[WARNING] PVPcoin - Virus Detected

[masulum]

TITLE: [ANN][MASTERNODE] PVPCoin - POW - x-11 - EASY SOLO MINING RIGHT NOW\
ANN Thread: https://asktom.cf/index.php?topic=5188210.0
Archives: https://archive.fo/ruqT8
ANN Creator: https://asktom.cf/index.php?action=profile;u=966012

Websites: http: //plavpla.com/
Web Archive: https://archive.is/hXZ0g

Domain Lookup: https://www.namecheap.com/domains/whois/results.aspx?domain=plavpla.com

Wallet Virus Detected - PROOF:

Kaspersky Virusdesk Scanner
https://virusdesk.kaspersky.com

Scan results:

Code:

playervsplayercoin-cli.exe
Scan result: threats detected 
Threat name: Trojan.Win32.Makoob.aq 
File size: 3.18 MB 
File type: PE32/EXE 
Scan date: Sep 28 2019 17:14:19 
Databases release date: Sep 28 2019 09:38:18 UTC 
MD5: fa3dab218d219cd462563e4a913b548f 
SHA1: 1147d5ae9ef59856a8645ea309a4a51c1e663ec9 
SHA256: 4b88870bc561fba7513b12daaf2b56b71d571eeed3e74afbf91c65639de07ac0

playervsplayercoin-qt.exe
Scan result: threats detected 
Threat name: Trojan.Win32.Makoob.aq 
File size: 3.18 MB 
File type: PE32/EXE Scan date Sep 28 2019 17:14:19 
Databases release date: Sep 28 2019 09:38:18 UTC 
MD5: fa3dab218d219cd462563e4a913b548f 
SHA1: 1147d5ae9ef59856a8645ea309a4a51c1e663ec9 
SHA256: 4b88870bc561fba7513b12daaf2b56b71d571eeed3e74afbf91c65639de07ac0

playervsplayercoin-tx.exe
Scan result: threats detected 
Threat name: Trojan.Win32.Makoob.aq 
File size: 3.18 MB 
File type: PE32/EXE 
Scan date: Sep 28 2019 17:14:19 
Databases release date: Sep 28 2019 09:38:18 UTC 
MD5: fa3dab218d219cd462563e4a913b548f 
SHA1: 1147d5ae9ef59856a8645ea309a4a51c1e663ec9 
SHA256: 4b88870bc561fba7513b12daaf2b56b71d571eeed3e74afbf91c65639de07ac0

Screenshot scan results:


Zipezip file scanner
You can check results here: https://zipezip.com/ufiles/d843822f1014fb5668736395283b50a1

[dkbit98]

Thanks for reporting this!
ANN is self-moderated and created by Newbie member.
(I asked multiple times to restrict newbies from creating self-moderated ANN.... with no results from moderators)

plavpla Website is also not working 502 Bad Gateway.

[morvillz7z]

That's just part of the widely-known by now fake announcement threads, it has nothing to do with plavpla or any other project. All they do is sneak/replace a link with malware inside and that's it.

They actually posted three more threads within 10min:

https://asktom.cf/index.php?topic=5188208.0
https://asktom.cf/index.php?topic=5188206.0
https://asktom.cf/index.php?topic=5188204.0

@OP, Lafu has created a nice topic in Meta to report malware and suspicious links, you can post it there if you want to, some of the staff members/mods have it bookmarked and handle reports pretty quick. The last fake ann i reported was deleted within 15 minutes.

[masulum]

plavpla Website is also not working 502 Bad Gateway.

When I check this website still working. Maybe they deleted their content or something happen with their hosting. At least this is good someone will not visiting and download this wallet.

<snip>

Thank you, thread bookmarked, I will report on that thread for the next finding.