Storm infected, found ip`s of infected storm where logs go

m1st

HMFIC
Global Mod
Skywalker
Legendary
Insider
Contributor
Coder
Trusted
Member
Joined
Threads
2,763
Posts
5,555
Hello, as You may heard Storm was merged with virus, some one hacked thestorm.app and replaced link to fake one. I am analyze infected one, if some one can ddos this ip, would be nice.
As I understand infected storm re-send logs to this servers. (such as hits and maybe configs.)

23.62.99.34:80
92.122.253.175:80

How You can understand if You are using infected one, look at size of Your Storm. (3,383 KB) infected.
Thats was last storm 2.6.0.2 which are infected.
hsgRsOh.png


(Clear one is 2763 KB with out merge that virus).

Additional info


 
Last edited:
  • Thread Starter Thread Starter
  • #2
This shit easy to remove if You are infected, clear Your Temp just press win+R, write %TEMP%, delete all data, remove infected Storm folder, if You can`t delete Storm folder then remove it from tasklist (kill cmd, Storm.exe or reboot). After You did all this steps, install ccleaner and fix Your registry, I post image here.
1547305278-screenshot-1.png

Anyway I am clear and didn`t have used that one :D
 
  • Thread Starter Thread Starter
  • #3
bump