Momaker backdoor and Hoversnap warning

Discussion in 'malware problems & news' started by Longboard, Dec 27, 2004.

Thread Status:
Not open for further replies.
  1. Longboard

    Longboard Registered Member

    Joined:
    Oct 2, 2004
    Posts:
    3,187
    Location:
    Sydney, Australia
    Just thought you all might like to know:
    I was thinking of trying some of thr Hoversnap software. I had thought this a reputable site, but, a Trend scan showed the Momaker trojan as part of the download in a zipped file.

    I am not aware this had been a problem before.
    Maybe a one off, maybe not.

    Interestingly a2 had not detected the problem.
     
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,790
    Location:
    Texas
  3. Longboard

    Longboard Registered Member

    Joined:
    Oct 2, 2004
    Posts:
    3,187
    Location:
    Sydney, Australia
    Thanks

    >....message sent....
     
  4. bigbuck

    bigbuck Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    4,877
    Location:
    Qld, Aus
    Jotti's found no virus, but got this;
     

    Attached Files:

  5. bigbuck

    bigbuck Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    4,877
    Location:
    Qld, Aus
    and this........get this quite a bit at Jotti's with Zips.
     

    Attached Files:

  6. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Can we classify Hoversnap as malware?
     
  7. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,790
    Location:
    Texas
    Why don't we wait and see what the problem is first? :)
     
  8. bigbuck

    bigbuck Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    4,877
    Location:
    Qld, Aus
    I don't think so....I get that all the time at Jotti's with zip files. The ten AV's all report no virus...
     
  9. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    Good idea. ;)
     
  10. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,873
    Location:
    SW. Oklahoma
    I have and am useing hoversnap and there is no malware involved, your trend just made a mistake. I have used this software for years.

    bigc
     
    Last edited: Dec 27, 2004
  11. Longboard

    Longboard Registered Member

    Joined:
    Oct 2, 2004
    Posts:
    3,187
    Location:
    Sydney, Australia
    Tried to e-mail Hoversnap contacts at that link from Ronjor
    Message would not go through to "Titan"
    Will try other addresses
    None of my other scans showed any problem
    You are probably right about false positives but still it might be a help to both Hoversnap and Trend if we can let them know
     
  12. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,790
    Location:
    Texas
    I looked at the forum link on the link I provided. Looks like they may be having problems staying alive.
     
  13. Longboard

    Longboard Registered Member

    Joined:
    Oct 2, 2004
    Posts:
    3,187
    Location:
    Sydney, Australia
  14. Longboard

    Longboard Registered Member

    Joined:
    Oct 2, 2004
    Posts:
    3,187
    Location:
    Sydney, Australia
    I took the opportunit to e-mail Jotti with htis thread and he very kindly sent this reply:

    Hi,

    Thanks for the link... yes, the sandbox is taking a lot of time on that
    file, but the file looks harmless (didn't have time to do extensive
    testing though, you could submit it to a respected AV vendor to be sure).

    Best regards,

    Jordi Bosveld / Jotti

    That's probably it now, yes?
    I have sent messages to the other Hoversnap contacts, awaiting reply, Ronjors earlier post sounds a bit ominous.

    How to notify Trend? Anyone know?
     
  15. bigbuck

    bigbuck Registered Member

    Joined:
    Jul 7, 2004
    Posts:
    4,877
    Location:
    Qld, Aus
  16. Longboard

    Longboard Registered Member

    Joined:
    Oct 2, 2004
    Posts:
    3,187
    Location:
    Sydney, Australia
    Legwork, legwork..
    Message sent to Trend.
    EverylittlebithelpsIhope
     
Loading...
Thread Status:
Not open for further replies.