What you have to be wary of is executable or dll files (GTA .asi file is a renamed .dll). Most skyrim mods are esp, esm, textures, models and game-only scripts so there's no risk there at all.
For example, ENB and Skyrim Script extender could've been dangerous but when in doubt, use something like Virustotal or Jotti to scan the file first and read comments from others who've installed it.
It's people like OP that leave stupid comments in torrent pages that go like "OMG THIS FUCKIN THING DOES NOT WORK MY COMPUTER MELTED FUCKIN SUCKS" Because they don't bother to read instructions or descriptions.
And if you're paranoid if a crack has a virus or not, I usually use this website, which is pretty handy. http://virusscan.jotti.org/en basically it just uses a fuckload of virus scanners which should give you the idea of what kind of file that really is.
Someone else posted a malware report. Did a scan of it locally with MalwareBytes and it came out positive as well. This fucking clown. Downvote him to hell.
>I suggest someone upload their .exe to Upload the exe file(s) to http://virusscan.jotti.org/en and it might tell you the virus name.
Filename: puush.daemon.exe Status: Scan finished. 0 out of 22 scanners reported malware.
Edit: link to result http://virusscan.jotti.org/en/scanresult/47f4dd8e4da4cfc27a03d06246b64b8145eb16c6
You can always run a free malware scan and antivirus scan (housecall.trendmicro.com and malwarebytes are both free) on a one-off basis to make sure.
I don't know the name of the malware, but I suggest someone upload their .exe to Upload the exe file(s) to http://virusscan.jotti.org/en and it might tell you the virus name.
delete the specific file, then re-verify in uplay. it will download about 30MB.
Also try:
Temporarily disabling antivirus / firewall
Running a virus scan (also run additional malware/spyware scanner as well: Malwarebytes, Spybot SD, Ad-Aware, etc.). You can get a free antivirus scan from housecall.trendmicro.com, bitdefender.com, eset.com, any many others.
compress (zip) the .dll and upload it to http://virusscan.jotti.org/en to see if there is a virus in it. (zip it because the site only accepts files smaller than 25MB).
~~I scanned it with 20 AV scanners. The file is 100% clean.~~
The only thing to be worried about is performance in gaming while this is whirring away in the background.
EDIT:
The installer, though clean, connects to the internet and downloads a second installer that automatically runs (and then dumps an installer for the real program onto the computer). I did not scan the second installer. This installer asked to install 3 programs, one of which was a remote desktop application. I do not recommend installing the software with the provided link.
However, here is the installer for the actual program that is dumped onto the computer from the initial installer. So were looking at an installer (the real program) within an installer (filled with crap). I DID scan this one, and it appears to be clean. I'd only use this at your own risk.
I have OriginInstaller.exe in the DVD1 root, but my version is not infected.
If someone wants to pirate something, they should download only from safe/reliable sources (like private trackers, for example).
http://gyazo.com/f98c38c175adaed1cc82b20ea71d1f7e
http://www.reddit.com/r/GlobalOffensiveTrade/comments/2qd9q7/psa_free_ch_blue_identification_tool/
http://virusscan.jotti.org/fi/scanresult/6c7338e17e2aa894a9c46243919ea0cc52fc9f42
there are the links you need to show them in the support
Whilst it's not going to do much to your phone/tablet the app is basically adware.
That above signature is for an old version I've kept tucked away since I've been told the newer ones limit the amount of binge watching you can do so don't update it. Also doesn't have the Accounts permission either ;)
This file seems to have been infected with malicious software. http://virusscan.jotti.org/en/scanresult/29cbbf9c27ce5fa2f6577cd02f334b9626a0f9c6/40359aeeae0485e90cddced649b96d25ba84eb4d
You should scan your computer.
For those that are worried about the program (found it in the video description) you can use http://virusscan.jotti.org/en
I'm guessing there's no other software for pranks calls so they made their own. Looks pretty decent though.
We need an aligner comparable to the antivirus sites VirusTotal and Jotti that uses all available aligners to align each sequence and form a consensus.
It is only a registry entry with a matching name. I wouldn't worry about it.
