Rakeback calc contains login-stealing trojan

[pubbie]

Does anyone use the checkraised.com rakeback calculator?

"RBCalc.exe, also known as Rakeback calculator, was actually a Trojan. When RBCalc.exe is run, it silently drops four executable files into the user's %SystemRoot%\system32 folder and executes them.

The purpose of the dropped executables is to collect login information for various online poker websites from the user's computer and send them back to the malware author. In addition, the main malware component was protected by a rootkit driver that hid its process and launch point from registry"

For more info:

http://www.cardsquad.com/2006/05/15/...steals-logins/

[xwillience]

a good reason not to download random crap from the internet.


if you dont feel comfortable clicking the link all it says:


run a scan and remove the proggy.