Originally Posted by
anonsource
I tried making a free public account and sent coder a PM about this and he instantly banned my forum name. I decided to try out his latest version and I got a whole bunch of weird activity from his bot. So in my effort to try to warn others im posting here.
Recently I got a bunch of infections detected of a fake svhost.exe infected with the Win32.Trojan.Cosmu/M virus. I removed these infections and I was wondering where the hell did I get infected from. We all know what stuff gives your viruses p2p etc n I dont do any of it. Well after downloading the latest version of Elite-XI bot I get a weird message saying the program is having problems accing c:\svhost.exe and it is not a valid program.
So im like wtf, So I goto my c:\ and omg there it is, a fake svhost.exe file! I delete it and decided to retest.
Elite-XI bot closed, no svhost.exe in my c:\, so I run the bot.
Same message, In fact it even creates the svhost.exe file in my c:\
I know I don't have any problems with my svhost.exe I hopen up TaskMgr and there are plenty legit ones running for networks etc.
So now im like ok, let me contact coder and see why the bot is trying to access and creating a svhost.exe file thats marked as a virus signature. BANNED so umm am I the first to catch this?