Porn dialer found in NAV key cracker (scan results)

[Virus Guy]

The file in question (see below) was downloaded in Feb this year
(from, I believe, www.thecrack.net).

I never ran it. NAV and The Cleaner (my 2 main AV progs) did not (and
still do not) detect it as a threat. While doing a de-frag on the
drive (by having it slaved to an alternate computer) I ran Spybot and
it was the one that alerted me to the problem with this file (!).

I then submitted it as described. Clearly, many AV programs are
behind the curve with this one. I'm surprised that Spybot found it.
I guess we should consider it as a legit piece of AV software?

-------------------------

Files scanned by Jotti are indicated by ??.??.???? in the date field.
(http://virusscan.jotti.org/)

Other results come from Virustotal. Duplicate scans are not repeated
(unless they differ, which none do in this case).

09/23/2005
File: "Norton_Antivirus_2003__by_Napster_GSMPT_create_keys.exe"

BitDefender 7.2 09.23.2005 Application.Pornware.Kitt.A
ClamAV devel-20050917 09.22.2005 Pornware.KittenSex
DrWeb 4.32b 09.23.2005 Trojan.StartPage.870
F-Prot 3.16c 09.23.2005 security risk or a "backdoor" program
Kaspersky 4.0.2.24 09.23.2005
not-a-virusorn-Tool.Win32.NortonCrack
McAfee 4588 09.22.2005 potentially unwanted program
Dialer-Generic
Panda 8.02.00 09.23.2005 Adware/Startpage.ADH
TheHacker 5.8.2.114 09.22.2005 Dialer/generic
VBA32 3.10.4 09.21.2005 PornWare.Tool.NortonCrack
Fortinet ??.??.???? Found Dial/Generic.5111

AntiVir 6.32.0.6 09.23.2005 no virus found
ArcaVir ??.??.???? Found nothing
Avast 4.6.695.0 09.23.2005 no virus found
AVG 718 09.22.2005 no virus found
Avira 6.32.0.6 09.23.2005 no virus found
CAT-QuickHeal 8.00 09.22.2005 no virus found
eTrust-Iris 7.1.194.0 09.23.2005 no virus found
eTrust-Vet 11.9.1.0 09.23.2005 no virus found
Ikarus 0.2.59.0 09.22.2005 no virus found
NOD32v2 1.1230 09.22.2005 no virus found
Norman 5.70.10 09.23.2005 no virus found
Symantec 8.0 09.22.2005 no virus found
The Cleaner v3847 09.21.2005 no threat found
UNA ??.??.???? Found nothing

 

[Clay]

The file in question (see below) was downloaded in Feb this year
(from, I believe, www.thecrack.net).

I never ran it. NAV and The Cleaner (my 2 main AV progs) did not (and
still do not) detect it as a threat. While doing a de-frag on the
drive (by having it slaved to an alternate computer) I ran Spybot and
it was the one that alerted me to the problem with this file (!).

I then submitted it as described. Clearly, many AV programs are
behind the curve with this one. I'm surprised that Spybot found it.
I guess we should consider it as a legit piece of AV software?

Personally, I wouldn't classify Spybot as AV software. Just another
tool for underware detection in my book. In fact, they don't even
describe it themselves as AV software.... of course you can consider
it whatever you please.

From: http://www.safer-networking.org/en/spybotsd/index.html

"Spybot - Search & Destroy can detect and remove spyware of different
kinds from your computer."

[snippage of Files scanned by Jotti ]

Seems to be a porn dialer and not a virus.

 

[Art]

The file in question (see below) was downloaded in Feb this year
(from, I believe, www.thecrack.net).

I never ran it. NAV and The Cleaner (my 2 main AV progs) did not (and
still do not) detect it as a threat. While doing a de-frag on the
drive (by having it slaved to an alternate computer) I ran Spybot and
it was the one that alerted me to the problem with this file (!).

I then submitted it as described. Clearly, many AV programs are
behind the curve with this one. I'm surprised that Spybot found it.
I guess we should consider it as a legit piece of AV software?

<snip results>

I have a small collection now of such "underware" as Clay called them.
The results you got on the file you submitted are just another
indicator of how one must use several kinds of scanners on-demand
nowdays to get a better chance of detecting underware. In addition
to KAV, Ad-Aware and Spybot, I've installed Ewido as well. It's coming
along nicely IMO.

Art

http://home.epix.net/~artnpeg

 

[Roger Wilco]

The file in question (see below) was downloaded in Feb this year
(from, I believe, www.thecrack.net).

I never ran it. NAV and The Cleaner (my 2 main AV progs) did not (and
still do not) detect it as a threat. While doing a de-frag on the
drive (by having it slaved to an alternate computer) I ran Spybot and
it was the one that alerted me to the problem with this file (!).

I then submitted it as described. Clearly, many AV programs are
behind the curve with this one. I'm surprised that Spybot found it.
I guess we should consider it as a legit piece of AV software?

Because "Virus Guy" still doesn't know what a virus is and is not.