If you really want to, you can upload the game's exeutable to a service like jotti:
It is not a keylogger maybe u should update your bit defender it has elements of scripting so it will throw up false positives on some programs heres the scan results
http://virusscan.jotti.org/en/scanresult/13290ac11e5d7b6b369dd88ffc1ab72a8c0de0f9
I'm not seeing any kind of malware or chrome addons on the sourceforge download link... it downloaded the latest mpc-hc installer as expected, and it definitely does not contain any malware:
Did you check out the Open Candy site, before jumping to conclusions?
The software is perfectly safe... OpenCandy is just a sideloader for other applications during install only. It gives a very clear screen letting you decide whether or not to install the additional third party software, or not. I've seen OpenCandy used many times, on software that I trust.
MSE will not complain at all once xfire is actually installed, it is just the OpenCandy installer addon that sets off the false-positive (because it is indeed false).
Here are the results on a number of AV scans of the installer.
Pior que não. Acho que você deve ter baixado de algum lugar estranho, porque baixando direto do site do criador ele vem limpinho.
There's the time4popcorn app which has Chromecast abilities and, to be quite honest, the hoo-har about it not been the "open source OG version" blah blah blah is fucking silly considering the very next commenter will be shouting from the rooftops about Showbox.
As for those Android sticks I've generally found them to be shit and/or locked down but apparently the mk808 is worthy to have a look at.
edit: for links
Screenshot of website: http://i.imgur.com/IXdkxLN.jpg
It's a clone of lightshot, with most of the links redirecting to a googldoc hosted version of a file named 'image04.scr', which is a pretty good place to keep it.
A scr file is essentially a renamed exe file. The scan results don't actually bring up much.
I'll look into the file later.
Doesn't need any mods for controller support, you just need a PC gamepad or a USB adapter for say a PS1 controller; it supports these natively. It does normally require you to hunt down the BIOS files necessary for it to work on your own, I went ahead and just uploaded the copy I use with these included though; http://jenkins.webatu.com/epsxe180.7z. If you'd like to scan it before running you can use something like http://virusscan.jotti.org/en.
When you first run the program it should give you a setup wizard. The only parts you really need to worry about are the parts labeled "Configuring the Video" (choose one of the ones marked D3D), and "Configuring the Pads". For the pads part, click Controller 1, change the option in the upper right to DualAnalog/DualShock if your controller has joysticks you wanna use, then just click the lettered boxes and press the button you want mapped there on your controller.
After all that you'll need the game too. Not sure if I'd get in trouble for linking directly to a copy, so I'd try googling "final fantasy ix iso". Once you have that and it's extracted (you'll end up with either a .iso file or a .bin/.cue set, either works), on ePSXe just go up to File > Run ISO and select the .iso/.bin file.
It's interesting what they're (Showbox) up to. If you run their app through an online virus scanner you're basically installing an adware app and along with the location permission - I guess you're getting a personalised ad service too
I use adaway out of the box but you can go one step further and use ROM Toolbox to actually whip out those ad servers completely.
MSE is fine to keep running all the time in the background when if you are having an actual problem you should scan with more than just that. First do a FULL scan with MSE. If that doesn't fix it use Malwarebytes Antimalware then SuperAntiSpyware then report back if it's still not fixed.
You can also check a specific file by uploading it to either of these sites:
Aside from what other people have mentioned, here's a really useful site:
If you have to run a pretty shady executable for whatever reason, putting it through this beforehand is a good idea (of course, nothing is 100% safe, keeping your risky software updated and not being an idiot is the best antivirus there is)
Go to jotti and try and upload it and run a scan on it.
What is the error you're getting when you try and delete it? It may just come down to permissions/ownership of the file.
As you can see there is no malware in this program. That's not to say I currently consider this program worth the effort, but there is no reason to falsely accuse the program of being malicious.
Use "Magic Window Hider", it's an amazing thing and it's easy to use!
(I modified it only to remove the title so it doesn't show up in the first tab of task manager. Rename to svhost.exe, tada!)
You probably have some sort of malware or that "freeware" program you downloaded is not behaving properly. You should uninstall it and possibly do a system restore to a earlier time before you installed it.
