Downloading from f95zone.to security concern

[MrSolid]

So i downloaded some games from

what i didnt realize at first if that when clicking the download buttons you get some spam results like this *edited to avoid amyone downloading on accident* *******f59mlmevytdlots/!Ǵe-Set_p--2249__Pǎ$$w0ɾD#!!.zip/file*

Which is a compressed 2.6MB file that turns to 660MB when unpacked, I stupidly clicked it and the default windows antimalware service kicked in for a while (seen on taskbar) and nothing happened no detections. Nothing happened either when i clicked run and authorize

I did a malwarebyte scan and no threats found, im just worried this is some type of virus and wanted to know more about it, did a quick search and no results

 

[Hagatagar]

What game is it and where did you download it from? The OP of a game thread or some random user?
The name of the file looks kinda shady.

!Ǵe-Set_p--2249__Pǎ$$w0ɾD#!!


I once downloaded a 2 GB game and it turned into 15 GB, because it was compressed that good.

 

[Count Morado]

Edit your post to remove that link. Describe it, don't link to it.

Edited: I gave them 45 minutes. I reported the post to remove the link.

 

[MrSolid]

What game is it and where did you download it from? The OP of a game thread or some random user?
The name of the file looks kinda shady.

!Ǵe-Set_p--2249__Pǎ$$w0ɾD#!!


I once downloaded a 2 GB game and it turned into 15 GB, because it was compressed that good.

Basically any game from
When you click the download buttons you get some spam redirects to this shady link
I now learned you just have to keep clicking the download button until you get the real link

For example

Edit your post to remove that link. Describe it, don't link to it.

Edited: I gave them 45 minutes. I reported the post to remove the link.

I edited, sorry

 

[Count Morado]

So i downloaded some games from https://f95zone.to/ what i didnt realize at first if that when clicking the download buttons you get some spam results like this *edited to avoid amyone downloading on accident* View attachment 4439257 *******f59mlmevytdlots/!Ǵe-Set_p--2249__Pǎ$$w0ɾD#!!.zip/file*

Which is a compressed 2.6MB file that turns to 660MB when unpacked, I stupidly clicked it and the default windows antimalware service kicked in for a while (seen on taskbar) and nothing happened no detections. Nothing happened either when i clicked run and authorize

I did a malwarebyte scan and no threats found, im just worried this is some type of virus and wanted to know more about it, did a quick search and no results

Basically any game from https://f95zone.to/city-of-dreams-v0-2-vncityofdreams/
When you click the download buttons you get some spam redirects to this shady link
I now learned you just have to keep clicking the download button until you get the real link

For example https://f95zone.to/city-of-dreams-v0-2-vncityofdreams/

I edited, sorry

I went to https://f95zone.to/threads/city-of-dreams-v0-4-2-vncityofdreams.172460/

This seems to be a problem on your side ... not with the site. See video:

View attachment mediafire.mp4

 

[Goeffel]

I think there is a problem in communicating here, the forum's (THIS forum's) auto-censor when writing f95zone.to_.it "autocorrects" it to f95zone.to

You likely downloaded from that scam site which is not this site. Just some website that tries to parasite on being confused with this site here.

so, delete whatever you got from there. Safely (mostly) download things from here.
-------------------------

maybe it would make more sense if forum censor would "autocorrect" the .to.it URL to **********/[etc.], like it does with that lewd zone (or whatever that name was) URL.
That way anybody could easily see that it is a "bad" address/ site.

 

[MrSolid]

I think there is a problem in communicating here, the forum's (THIS forum's) auto-censor when writing f95zone.to_.it "autocorrects" it to f95zone.to

You likely downloaded from that scam site which is not this site. Just some website that tries to parasite on being confused with this site here.

so, delete whatever you got from there. Safely (mostly) download things from here.

Yep thats what happened i just realized that now, fuck im freaking out now
What puzzles me is malwarebytes and windows defender didnt detect anything

I went to https://f95zone.to/threads/city-of-dreams-v0-4-2-vncityofdreams.172460/

This seems to be a problem on your side ... not with the site. See video:

See post above is what happened, i further edited my post to remove links and added screenshots instead

 

[Count Morado]

So i downloaded some games from View attachment 4439285

what i didnt realize at first if that when clicking the download buttons you get some spam results like this *edited to avoid amyone downloading on accident* View attachment 4439257 *******f59mlmevytdlots/!Ǵe-Set_p--2249__Pǎ$$w0ɾD#!!.zip/file*

Which is a compressed 2.6MB file that turns to 660MB when unpacked, I stupidly clicked it and the default windows antimalware service kicked in for a while (seen on taskbar) and nothing happened no detections. Nothing happened either when i clicked run and authorize

I did a malwarebyte scan and no threats found, im just worried this is some type of virus and wanted to know more about it, did a quick search and no results

NOW I SEE YOUR PROBLEM


That is not F95Zone

That is a copycat that is not connected to this site. Only go to F95Zone.to --- trust nothing else.

