InBoxRevenge KS Forum

REF: PASTEBIN

According to Avira, PASTEBIN is a haven for VIRUS SCRIPTS.....

Avira AntiVir Personal
Report file date: Saturday, February 11, 2012 00:20

Scanning for 3317781 virus strains and unwanted programs.

The program is running as an unrestricted full version.
Online services are available:

Begin scan in 'G:\'
G:\PASTEBIN\PASTEBIN-2\hts-cache\old.zip
[0] Archive type: ZIP
--> http://pastebin.com/jkNS4iW7
[1] Archive type: GZ
--> object
[DETECTION] Contains recognition pattern of the BAT/KillAV.ssc batch virus
--> http://pastebin.com/YURpMLcZ
[1] Archive type: GZ
--> object
[DETECTION] Contains recognition pattern of the BAT/Agent.1275 batch virus
--> http://pastebin.com/AFWrKMJV
[1] Archive type: GZ
--> object
[DETECTION] Contains recognition pattern of the BAT/HackKas.A batch virus
--> http://pastebin.com/ue8VcSab
[1] Archive type: GZ
--> object
[DETECTION] Contains recognition pattern of the BAT/KillAV.ssc batch virus
--> http://pastebin.com/FzCqSfg6
[1] Archive type: GZ
--> object
[DETECTION] Contains recognition pattern of the PHP/Asxil.A PHP virus
--> http://pastebin.com/RLgsTerk
[1] Archive type: GZ
--> object
[DETECTION] Contains recognition pattern of the PHP/Spy.Ettu.D PHP virus
--> http://pastebin.com/raw.php?i=y03U3HVf
[1] Archive type: GZ
--> object
[DETECTION] Contains recognition pattern of the PERL/FindAdmin.A Perl virus
--> http://pastebin.com/index/y03U3HVf
[1] Archive type: GZ
--> object
[DETECTION] Contains recognition pattern of the PERL/FindAdmin.A Perl virus
--> http://pastebin.com/g8cZtHP3
[1] Archive type: GZ
--> object
[DETECTION] Contains recognition pattern of the PERL/Shellbot.a.6 Perl virus
[WARNING] This file is a mailbox. To avoid damaging your emails this file will not be repaired or deleted.

Beginning disinfection:
G:\PASTEBIN\PASTEBIN-2\hts-cache\old.zip
[DETECTION] Contains recognition pattern of the PERL/Shellbot.a.6 Perl virus
[NOTE] A backup was created as '42b98fbd.qua' ( QUARANTINE )


End of the scan: Saturday, February 11, 2012 02:46
Used time: 2:25:08 Hour(s)

The scan has been done completely.

Signed: INTERPOLATOR

I assume you just downloaded the files and weren't opening any, I hope!

You would need to tell us the backstory for each of those files. I've got copies of trojans (not "viruses") on my own website, since it's a convenient way to transfer large files between computers. I don't put links to those files anywhere other people can find them. Other researchers will put zipped and password protected copies of trojans on their websites and label them as dangerous, so other researchers have copies to work with. That's not the same as posting something dangerous and calling it a "registry cleaner." Pastebin is like a bulletin board, and anyone can use it for good or evil. If you find something evil and they refuse to remove it, that's worth complaining about.

Also, Avira is very sensitive. Any password protected zipped file is likely to be marked as potentially dangerous. It's then up to you to decide if it really is dangerous, by again, looking at the backstory to see if the file appears to be misrepresenting itself.

No, I didn't get virused. Few days ago, I used the "WIN-HT-TRACKER" to download the entire PASTEBIN website. Then, I started poking-around inside the files and folders. It was just a matter of "routine," that I started a complete virus-scan, and Avira alerted to me to the malware files in what I had downloaded.
Yeah, I know how "touchy" Avira is..... sometimes means nothing at all.
JC