Use http://virusscan.jotti.org/en to scan the file to see if other scanners come up with something.
sure, but you can just compile it yourself if you don't trust it :P
EDIT: zipped the executable instead of packing it so that antiviruses give zero false positives for the OCD people :P http://virusscan.jotti.org/en/scanresult/b80e1d856cb235ea175a289dedfe542a09569130
> check it three times with three different virus scanners
How about 57 scanners at once? https://www.virustotal.com
If that one's down, Jotti will do 22 at once. http://virusscan.jotti.org/en
Only one result at Update_.exe others dont have any detection: http://virusscan.jotti.org/de/scanresult/5c8cd24059c8ae08f36918bc2048341b31af77bd
Did you check task scheduler to see if something there is restoring them?
You could try submitting them to Jotti and see if any of the scanners recognize them. If that fails, maybe zip them up and upload them to something like dropbox so we can take a look at them and see what they are.
bummer, i've been playing with <strong>remote utilities</strong>, witch is really nice but i'm annoyed that & how it's agent application (like teamviewer's quicksupport app) , is detected by av's & the warnings they give, especially if you make one yourself (custom settings and branding)
here's the jotti scanresults for their stock agent app. (so their branding)
here's the jotti results for a custom one.
most perplexing & unjust avast & gdata label the stock agent safe but any customized one as malwaregen
Virus scans just for those who are cautious:
Files confirmed to change in-game audio.
Edit: Found it pretty funny that the launcher was in Spanish but the post was in English.
It's been a long time since i've used VirusTotal. It just scans the file with multiple virus scanners and outputs the results. The problem with relying on anti-virus software is it typically won't catch things like this.
I searched for the file hash and someone already had it uploaded..
At the time of this post: "Detection ratio: 0 / 53" with 1 good and 1 bad vote.
(Just emphasizing this for anyone that may see 0/53 and think it's safe... THE FILE IS MALICIOUS.)
Yea. I'd rather not rely on anti-virus software for this kind of stuff.
EDIT
Decided to upload it to Jotti as well just for the hell of it. Even it came back with 1 / 22. With only clamav picking it up as a "PUA" (Potentially Unwanted Application)
http://skype-open-source.blogspot.de/2014/08/real-gateway-to-skype-network.html
i just downloaded that skypekit file from torrent and it's working again. ran that thing trough http://virusscan.jotti.org and it didn't show anything suspicious...
You could right click on it (in the task manager), open location, go back and terminate it, then rename it, so it can't run again. See if anything breaks.
You could also try submitting the file to Jotti to see what it thinks of it.
The study is using Inquisit folks. There is nothing wrong with this academic software. Your security software should be adjusted to accommodate as it is not malware. It would be nice if all hit titles could include "requires Inquisit" so I could skip. Some studies let you get half way done, then all of a sudden throw an Inquisit section at you in order to complete. I hate Inquisit ... most of the ones I've seen lock up your computer just for the dreaded key memory task. I skip all Inquisit ones because they irritate me beyond belief.
EDIT: added links for second opinion on suspicious files
http://www.av-test.org/en/home/?avtest%5Breport%5D=6287
They're sitting at 68% for zero day, whereas the industry average is 94%.
Their record for widespread <4 week old malware is 79%, industry average of 98%.
http://chart.av-comparatives.org/chart1.php has them at 89%, the baseline, by which every other AV on the chart performs better at catching it.
Now, that doesn't mean that MSE isn't worth anything. If you're not in a business or critical environment, making sure you're not running anything you get from random places, running an anti-malware suite every once in a while and generally following common sense will leave you in a perfectly fine position.
But if you're in a corporate environment where viruses can get quickly spread around, the standard MSE is likely to be insufficient.
But, low risk individuals won't see a difference between 80% and 99% if they only see 2% of the viruses in the world.
I personally use MSE on all my devices. But I don't go downloading things with reckless abandon. Nor do I run a program I'm not 100% sure on without running it through places like www.virustotal.com and virusscan.jotti.org/en.
Can you point me to the location of the file of origin or put it up on a mirror?
Additionally, you said that you are getting an error when you are trying to delete the files in question. Can you please attach a screenshot of the error box?
You ask if you should run it - but what are you asking if you should run? The pack? Have you already run it (you said it created a file).
Finally, what antivirus and antimalware do you run?
