. But that Trojan is bad.

    MalwareBytes only scans the zip file itself and comes up clean.

    The uploader has a couple of uploads here.

    https://zonegfx.com/author/safezone/

    Now I'm not 100% sure what to make of it, with false positives being a thing I can't discern. Didn't even make it to VirusTotal.

    Maybe somebody here knows better?


    @monkseye
    , @eelgoo

    #2048697
    eelgoo
    Moderator
    Rank: Rank 7

    I am no expert in the area of virii.

    Whilst realising that key gens are often triggered as malware / virus by security programs, I would still give it a wide berth.

    Those that are more tuned in to these issues will probably advise a sandbox approach, but I don't know enough about that to advise how to go about it.

    #2048706
    MelonLord
    Participant
    Rank: Rank 5

    I'd rather download from sites which have a good reputation. @cage you might want to take a look here

    #2048731
    Cage
    Participant
    Rank: Rank 3

    Hey thanks for all the help guys 🙂 Yeah I'm very skittish with pirated software.

    I usually download software from filecr.com, but even from there the version I downloaded was infected, it's making me wonder if there are clean copies available.

    Also with VirusTotal the maximum file upload size is 650mb. Some of the exes are larger than that. That in itself is suspicious to me. So I avoid those too.

    Guess I'm gonna have to checkout sandboxie how it works. Is it 100% secure though?

    I always thought of Zone as a relatively safe place for downloads other than Daz stuff, with the community aspect here. I hope somebody looks into it.

    #2049168
    tedthelearner
    Participant
    Rank: Rank-2

    The thing I've noticed before is a number of these full software installs are basically pulled from CGpeers and then posted here for the points, when I look up the posts from there the comments show all the flags and how many warnings there are about the specific infection. That's not saying every retail pack is infected but research it before installing, or as mentioned used sandboxie or an isolated VM, or just a spare HDD to install and check first.. for example looks like the last clean upload of keyshot pro on cgpeers was 11.2 Win a year ago.

    #2050292
    Cage
    Participant
    Rank: Rank 3

    the last clean upload of keyshot pro on cgpeers was 11.2 Win a year ago

    I would appreciate a link if that's possible. As far as I know it's a closed community. I don't think I need the latest version.

    Happy holidays everybody

    #2050355
    Ethiopia
    Participant
    Rank: Rank-1

    I thought CGPeers went under? I was a member for years but watched it degenerate with increasingly shitty releases full of crap. The mods either didn't care or had abandoned it.
    I guess it's back?

Viewing 7 posts - 1 through 7 (of 7 total)
  • You must be logged in to reply to this topic.

 

Post You Might Like