[Rumour] IWNet being used to distribute viruses

[=98=]

Update: According to the makers of Avira Antivirus, the program that originally detected this "virus," this was indeed a case of a false-positive and the latest version of the software no longer makes the detection. Still, it is a good idea to keep some sort of AV running in the background. Better safe than sorry!

According to rumours spreading across the World Wide Interwebs, it is being alleged that a few bad eggs are using the P2P system controlled by IWnet to send packets laden with trojan viruses. It however has come to light that this could well be a case of false positives.

The story started when players noticed their anti viruses going mad. Reports are coming from lots of gamers, however it is unknown as of yet what the virus does, but it could be designed to install a keylogger to take passwords or even steal cd-keys.

So far, one certified virus is "TR/Crypt.XPACK.Gen" and should be considered armed and dangerous. Do not approach it at any means!

Whether or not it is a false positive, if you are playing Modern Warfare 2, be sure to always run a live ant virus scanner (scan on the fly) and firewall and be sure to keep both up to date. If you haven't got an anti virus, check out these free offerings:

Anti Virus

Avast Anti-Virus

AVG Anti Virus

Firewall

Windows Firewall (built in and good. Only recommended for Vista or Windows 7)

ZoneAlarm

Comodo

Be sure to keep an eye on TGN for the latest news (as well as your anti virus!)

[.Griff.]

Re: IWNet being used to distribute viruses

All these "reports" originate from people using Avira AV. Either Avira has come the most effective piece of AV software overnight, and all other AV software has missed this "Trojan", or it's simply a false positive.

If you, TGN, are going to recommend, and link to, AV software then atleast don't include a link to the AV client that caused all this fuss in the first place.

[Vreki]

Re: IWNet being used to distribute viruses

From IWet:

Apparently they are able to hack the server and send virus/trojans to people, in the process they run aimbot in the game, and send a non tagged member to the other team to TK.

quite a story those guys are.

This was the trojan they were trying to send;

TR/Crypt.XPACK.Gen


So is this IW idea of a joke when iwnet is suppose to be hack free when yet its probably less secure then a Windows 98 system with no protection?

From scanforfree.com:

TR/Crypt.XPACK.Gen also referred to as Trojan.Crypt.XPACK.Gen or Crypt.XPACK.Gen is a Trojan horse parasite that infects PC's via system security loopholes and allows outside hackers to gain control over the computer. Once infected, the TR/Crypt.XPACK.Gen trojan will use exploits to download and install additional malware and viruses onto the system without victims knowledge. Trojan Crypt.XPACK.Gen is usually infecting via corrupt media codec, AcitveX and Flash updates downloaded from questionable porn and freeware websites.TR/Crypt.XPACK.Gen trojan is a severe security risk that can track keystrokes and steal sensitive banking informations like credit card numbers and login passwords!

I am not saying that open ports isnt a security risk, but there could be other explanations

[.Griff.]

Re: IWNet being used to distribute viruses

Has anyone taken the trouble to look on Avira's support forum? I have...

After various people submitted the file(s) to Avira for further testing it was confirmed by "Avira's Virus Lab" that the file(s) were actually clean and this is indeed a false positive that will be resolved in the next update.

There's a specific thread on their forums about this "Trojan" cleared marked as "Solved".

[Solved] TR/Crypt.XPACK.Gen Trojan- in quarantine- is computer ok?


Nicolae Moldoveanu

Avira GmbH

Date of registration:
May 22nd 2006

Version: Avira Prem. Security Suite

Location: Bucharest


36

Yesterday, 11:45am
Hi,
The sample was re-analyzed and it is clean. The detection is already removed, just update.
Nicolae Moldoveanu
Avira GmbH

[=98=]

Re: IWNet being used to distribute viruses

All these "reports" originate from people using Avira AV. Either Avira has come the most effective piece of AV software overnight, and all other AV software has missed this "Trojan", or it's simply a false positive.

If you, TGN, are going to recommend, and link to, AV software then atleast don't include a link to the AV client that caused all this fuss in the first place.

I didn't realise it came from Avira users. I shall take that link down and will make it bold that it is a Rumour!

[Minmaster]

Re: [Rumour] IWNet being used to distribute viruses

lol stupid AV softwares...

i use microsoft security essentials (free) but turn off real time protection. you made me turn it on. and now i'll be turning it off again.

[=98=]

Re: [Rumour] IWNet being used to distribute viruses

lol stupid AV softwares...

i use microsoft security essentials (free) but turn off real time protection. you made me turn it on. and now i'll be turning it off again.

You should always run real time protection. It's makes so little resource impact (unless your PC is over 4 years old) that the benefits outweigh the negatives.

[Rogue Warrior]

Re: [Rumour] IWNet being used to distribute viruses

And as usual IW/Activision has "NO REPLY"

[The_Eliminator]

Re: [Rumour] IWNet being used to distribute viruses

Pfft i dont even have an anti virus anymore.

[=98=]

Re: [Rumour] IWNet being used to distribute viruses

And as usual IW/Activision has "NO REPLY"

They can't say anything until they have actually investigated it.

Plus, not running an AV is silly.

[=)BiT(= Evant3k]

Re: [Rumour] IWNet being used to distribute viruses

I don't run AV blotware, its a waste of time resources and computing power. My AV is logic don't download **** from fishy websites.

[M0ldyM!LK]

Re: [Rumour] IWNet being used to distribute viruses

False positives for sure, but I bet this gave someone a really "good" idea.

[=98=]

Re: [Rumour] IWNet being used to distribute viruses

I don't run AV blotware, its a waste of time resources and computing power. My AV is logic don't download **** from fishy websites.

That's stupid because even innocent websites can be hijacked to carry viruses.

iFrames was a massive example: http://hubpages.com/hub/IFRAME-Virus...malicious-code

Hell, even TGN was hit by iFrames at one point (think it was TGV at the time actually). But it goes to show, just saying I won't download from fishy websites isn't perfect. Better, but not great.

Anyway, I have Avast running 24/7 and it's currently using 26mb memory. That covers my web link, email client, instant messaging clients, torrent downloader, local network and general scanner.

It's using less than 1% CPU time as well.

[Minmaster]

Re: [Rumour] IWNet being used to distribute viruses

You should always run real time protection. It's makes so little resource impact (unless your PC is over 4 years old) that the benefits outweigh the negatives.

it will slow down my PC trying to scan every little new file that gets downloaded/created on my HD. even while i am in programs.

[[MyIS]Dan]

Re: [Rumour] IWNet being used to distribute viruses

it will slow down my PC trying to scan every little new file that gets downloaded/created on my HD. even while i am in programs.

The only time I have ever felt the effects of real time scanning is when I download a 1GB+ file, then it can take a little while, but as I download most big files via torrents the file gets broken down into pieces (uTorrent) so scanning 512kb files really has no effect.