URGENT WARNING Trojan back door on spybot download

**unclex** · 21st June 2003

Trojan back door on spybot download

If you download from this site which is not the real site you will end up with a backdoor trojan in your system.

do not use this site warning

http://beam.to/spybotsd

http://www.google.com/search?....=spybot

It is either a coloned site or the downloads have been got at.

It is not a very good one - it has a call out attached to it to tell whoever made it to try and get into your system.

they have put winvnc on the back of it and it installs itself to

C:\\winnt\fonts\

rundll32.exe
vnchook
inst.exe - seems to be part of it

PE,2003/06/21,21:42:19 +1:00 GMT,rundll32.exe,209.213.10.69:6667,N/A

Only download from here http://spybot.eon.net.au/

**Tecpos** · 21st June 2003

Thanks Unclex.

I already have spybot installed, but it's good too know about these things so people looking for a download site can avoid them.

Brill program spybot. Only the other day it sorted out something called "FindTheWebSiteyouNeed" which reset my home page & added registry entries for IE Search assistant, Search Bar & Search Page.

Highly recomended from a reputable site.

**Undertaker** · 22nd June 2003

Have some sort of firewall running, prevent unknown programs from connecting out and u should be safe.

Zonealarm is good, so is kerio personal firewall.

Thanx for the warning unclex