Industrial Deals Luxury Beauty Killers of the Flower moon STEM nav_sap_plcc_ascpsc Limited time offer Grocery Handmade Mother's Day Gifts hgg17 Book House Cleaning Catastrophe Catastrophe Catastrophe  Introducing Echo Look Starting at $49.99 Kindle Oasis Shop Now
Customer Review

155 of 238 people found the following review helpful
1.0 out of 5 stars Functional Product but included disc contains a Trojan virus., September 28, 2012
Verified Purchase(What's this?)
This review is from: BAFX Products 34t5 Bluetooth OBDII Scan Tool for Android Devices (Automotive)
I received the product in the mail in a timely fashion. I downloaded the Torque (Free Version) application from Android Play Store. It functions quite well and works flawlessly via Bluetooth. Product works as described, but I gave it a one star because of the Trojan that was included with the software/documentation CD.

BEWARE OF SOFTWARE CD THAT IS INCLUDED!!!!!!!!!!!!

As always I do a virus scan on any CD/USB Drive/Flash Card that I install into my computer. This is the results from the anti-virus scan I performed before opening the CD that came with the scan tool.

TROJAN: Win32:Orsam!rts

Security Essentials encountered the following error: Error code 0x80070005. Access is denied. (This is because it cannot remove a virus/trojan from a non-rewritable CD)

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Items:
containerfile:E:\PALMERPEPCMSCANV2.4.8.rar
file:E:\PALMERPEPCMSCANV2.4.8.rar->PALMERPEPCMSCANV2.4.8\Crack\xf-pcmsc\xf-pcmsc.exe
file:E:\À¶ÑÀELM327Èí¼þ\pcmscan ÖÐÎÄÈí¼þ\xf-pcmsc.exe

****UPDATE****
The replacement CD did not contain the illegal cracks, or the trojan virus that came with the original CD. The unit works pretty well but I have never successfully been able to connect with 1999 and 2000 Saturns.
Help other customers find the most helpful reviews 
Was this review helpful to you? Yes No

[Add comment]
Post a comment
To insert a product link use the format: [[ASIN:ASIN product-title]] (What's this?)
Amazon will display this name with all your submissions, including reviews and discussion posts. (Learn more)
Name:
Badge:
This badge will be assigned to you and will appear along with your name.
There was an error. Please try again.
Please see the guidelines and FAQs here.

Official Comment

As a representative of this product you can post one Official Comment on this review. It will appear immediately below the review wherever it is displayed.   Learn more
The following name and badge will be shown with this comment:
 (edit name)
After clicking the Post button you will be asked to create your public name, which will be shown with all your contributions.

Is this your product?

If you are the author, artist, manufacturer or an official representative of this product, you can post an Official Comment on this review. It will appear immediately below the review wherever it is displayed.  Learn more
Otherwise, you can still post a regular comment on this review.

Is this your product?

If you are the author, artist, manufacturer or an official representative of this product, you can post an Official Comment on this review. It will appear immediately below the review wherever it is displayed.   Learn more
 
System timed out

We were unable to verify whether you represent the product. Please try again later, or retry now. Otherwise you can post a regular comment.

Since you previously posted an Official Comment, this comment will appear in the comment section below. You also have the option to edit your Official Comment.   Learn more
The maximum number of Official Comments have been posted. This comment will appear in the comment section below.   Learn more
Prompts for sign-in
  [Cancel]

Comments

Track comments by e-mail
Tracked by 7 customers

Sort: Oldest first | Newest first
Showing 1-10 of 29 posts in this discussion
Initial post: Nov 5, 2012, 8:06:28 AM PST
Eric M says:
Many times anti-virus and anti-malware products can flag unknown files or programs as viruses or malware when they aren't. The programs are simply going off of a database of "definitions" and if a scanned file matches a certain amount of information the anti-virus flags it.

This is most likely what happened in this case.

In reply to an earlier post on Nov 5, 2012, 8:31:09 AM PST
Kevin Abner says:
Yes Eric M I am well aware of this, but this disc that I received had many illegal cracks to OBDII retails software. The Trojan was contained in one of the zip files with an executable deisgned to register the software without purchasing it. They sent a replacement and the repalcement CD did not contain those files. I understand where you are coming from, but unfortunately that was not the case.

Posted on Dec 7, 2012, 1:57:46 PM PST
ohmage says:
Seems they fixed that problem in my CD, received 3 Dec. 2012.

I scanned my disc with both MSE and MBAM (Microsoft Security Essentials and MalwareByte's Anti-Malware) under Win7, nothing malicious found.

I'm also not seeing any "illegal cracks" as mentioned in this thread, so maybe they fixed that too. The software is mostly demo or trial versions of stuff you can buy.

BAFX also provides a download link in case the CD is missing/broken, so anyone could check out the software before buying at: https://www.dropbox.com/s/lnmmp75cs4qnjez/OBD.zip

[According to Dropbox the download file is 3 months old, and the contents match the CD they sent me.]

Posted on Dec 21, 2012, 1:02:55 PM PST
As a trojan horse developer, and software programmer of malware. Antivirus programs have a horrible habbit of detecting perfectly innocent software. Usually driver based software which helps the computer communicate with a device are generally flagged as viruses even though they arent. The worst Antivirus's you can use are McAffee, Norton, Trend Micro, and one of my favorite COMODO antivirus seems to flag innocent software. Antiviruses are not a 100% dont go off what your antivirus is telling you.

In reply to an earlier post on Dec 25, 2012, 3:15:06 PM PST
Last edited by the author on Dec 25, 2012, 6:04:24 PM PST
Abe says:
Where did you get that link? I don't see it on the site.

The OBD.zip file triggers 2 virus warnings: https://www.virustotal.com/file/4c0cfc9afdcc379b42521bc7d6b9a1ee10ec14386e60ed65df89c0b7eb0d9945/analysis/

while the CD triggers 6: https://www.virustotal.com/file/bcacea85d6213147ef320f45fbb59f75ad20c5faec6ebd54ba934626864d9567/analysis/

I'm not sure if these are just false positives or what.

In reply to an earlier post on Dec 26, 2012, 11:21:34 AM PST
Kevin Abner says:
Many bottom feeding trojan horse developers and malware programmers, insert code into software cracks that are distributed across P2Ps. Anti-virus software correctly reports +99% of actual malicious software. The replacement disc that I received did not contain any software cracks. No issues with replacement disc.

In reply to an earlier post on Dec 26, 2012, 7:53:40 PM PST
ohmage says:
The dropbox link I posted above for the software download was included in the shipment with the product. It's on the back of the postcard with instructions for pairing with Torque.

Posted on Feb 6, 2013, 5:52:33 PM PST
DFS says:
The software on the CD is all crap anyway. Better to throw it away.

In reply to an earlier post on Mar 6, 2013, 1:48:11 PM PST
A. Ramos says:
Not to beat a dead horse, but if the disc included cracks for copyrighted software, it is probable that the antivirus detected the packer for the crack (which would have otherwise not been malicious, that is, if this was the case) The packers out there are like very simple unzip tools used to squeeze trojans or viruses into less memory while on disc, and those packers are often used on cracks as well. AV software generally recognizes those packers as the signature for many viruses and trojans, whether used for that purpose or not.

Posted on Mar 20, 2013, 3:01:18 PM PDT
jimbid says:
I could not get the disc to load on any of my computers. Maybe a blessing in disguise.
‹ Previous 1 2 3 Next ›