Beware Techstream - Virus

While there are probably some versions of Techstream available that are safe, there are absolutely some that are not.

In spite of being a very technically savvy user with a background in electronics and low level software engineering, I am currently in the process of cleaning up a big mess of virus poop on my computer.

Operating on some (reasonable) comments that virus heuristics were triggered by the patches and cracks, I went ahead and clicked away all of the "I know what I'm doing, go away" warnings, and installed a few different versions of Techstream. After going through a number of iterations I found one that seemed to be working. The first sign that I screwed myself was the appearance of error messages with files not related to Techstream, and rather security sensitive ones at that.

I went ahead with this because I've actually been considering a full wipe and reinstall anyway, but if this isn't something you're prepared for then I can't recommend any source of Techstream that isn't fully validated as safe and legitimate.

Mine was purchased from Amazon and the software that came with it on a mini-CD was already being flagged when I tried to create my initial backup of the media.

Replies to this thread with credible information for myself and others on avoiding this pitfall while enjoying the full use of Techstream would be helpful.

 

Yea I sail the high seas for somethings, but sometimes you just give in and let the virus stay haha. You pay for it!

Techstream is now browser based so future iterations simply won't be pirate-able anymore. 4th geners may not get full access to their trucks.

 

You could always purchase a valid license from TIS.

Cracks are almost always going to be flagged, which is actually good for those who like to insert viruses info the code, as can be seen by your predicament.

Cracks will flag for multiple reasons, one being that cracks and viruses can operate in the same way, by altering the code of another file. Another is because companies don't want cracks shared, so virus protection will typically flag it in the hopes of scaring away the user. And lastly, there may legitimately be a true virus lying within.

Installing a sandbox and testing within there would be the safer route (although, that is not the safest method).

 

So, shame on me for not doing enough research, but I actually thought that in purchasing the hardware and software that I'd be getting a legitimate license. I'm not sure how the sellers don't get their listings shut down, considering that the included software is: a) copyrighted, b) cracked, and c) contains viruses.

And yes, there is actually a virus in at least one of them that was included on the disc. No, it's not just the antivirus trying to scare me away. For anyone reading this and thinking "that sucker just got scared away", then go for it. Roll the dice.

I'm not against paying some reasonable amount for such things. Well, okay, I'm against a large corporation holding information ransom that should be openly available and accessible, but I know that my objection won't change anything and therefore I'm resigned to pay some reasonable and affordable amount for it.

This has given me the opportunity to restore my computer to "like new" status and with this recent chastening I'll be looking for a cheap/free older laptop to use for this.

 

If you really want to have fun, tell the seller that the installer wouldn't run & send the disk back with the MEMZ trojan in place of the techstream installer.

 

I took a different route. I had heard Tech Stream is not a fast program and the type of computer would not matter much. So, I went out and bought an old laptop for ~$135.00 and installed Tech stream. That computer will never touch the internet after the initial download and will only be used on the truck. Problem, or rather potential solved.

 

Might be a stupid question, but is there no concern of a potential virus jumping from the laptop to your truck? I get that you don’t care about the laptop, but who knows what a hacker could push to your truck via malicious code inside tech stream?

 

Not a stupid question. What does the hacker get out of doing so? They would never have any feedback as to their success. Only a Toyota dealer or one of the many tuners would have anything to gain in correcting the problem.

 

Not necessarily. Might need a tin foil hat for this, but think about all the electronics in your truck. Connection to Toyota services, potentially devices you plug into the truck, …

 

I don't know what year they started, but the Toyota app for my '23 can remote start, stop, and unlock the truck. Now, as soon as a door opens the engine shuts off if it was started this way, but that's how it came from the factory - a sufficiently determined hacker may be able to figure out how to keep the engine running and steal this way.

Or more likely, sell the ability to target and steal trucks to any thief.

Which now that I think about it I kind of want to remove the ability for Toyota to connect to the truck at all. Seems like added attack surface for minor benefit at best.

 

Techstream is a positive, all those other things are not and have been disconnected or plan to as soon as I can find just what DSM & cellular antennas to disconnect and install 50 ohm loads in their place. These trucks are easily stolen by other means.

 

Yeah, if you figure that out on the antennas I know I would be interested to know at least.

Probably not until Toyotacare is over and done with, but the miles I put on that'll be within a year.

 

@caribe makaira has already posted the necessary info to disable the DCM. He also posted the info to get the microphone working afterwards.