Leaked Windows 7 Build 7100 image may have been infected with trojan

Leaked Windows 7 Build 7100 image may have been infected with trojan


Microsoft have warned users numerous times not to download leaked Windows 7 builds because of the possibility of modified or infected images. Users should understand the risks involved when downloading and installing leaked builds, as we continue to see an increasing amount of fake build releases.

Unfortunately, one of the first build 7100 leaked on “the bay of pirates” was modified. Many users jumped on this build right away, not realizing it was modified and infected with a trojan. The torrent was later taken down. Even if you did not download build 7100 from the suspected site, you should still always do a hash check to ensure your image was unmodified. You can check the MD5 hash of an image by using MD5Checker (download here). Users in our forums and our home page only report on leaks once confirmed to be real, and will always include hash information for you to check with. Thanks to vistademon who spotted the infection with the image uploaded by Einsteinjr.

Leaked Windows 7 Build 7100 image may have been infected with trojan

The image had the following incorrect build string: Windows_7_Ultimate_x86_RC_Build_7100.4866522
This is the MD5 hash of the infected image: 2dc70d7c851d76d49ac71167141222f7
The correct hashes should be the following as reported by our forum members:

x64: 98341AF35655137966E382C4FEAA282D
x86: 8867C13330F56A93944BCD46DCD73590

If you believe you have an infected image, you should get rid of the image immediately, update your anti-virus software and do a complete scan.

If you were a victim of the infected image, it may be better to wait until May 5th when Microsoft releases Windows 7 RC for public download. Download safely.

To keep up with Windows 7 updates, you can subscribe to our RSS (What is RSS?) feed or Email Subscription newsletter

Discuss in Forums: Virus in 7100 download

VN:F [1.5.5_825]
Please rate this post:
Rating: 5.0/5 (1 vote cast)

Leaked Windows 7 Build 7100 image may have been infected with trojan

Related posts:

  1. Windows 7 RC Download Build 7100 x86 and x64 Leaked!
  2. Windows 7 RC Completed at Build 7100
  3. Attackers push pirated Windows 7 RC to build botnet

Tags: , , ,

To discuss this topic, head on over to our forums!



25 Responses to “Leaked Windows 7 Build 7100 image may have been infected with trojan”

  1. Beardy says:

    You sure know how to give a guy palpitations – fortunately mine seems fine.

  2. Crid says:

    Ok downloaded the MD5checker….what do I do now?? Just press “paste” and the MD5 hash show up?? And if it’s like “98341AF35655137966E382C4FEAA282D” i’m ok, or I have to do any other procedure??

    • Jim T. says:

      Copy the good hash

      98341AF35655137966E382C4FEAA282D

      and then hit paste, it should show up in light type in the top window.
      Browse to find your disc image and open it.
      After a few minutes of seeming inaction it will tell you if they match.

  3. Geo says:

    I lucked out then. Downloaded using the Piratebay torrent but it was a clean one versus the poisoned one earlier. Did the hash check for 64 bit build.

  4. Crid says:

    Does anyone knows whar anti-virus protection works with W7??(a very good one)!
    I’m using NOD32 (creacked version) and theres a white flag sayng that this verson is in a format that is no longer supported!

  5. DmnY says:

    I have Avira and it didn’t say nothing.

  6. DmnY says:

    It didn’t say anything, sorry. The nag screen still exists, but the antivirus is great and it works completely with Win7.

  7. Orrekuman says:

    Hey guys,

    Never done this before and am running into trouble.

    Name of the file is 7100.0.090421-1700_x86fre_client_en-us_Retail_Ultimate-GRC1CULFRER_EN_DVD.iso

    To do hash check I paste the good hash (8867C13330F56A93944BCD46DCD73590) and browse to the above iso file.

    I would expect to see another hash in the second box, first box being the good hash.

    But, the second box comes up emtpy and says they dont match.

    Is mine infected or am I doing something wrong?

    Thanks

    • chris smith says:

      yours is probably okey I have same build((
      7100.0.090421-1700_x86fre_client_en-us_Retail_Ultimate-GRC1CULFRER_EN_DVD))
      version, have scanned and checked for trgn/timebomb =fine no prob. this is is a
      awesome build, much better than the beta’s
      just insert good win7 key and your set.
      ps havnt found issue with OS stopping on
      june/ or july 1st as some have reported
      would happen. i’m supprised but :) happy
      cheers,, RCSTOOLS

      • Orrekuman says:

        thanks chris… it is indeed the best windows i have ever used. let’s hope it gets even better once retailled

  8. helmut says:

    you can use also this checker: http://www.softpedia.com/get/System/File-Management/MD5-Check.shtml

    first browse the file and then after checking paste the good one to compare

  9. Mattatyah says:

    I’ve got my torrent from mininova and it turned out to be the proper one. Thank you for the info though, you never know what you might step in.

    Best regards to a person responsible for this great website :)

  10. Frodo says:

    I D/L my two sets (64- and 32-bit) from Usenet. My MD5 hashes are OK.

    I wouldn’t trust a torrent for anything, guys. There just is no quality control a lot of times, and you never know to whom you’re connecting.

  11. Cygnus333 says:

    Mine did not match using this image: 6001.18000.080118-1840_amd64fre_Enterprise_en-us_VL-FRMEXVOL_EN_DVD (Size 2,956,984 KB).

    and this hash: 98341AF35655137966E382C4FEAA282D.

  12. Crid says:

    The image that is on xtremespeeeds.net is OK!!

  13. Bill says:

    Even when you get a correct download you shouldn’t use just any checksum utility.

    There are 2 worth having many others are worse than a waster of disk space.

    1.) FCIV.EXE (Microsoft.com)
    2.) gnuwin utilities sourceforge.
    Both are easy to master command line utilities that checksum a directory or a single file.

    I have one question, Will Windows Seven ask if it is okay to use less than the entire disk?

  14. Mcatee Ryno says:

    My ASUS is wonderful. I really reviewed all netbooks prior to purchasing this one. I am very pleased and would recommend it anyone that wants something very portable with great battery life.

Leave a Reply

To discuss this topic, head on over to our forums!