Solved Unsure if I'm safe

RedLad · Sep 29, 2023

Hi all,

I got an alert in Windows Security for 'HackTool:Wn32/crack. Defender did it's thing and it seems to be gone, but I am unsure.

Then, I also got another alert the following day, but this one said it as a Trojan. I forgot to note the name of it. Again, Defender did it's thing and it said no threats again.

Something like this happened before to me and I ended up going through some stuff on bleepingcomputer. If Defender and Malwarebytes aren't showing anything dodgy going on, would I be safe, or am I better off going through the scan process over on bleepingcomputer?

Even if anyone could reommend a few further things to try here, that would be appreciated.

Thank you

JAM83 · Sep 29, 2023

RedLad said:
Hi all,

I got an alert in Windows Security for 'HackTool:Wn32/crack. Defender did it's thing and it seems to be gone, but I am unsure.

Then, I also got another alert the following day, but this one said it as a Trojan. I forgot to note the name of it. Again, Defender did it's thing and it said no threats again.

Something like this happened before to me and I ended up going through some stuff on bleepingcomputer. If Defender and Malwarebytes aren't showing anything dodgy going on, would I be safe, or am I better off going through the scan process over on bleepingcomputer?

Even if anyone could reommend a few further things to try here, that would be appreciated.

Thank you

idk what program you cracked, if any at all, but regardless, it's better to be safe than sorry I guess. Most patches/cracks are false positives anyway...Some AVs even detect them as P.U.Ps (Potentially Unwanted Programs).

Berton · Sep 29, 2023

Most times when Defender/Security finds issues there is a choice to Delete [what I use] or Quarantine and will give the name of the file it is attached to. And it usually is in the Downloads folder on some folder when I store data for clients, I go to that and assure it has been deleted. I do backups of clients data onto External/Portable USB drives.

antspants · Sep 29, 2023

RedLad said:
Hi all,

I got an alert in Windows Security for 'HackTool:Wn32/crack. Defender did it's thing and it seems to be gone, but I am unsure.

I am going to assume you have tried bypassing the legitimate activation of something, if I am wrong, I can apologise later. Or you can just take the following as my personal opinion on hack/crack:

I can only conclude (but can not be sure) you have at some point unethically bypassed the activation of some software program or app. Cracking software/piracy/copyright infringement is not only wrong, unethical, but also a high risk practice. Basically if one chooses to trust a hackers bypass then one could expect to suffer possible consequences. “trusting in a hackers scripted bypass of software activation to avoid a payment” think about that for a moment.

To answer your question; yes, be afraid, be very afraid. One can not be sure what is being re-written on ones computer when activating a .bat or .exe or replacing a file in an installed applications folder. Not only would I scan my PC with everything I can possibly get access to, I’d douse it with fuel and set it alight, burn my router, move house… change my identity and maybe even my country, just to be certain.

(if I’m wrong, don’t panic, just scan with online scanners and defender

… if i’m right, the bogy man’s gonna getcha!)

flashh4 · Sep 29, 2023

@RedLad, you can run this program, same as used at Bleepingcomputer & other Malware Removal sites !! Post the reports for me please !

Note: It is very important to download this to your desk top !!

FARBAR (FRST)
Download Farbar Recover Scan Tool for 64 bit systems <<<< Downloading Farbar Recovery Scan Tool >>> and save it to your Desktop. <<< Important
If your computer language is other than English right click on the FRST64 icon and rename it to FRST64english
* Right click on the icon and select Run as administrator
* Note: If you receive any warning about the download it is a false positive and you can ignore it. Click on More info to get the Run anyway option
* Click Yes to the disclaimer
* Click Scan and allow the program to run
* Click OK on the Scan complete screen, then OK on the Addition.txt pop up screen

2 Notepad documents should now be open on your desktop.
Please copy and paste the contents of each report in separate reply windows

RedLad · Sep 30, 2023

antspants said:
I am going to assume you have tried bypassing the legitimate activation of something, if I am wrong, I can apologise later. Or you can just take the following as my personal opinion on hack/crack:

I can only conclude (but can not be sure) you have at some point unethically bypassed the activation of some software program or app. Cracking software/piracy/copyright infringement is not only wrong, unethical, but also a high risk practice. Basically if one chooses to trust a hackers bypass then one could expect to suffer possible consequences. “trusting in a hackers scripted bypass of software activation to avoid a payment” think about that for a moment.

To answer your question; yes, be afraid, be very afraid. One can not be sure what is being re-written on ones computer when activating a .bat or .exe or replacing a file in an installed applications folder. Not only would I scan my PC with everything I can possibly get access to, I’d douse it with fuel and set it alight, burn my router, move house… change my identity and maybe even my country, just to be certain.

(if I’m wrong, don’t panic, just scan with online scanners and defender … if i’m right, the bogy man’s gonna getcha!)

