- Aug 5, 2016
- 1,016
- 2,888
Becareful someone is spreading viruses with the game packages. I just found that yesterday some virus called mayweather which uses TOR installed in my system. It came to my system yesterday.
- Jul 21, 2016
- 635
- 5,705
- Aug 5, 2016
- 1,016
- 2,888
I use Malwarebyte. I don't think every game spreads viruses, I think certain people in here may secretly embed viruses among their releases. I notice that not all games are coming from F95, some random users upload them too. I am sure it came from one of the games I downloaded here, because I didn't download anything recently from other places.
- Aug 5, 2016
- 1,016
- 2,888
It's not a false alert, I found this in the "startup" tab in the task manager. It shows something called mayweather which automatically opens when the system starts, it has this TOR files in a sub folder. I found that they installed there in yesterday. I think it's better someone checks the releases if they are coming from untrusted people, once they are trusted enough let them upload without going through the verification process.Fake alerts
Which Antivirus are you using?
Last edited:
- Aug 5, 2016
- 1,016
- 2,888
These are the games I downloaded yesterday
A3D02_Ayako_Sex-Addiction_ENGLISH_UNCENSORED_v1-3
TDLT_win
Alansya Chronicles - Fleeting Iris
I suspect "A3D02_Ayako_Sex-Addiction_ENGLISH_UNCENSORED_v1-3" might be the culprit. I remember it's uploaded by someone called
EEEEEEEEEEEEEEEEEEEEE
and it's hosted in some russian host.
A3D02_Ayako_Sex-Addiction_ENGLISH_UNCENSORED_v1-3
TDLT_win
Alansya Chronicles - Fleeting Iris
I suspect "A3D02_Ayako_Sex-Addiction_ENGLISH_UNCENSORED_v1-3" might be the culprit. I remember it's uploaded by someone called
EEEEEEEEEEEEEEEEEEEEE
and it's hosted in some russian host.
You must be registered to see the links
- Aug 5, 2016
- 1,016
- 2,888
Please check whether you have this file or not. Make sure to use your username as "User"
C:\Users\User\AppData\Roaming\MetaData\sys6nt.exe
It also has a subfolder which has TOR files, it runs along with this executable. I am not sure it's catchable through an antivirus guard.
EDIT:
I Found in the Kaspersky forum something like this.
begin
TerminateProcessByName('C:\Users\User\AppData\Roaming\MetaData\sys6nt.exe');
QuarantineFile('C:\Users\User\AppData\Roaming\MetaData\sys6nt.exe','');
DeleteFile('C:\Users\User\AppData\Roaming\MetaData\sys6nt.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','utcsvc');
ExecuteSysClean;
RebootWindows(true);
end.
and I found the exact files were in my system.
I found this
HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','utcsvc
through Malwarebyte
C:\Users\User\AppData\Roaming\MetaData\sys6nt.exe
It also has a subfolder which has TOR files, it runs along with this executable. I am not sure it's catchable through an antivirus guard.
EDIT:
I Found in the Kaspersky forum something like this.
begin
TerminateProcessByName('C:\Users\User\AppData\Roaming\MetaData\sys6nt.exe');
QuarantineFile('C:\Users\User\AppData\Roaming\MetaData\sys6nt.exe','');
DeleteFile('C:\Users\User\AppData\Roaming\MetaData\sys6nt.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','utcsvc');
ExecuteSysClean;
RebootWindows(true);
end.
and I found the exact files were in my system.
I found this
HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','utcsvc
through Malwarebyte
Last edited:
- Aug 5, 2016
- 5,071
- 13,977
Some QSP files has a Trojan, the program used in those Russian games with rl photos, they found it in the TFGamesite not long ago.
I would highly advice using a program called
You must be registered to see the links
when dealing with executables that shouldn't be trusted. It creates an extra layer of protection against malicious software by containing their hard drive write access into an isolated sandbox environment. This environment looks like the real deal for the executable, so most software should work fine with it unless they are doing some very low level things. Even installable programs should work just fine. Pretty much only thing that hasn't worked well for me has been Oculus Rift games, and I would assume installing drivers would be a bad idea. Oh, and Sandboxie is free for personal use, so there really isn't any reason to not use it.
- Aug 5, 2016
- 271
- 233
Yeah, it's pretty much just an extra layer of protection. You still shouldn't run anything that you know to be malicious for sure.
Ive noticed more malicious stuff coming up recently when I put them through a scanner (Virus Total).
I Scanned the Void link for a
NanoLess Collection [Patreon] [NanoLess]
and this is what I got.
I Scanned the Void link for a
NanoLess Collection [Patreon] [NanoLess]
and this is what I got.
- Nov 29, 2017
- 558
- 1,478