Goeffel - good eye. I didn't see the addition of that screenshot when I went off to check the links.

 

[MrSolid]

NOW I SEE YOUR PROBLEM
View attachment 4439295

That is not F95Zone

That is a copycat that is not connected to this site. Only go to F95Zone.to --- trust nothing else.

Goeffel - good eye. I didn't see the addition of that screenshot when I went off to check the links.

What antivirus do you recommend to make sure i did not get anything from it
Malwarebytes and windows defender report no detections

 

[Count Morado]

What antivirus do you recommend to make sure i did not get anything from it
Malwarebytes and windows defender report no detections

I don't have any recommendations. Sorry.

 

[Penumbral Evanescence]

So i downloaded some games from View attachment 4439285

what i didnt realize at first if that when clicking the download buttons you get some spam results like this *edited to avoid amyone downloading on accident* View attachment 4439257 *******f59mlmevytdlots/!Ǵe-Set_p--2249__Pǎ$$w0ɾD#!!.zip/file*

Which is a compressed 2.6MB file that turns to 660MB when unpacked, I stupidly clicked it and the default windows antimalware service kicked in for a while (seen on taskbar) and nothing happened no detections. Nothing happened either when i clicked run and authorize

I did a malwarebyte scan and no threats found, im just worried this is some type of virus and wanted to know more about it, did a quick search and no results

Yeah, that's a known scam site. Never trust the files that are hosted on those copycat sites, needless to say.

Another way to confirm the safety/security of the site is via the site's SSL certifications.

Legit:


Scam:


^ Notice how the common/domain names are different? The former being legitimate and the latter being the fraudulent copycat site.

 

[Penumbral Evanescence]

antivirus do you recommend

Windows Defender/Malwarebytes is usually the go-to for me personally. However, if you are looking for alternatives, here are a few that have worked for me well in the past:

You must be registered to see the links

You must be registered to see the links

You must be registered to see the links

^ If I had to pick from the three above, Bitdefender would be my 1st choice as an alternative antivirus program.

 

[zonesamabaka]

Which is a compressed 2.6MB file that turns to 660MB when unpacked

packed to slow down a/v & avoid virustotal (650MB upload limit)

Nothing happened either when i clicked run and authorize

authorize meaning UAC prompt for admin privilege? that's not good

I did a malwarebyte scan and no threats found, im just worried this is some type of virus and wanted to know more about it, did a quick search and no results

its possible it was just a stealer and didn't leave any permanent infection.

you should probably log out & change some of your most important passwords like email/bank from your phone/other computer at least
maybe keep scanning with some of those a/v linked by Penumbral and checking your online accounts for weird behavior for now.

 

[MrSolid]

packed to slow down a/v & avoid virustotal (650MB upload limit)

Yes, however i did scan the unpacked file afterwards and no detection

authorize meaning UAC prompt for admin privilege? that's not good

Unfortunately yes

 

[MrSolid]

Windows Defender/Malwarebytes is usually the go-to for me personally. However, if you are looking for alternatives, here are a few that have worked for me well in the past:

You must be registered to see the links

You must be registered to see the links

You must be registered to see the links

^ If I had to pick from the three above, Bitdefender would be my 1st choice as an alternative antivirus program.

Not really looking for another antivirus, just was wondering if im good after scanning with malwarebytes and windows defender with no detections or if i should scan with some other antivirus

 

[zonesamabaka]

Not really looking for another antivirus, just was wondering if im good after scanning with malwarebytes and windows defender with no detections or if i should scan with some other antivirus

nobody can guarantee whether or not you're safe just because an a/v didn't find anything, would need access to your system for any reliable diagnosis

if you don't want a new antivirus, Sophos and ESET both also have a "one time scan" program you can use without replacing your currently installed a/v

You must be registered to see the links

&

You must be registered to see the links

 

[Hagatagar]

The fact that the site looks completely different didn't make you suspicious?

 

[anne O'nymous]

The fact that the site looks completely different didn't make you suspicious?

It was the first thing I noticed, it's the "to.it" scam spreading malware, not F95zone.

 

[Lerd0]

It was the first thing I noticed, it's the "to.it" scam spreading malware, not F95zone.

..nuh uh....im spreading all the virus....
...is what the zonies say....and they wouldn't lie.....

 

[anne O'nymous]

..nuh uh....im spreading all the virus....
...is what the zonies say....and they wouldn't lie.....

No, what you spread is a different kind of virus...