"Habbo Browser"

[2hd.]

Although I'm not condoning you straight away as someone who's uploaded a malicious file, I got the following results on VirusTotal;

This is a primitive Win32 Trojan.

It is written in C, and packed using UPX. The packed file is approximately 14KB in size, and the unpacked file is approximately 54KB in size.

Once launched, the Trojan remains dormant for approximately 7 minutes. This is done on purpose, to attempt to hide its payload from the user.

Just like when opening Internet explorer and logging in, however it saves you time (good for slow computers) and i
it's a small file.

I just think it's a bit suspicious that 2 (all be it out of 31) programmes noticed something different, it contains a small size trojan, and you used the small size of the file to back-up your arguement.

I didn't scan v1, but it may of been part of your ploy to insert something (if you did, i'm still not saying you definetly did)

[OWNAGE]

 HabboBrowser.exe

    * VPS version: VPS 0748-0 07.06.2007
    * Scaner version: 2.0.0
    * Scanned files: 1
    * Scanned directories: 0
    * Archives count: 0
    * Infected files: 0
    * Errors: 0
    * File count: 28.0 kB
    * Scan time: 0s 3ms
    * Scanned speed: 8.7 MB/s

Seems clean. I opened the .exe looks okay.. only thing I am/was worried about is about logging.. proably doesn't though.

It's okay pretty basic. Maybe you could add to it in future? ^^*. Like little wigits besides it, links etc.

Yup it's clean I promise, it doesn't log. Ask anybody who's used it for a while, it's 100% safe.

Scan taken on 08 Jun 2007 09:05:40 (GMT) 
A-Squared Found nothing 
AntiVir Found nothing 
ArcaVir Found nothing 
Avast Found nothing 
AVG Antivirus Found nothing 
BitDefender Found nothing 
ClamAV Found nothing 
Dr.Web Found nothing 
F-Prot Antivirus Found nothing 
F-Secure Anti-Virus Found nothing 
Fortinet Found nothing 
Kaspersky Anti-Virus Found nothing 
NOD32 Found nothing 
Norman Virus Control Found nothing 
Panda Antivirus Found nothing 
Rising Antivirus Found nothing 
VirusBuster Found nothing 
VBA32 Found nothing

Yup, file should be safe.

It is indeed.

I woulnt change from firefox to that,Sorry just doesnt sound safe,It may be fully safe but i woulnt feel safe ;P

I understand, I wouldn't feel safe if it was somebody elses program.

I aint tried it nor downloaded it, but it sounds good . Well done.

Thanks Criminal, I'll get the tabs working, so it's easier to clone.

EDIT to above: Hi. It's not a virus, or trojan or keylogger. Scan any file, scan something you know is clean. It'll say there is a virus on it. On VirusTotal, some AVs give you false results - why? I'd expect because they want you to buy it.

Why would I want to steal peoples furni? I don't, I hardly play Habbo these days.

Also, if ANYBODY wants the vb project file ask me, you can check it yourself. And the program wasn't written in c it was in visual basic (vb).

Sorry for yet another edit x] If it was a virus or trojan, surely the program wouldn't open? But it does.

[OWNAGE]

Sorry can't edit. But I think I know the reason why it found it as a trojan. The file size is small - that's because it's a simple small file - and the scanner picks anything within that rage of file size. I'm scanning a small file now.

Also, in reply to the part about injecting something in the first version - the first version was without an icon, the second version I added the icon.

I understand your cause for concern - I could sit here all day trying to convince you, but I shall say it once more. It's clean. As I said I'll provide the visual basic project file for anybody who wishes to check it.

[2hd.]

Well, I scanned twice to check if they were just wanting me to 'buy it', and that was on two different computers, It just seems odd.

[OWNAGE]

Well, I scanned twice to check if they were just wanting me to 'buy it', and that was on two different computers, It just seems odd.

What I mean is, they say it's a virus so you think "wow, very nice I'll get that scans well". I've never heard of the first, and I used to have Panda - it mucked up my computer so I use AVG.

Anywho, I can't say much more to convince you, if anybody feels it's a virus, don't use it. I only made it to help people out (and learn coding).



Edit: Just another idea, it could be due to the .exe leads you to a page (Habbo UK), but if it was any old .exe it could lead you to a virus download... Just a thought.

OK I made a test.exe, and it didn't show anything. I'm confused why it says there's any thing wrong with it. Either false readings, the thing I said above or you trying to get me a bad name; which I doubt you are, I'm just saying.

[OWNAGE]

Can't edit, sorry.

I scanned it, same results. I'm very confused why it says this, I think it's to do with it including a website frame, I shall try with a program runescape made (same as what I made, just loads RS though).

[tularis]

What does it do? Is it just a vb form with a web browser control inside?

[OWNAGE]

What does it do? Is it just a vb form with a web browser control inside?

Yes, that's all it is. I'm scanning the RS one (made by Jagex LTD, it loads RuneScape instead of Habbo), so far it's picked up two things.

[Laurensh1]

I could always enter the Hotel with to clients..
Press Log Out with the left mouse button (or press Log Out while you have Ctrol pressed). Open the link in a new tab, then go back to the Hotel, Log in (just via /account/login) and then go in the Hotel. Your first Client stays logged in!

[OWNAGE]

I could always enter the Hotel with to clients..
Press Log Out with the left mouse button (or press Log Out while you have Ctrol pressed). Open the link in a new tab, then go back to the Hotel, Log in (just via /account/login) and then go in the Hotel. Your first Client stays logged in!

By the time you've done that, you'd already be on with this. Saves time!

OK, scanned the RuneScape one, look at this.

Url to scan (don't know if it works?): http://www.virustotal.com/vt/en/resu...27b201cc6a26c8

Image:


And that doesn't have a virus - it's made by Jagex (people who made runescape), it's on their download page.

So I say it's due to it leading to a page.

Conclusion: It's safe, don't worry!