One of the easiest ways to determine if a file is a virus (or not) is to check it on a multi-scanner. http://virusscan.jotti.org/en and https://www.virustotal.com/ work, but only if the file is under the limit (25MB for jotti, 64MB for virustotal).
If I can get the file, I can take a bit better look at it in a virtual environment in order to assess the risk, but otherwise it would be taking shots in the dark. Booting into safe mode in order to remove it should work, but if the virus is present elsewhere on the computer, deleting it will prove rather useless in the end.
>This 3DS Emulator reports "full" functionality on some titles already.[1]
Plenty of fakes, no legitimate emulators yet. The download links for both the emulator and bios files stick you with these "downloader" scripts chock full of adware and toolbars.
Scan results via Jotti: 1 and 2
Basically, http://i.imgur.com/rx5Hbbz.png
I've added the links to Jotti and Virustotal on the thread's description.
^ A multiple-product, online scanning service. There are several; this is the one I tend to remember.
To be honest, I'm more concerned with how to deal with this suspicion from the developer's perspective...
http://virusscan.jotti.org/en/scanresult/fd8d124e5a269c17f0c7e5107f0441f70705a7ed
I've got adaway installed so I'm not seeing any ads with showbox and looking at what permissions it's accessed with xprivacy it isn't showing any abnormal behaviour.
As for these been 'bittorrent files' and you guys getting a DMCA (man, I wish they would send me some free toilet roll) that's not the case here and as it says when you fire up videomix - it's getting its content from video locker sites exactly like TV Portal does.
+1, and thank you for the heads up on showbox OP.
File extensions are meaningless and for our convenience only.
Anyway, is this a pirated album or an official release? If official, ask whoever you bought it from. If pirated, just delete the file. If you're curious, upload it to an online virus scanner and see what it says.
Well, I'm pretty sure you can't set the scroll mouse button in the dota 2 client, nor the scroll wheel directions, I really tried and failed. Yes, gaming mouses or "decent" ones have the options to rebind but it's a global rebind that interferes with other programs as well, also many normal mouses are with with 2 buttons and scroll and don't even have extra buttons. Also it's a simple autohoktey script that's not even encrypted, and I provided a scan link to http://virusscan.jotti.org, any detections by wanna be anti-viruses are false positives. The fact that you don't like or need the program is not my concern.
VirusTotal - https://www.virustotal.com/file/c1285c92a7fedf4eae27aa84257aa9bc04814308368787a52b740d5b2a986184/analysis/1347740409/
Jotti - http://virusscan.jotti.org/en/scanresult/642b74a4297cad50b2d358835180925bf1209ca4
VirScan - http://r.virscan.org/report/cbcc2675102f74f483bbbcbae1eabf07.html
Glad to see nothing is found, but in this day and age, you can never be too sure =\
The error's in the screenshot. I have admin privileges, so perms/ownership should be a moot point, right?
Jotti has mixed results. Thanks for the tip. Might be a virus might not be, probably just shitware.
Try scanning the file (dvm.dll or the exe of the game) with Jotti's Malware Scan. You'll see if other anti-virus programs also report it as malware. If it is only Sophos, this is most likely a false-positive.
Yeah AVG is at least better than Norton, but still not top notch. I use Panda Cloud on my HTPC because I only stream and don't give a shit, and avast! on this one.
And fishy files gets a run through this site: http://virusscan.jotti.org/en
since VT is down right now i scanned it with:
and
http://www.filterbit.com/results.cgi?uid=9sf0zt728kf1ulpgt5v4eeo7yktvo2ug
how about keeping JAVA, FLASH and (adobe)READER up to date, and not clicking strange links. ANYTHING you are not sure about should be scanned here: http://virusscan.jotti.org/en (don't install pirate software, but if you are going to, run it on this scanner). Oh, and don't let your kids use your computer, get them their own, and erase all their stuff every time it gets infected, hopefully they will learn. I've not ever run antivirus software on any windows machine i've used, and i've been virus free since windows 98(yeah, i opened the wrong self extracting zip from soneone in my address book).
Oh, and quit facebook, hit the gym, and eat some waffles.
Would you trust me if I said I had, anyway?
It's not complicated: If you have the tool, you can benefit from its abilities. If you don't, you can't. Perhaps if you just validated it in a VM or with something like http://virusscan.jotti.org/en ...