Wow, long reply, thanks!

You are entitled to your opinion, ethics, slapping my hand etc. No need to apologise. But it is what it is. It is something I downloaded, but did not run. Defender just gave the error when I right clicked and chose Scan with Microsoft Defender. It is something that I know is a risk, and have done so before. But seems there's more sneaky viruses and that knocking about these days.

You say be afraid, be very afraid. But I won't be. I will not loose sleep over it as it is my old PC. I will move house though haha.

RedLad · Sep 30, 2023

flashh4 said:
@RedLad, you can run this program, same as used at Bleepingcomputer & other Malware Removal sites !! Post the reports for me please !

Note: It is very important to download this to your desk top !!

FARBAR (FRST)
Download Farbar Recover Scan Tool for 64 bit systems <<<< Downloading Farbar Recovery Scan Tool >>> and save it to your Desktop. <<< Important
If your computer language is other than English right click on the FRST64 icon and rename it to FRST64english
* Right click on the icon and select Run as administrator
* Note: If you receive any warning about the download it is a false positive and you can ignore it. Click on More info to get the Run anyway option
* Click Yes to the disclaimer
* Click Scan and allow the program to run
* Click OK on the Scan complete screen, then OK on the Addition.txt pop up screen

2 Notepad documents should now be open on your desktop.
Please copy and paste the contents of each report in separate reply windows

Thanks for the reply. I am actually only realising this PC is running Windows 10, not 11. Am here I am on elevenforum posting about this issue. So apologies for that!

Before I do what you suggested, is there any risk posting that report info here? Does it gather any personal info for others to see here?

Also, here's a screenshot from Protection history in Windows Security, if it helps:

antspants · Sep 30, 2023

RedLad said:
Wow, long reply, thanks!

You are entitled to your opinion, ethics, slapping my hand etc. No need to apologise. But it is what it is. It is something I downloaded, but did not run. Defender just gave the error when I right clicked and chose Scan with Microsoft Defender. It is something that I know is a risk, and have done so before. But seems there's more sneaky viruses and that knocking about these days.

You say be afraid, be very afraid. But I won't be. I will not loose sleep over it as it is my old PC. I will move house though haha.

I’m sure you’ll be fine. As for ethics, it isn’t just my opinion, you may want to read the rules for future reference, same rules as on Ten forum.

Terms and rules

You must agree to these terms and rules before using the site.

www.elevenforum.com

RedLad · Sep 30, 2023

I have some files I wanted to copy across to my newer windows 11 PC. Would it be a big risk as is? Or would you recommend doing this Farbar Recover Scan before doing anything else?

Thanks

antspants · Sep 30, 2023

RedLad said:
I have some files I wanted to copy across to my newer windows 11 PC. Would it be a big risk as is? Or would you recommend doing this Farbar Recover Scan before doing anything else?

Thanks

I’d either make sure everything is clean first or isolate the files you want to copy and make sure they’re clean. Always better to be safe? Tney don’t call a virus a virus for nothing.
You haven’t followed flashh4’s advice though?

flashh4 · Sep 30, 2023

@RedLad, you should run the Farbar scan before you move any files ! If you want yo can email them to my address i use for personal files that people do not want public ! flashh4@hotmail.com ............

RedLad · Oct 2, 2023

Hi again guys. I had a guy a bleeping computers tell me someone from here went over there to tell him I posted here also about this, which I din't expect, but anyawy. He said I've to stop this thread here if he's to help.

JAM83 · Oct 2, 2023

RedLad said:
Hi again guys. I had a guy a bleeping computers tell me someone from here went over there to tell him I posted here also about this, which I din't expect, but anyawy. He said I've to stop this thread here if he's to help.

LMAO, that sounds stupid. . He told you to stop talking about this here or he won't help you? That's FISHY. . REALLY FISHY. . .

antspants · Oct 2, 2023

RedLad said:
Hi again guys. I had a guy a bleeping computers tell me someone from here went over there to tell him I posted here also about this, which I din't expect, but anyawy. He said I've to stop this thread here if he's to help.

I’d take this site over that one any day. He’s obviously butthurt, probably got banned from here.

JAM83 · Oct 2, 2023

antspants said:
I’d take this site over that one any day. He’s obviously butthurt, probably got banned from here.

Yeah something happened. . No tellin what though, but you're 100% safe here. We're not going to steer you in the wrong direction

Berton · Oct 2, 2023

The main take-away of this is that in spite of trying to be accurate with responses no 2 computers are ever the same after in use for awhile, experiences with issues will be some different. But we as volunteers do try to help wherever possible.

flashh4 · Oct 2, 2023

That is the way all Malware sites do if they find you are getting help somewhere else ! Because they don't want to interfere with the work being done by someone else ! I get it !! You guys don't get it that us guys are trained in which programs to run for different infections ! Just ask Brink he was a master at Malware removal !