Avast WEBforum

Other => Viruses and worms => Topic started by: mhd on June 16, 2005, 11:15:23 PM

Title: avast! Killer
Post by: mhd on June 16, 2005, 11:15:23 PM
Hi all

While I was surfing the net, I found this topic, its author claims that he developed a code that it can be integrated with any virus or Trojan to stop  avast! processes and attacks the system.

I tried to attach with this topic two versions of that code, the first is written for avast!. The second is written for Kaspersky. Unfortunately, the forum doesn’t accept exe files.

The original topic is in Arabic: http://umm.biz/index.php?showtopic=18066


Title: Re: avast! Killer
Post by: kamulko on June 17, 2005, 12:12:38 AM
This site is something like a trap, I think. See the message I received by my browser:
Title: Re: avast! Killer
Post by: kamulko on June 17, 2005, 12:18:53 AM
Traceroute and Whois of this website. Is localized in the USA; the registrant is an Arabic person.

FIRST 2 SCREENSHOTS
Title: Re: avast! Killer
Post by: kamulko on June 17, 2005, 12:19:58 AM
second group...
Title: Re: avast! Killer
Post by: kamulko on June 17, 2005, 12:21:02 AM
last group...
Title: Re: avast! Killer
Post by: MFB on June 17, 2005, 12:44:19 AM
Hi all

While I was surfing the net, I found this topic, its author claims that he developed a code that it can be integrated with any virus or Trojan to stop  avast! processes and attacks the system.

I tried to attach with this topic two versions of that code, the first is written for avast!. The second is written for Kaspersky. Unfortunately, the forum doesn’t accept exe files.

The original topic is in Arabic: http://umm.biz/index.php?showtopic=18066




Agree. I recieved that note as well.  If he made a code that can stop avast!  why did he brag about it to the public?   ::)
Title: Re: avast! Killer
Post by: RejZoR on June 17, 2005, 07:59:07 AM
Code that can stop avast! ? Wow he must be a real genious ::) If people can kill Norton, then i really don't see why they couldn't avast!
I have researched this part long time ago. Actually when i started with AEC project.
Technically you can cripple any antivirus very easily, so crippling avast! is nothing special imo.
Title: Re: avast! Killer
Post by: xistenz on June 17, 2005, 08:15:44 AM
Jotti says its all clean.

Maybe alwil will want to put this in the virus database?  ::)

Doesn't seem to work though
Title: Re: avast! Killer
Post by: Fast on June 17, 2005, 01:35:43 PM
Hey guys. I'm not sure what the policy of the Avast! forum is concerning this kind of issues, but I for myself am not really fond of posting active links to malware here.
If you feel you must post issues like this, why not cripple the link so no accidental clicks are possible ?

I don't like this at all...
Title: Re: avast! Killer
Post by: mhd on June 17, 2005, 02:10:34 PM
Quote
If he made a code that can stop avast!  why did he brag about it to the public?   ::)
Because there was a challenge between him and another member in that forum.

Later, he announced another developed code that can stop avast!, I uploaded the files on my web space so you can check it on your systems, it doesn’t do any thing to your machine except shutting down avast!.

avast! Killer: http://files.mnm.hajznet.com/avast/AvasatKiller2.exe
Kaspersky Killer: http://files.mnm.hajznet.com/avast/KasperKiller.exe
Title: Re: avast! Killer
Post by: polonus on June 17, 2005, 04:18:42 PM
Hi folks,

I second Fasts opinion, no linking, not even deep linking to malware sites. We must protect our fellow posters, curiosity killed the cat says a good English saying. I think it is a brag really, a few alterations to a hosts file and I have killed whatever security program that links to me. Small hype. More interesting for us "What are the backgrounds, what's the way of infection, a  way to understand what happens, and most of all how to protect ourselves and others. The contents and mechanism of the vulnerability is interesting, not the working of it. Not the OMGF's (Oh My Grandfather's) but the OINFUW (Oh I Now Fully Understand Why).

Greets,

polonus
Title: Re: avast! Killer
Post by: mhd on June 17, 2005, 08:47:25 PM
Hi all

I am glad to announce that avast! released a cure for that code. In spite it doesn't do any thing harmful for your machine (except it shuts down avast!), avast! alerts you about it.

Thank you avast for your fast respond.
Title: Re: avast! Killer
Post by: essexboy on June 17, 2005, 11:06:39 PM
This is now the advantage of ZA6 when I tried to run this (system restored, all spyware tools at the ready, yesterdays backup to hand) I got a pop up (dangerous actions) informing me that avastkiller was trying to shutdown ashserve.  So I said no way Jose (I think thats how you spell it).  ZA6 is now looking much better than I originally thought.  Live dangerously - I reformat every 6 months anyhow -  ;D ;D
Title: Re: avast! Killer
Post by: MFB on June 18, 2005, 03:33:58 AM
This is now the advantage of ZA6 when I tried to run this (system restored, all spyware tools at the ready, yesterdays backup to hand) I got a pop up (dangerous actions) informing me that avastkiller was trying to shutdown ashserve.  So I said no way Jose (I think thats how you spell it).  ZA6 is now looking much better than I originally thought.  Live dangerously - I reformat every 6 months anyhow -  ;D ;D
The new Zone Alarm 6 seem to cover avast!'s back now.   ;D
Title: Re: avast! Killer
Post by: Dwarden on June 21, 2005, 01:55:45 PM
stop unprotected service and program ... rofl ... that's special code? :) .... haha good joke really ...
Title: Re: avast! Killer
Post by: Fast on June 21, 2005, 08:32:15 PM
This is now the advantage of ZA6 when I tried to run this (system restored, all spyware tools at the ready, yesterdays backup to hand) I got a pop up (dangerous actions) informing me that avastkiller was trying to shutdown ashserve.  So I said no way Jose (I think thats how you spell it).  ZA6 is now looking much better than I originally thought.  Live dangerously - I reformat every 6 months anyhow -  ;D ;D

How do you get ZA6 ?
When I visit Zonelabs the latest version is 5.5xxxxx
Where's the 6 ?
Fast ???
Title: Re: avast! Killer
Post by: MFB on June 21, 2005, 08:36:25 PM
ZA 6 is just in beta at this moment. 
Title: Re: avast! Killer
Post by: Fast on June 21, 2005, 08:39:01 PM
Aha, that explains it. I will be patient then.
Thank you for the info. :)

Fast
Title: Re: avast! Killer
Post by: essexboy on June 21, 2005, 08:42:18 PM
Quote
How do you get ZA6 ?
When I visit Zonelabs the latest version is 5.5xxxxx
Where's the 6 ?
Fast Huh


If you want it it is here http://download.zonelabs.com/bin/free/beta/index.html
Title: Re: avast! Killer
Post by: Fast on June 21, 2005, 08:43:55 PM
Thanks, I'll have a look.  :)

Fast
Title: Re: avast! Killer
Post by: budd512 on June 26, 2005, 07:26:07 AM
Hey guys. I'm not sure what the policy of the Avast! forum is concerning this kind of issues, but I for myself am not really fond of posting active links to malware here.
If you feel you must post issues like this, why not cripple the link so no accidental clicks are possible ?

I don't like this at all...

I totally agree with this. Additionally, i don't think it would be difficult to kill any antivirus or anti-spyware software...