安装 Steam
登录
|
语言
繁體中文（繁体中文）
日本語（日语）
한국어（韩语）
ไทย（泰语）
български（保加利亚语）
Čeština（捷克语）
Dansk（丹麦语）
Deutsch（德语）
English（英语）
Español-España（西班牙语 - 西班牙）
Español - Latinoamérica（西班牙语 - 拉丁美洲）
Ελληνικά（希腊语）
Français（法语）
Italiano（意大利语）
Bahasa Indonesia（印度尼西亚语）
Magyar（匈牙利语）
Nederlands（荷兰语）
Norsk（挪威语）
Polski（波兰语）
Português（葡萄牙语 - 葡萄牙）
Português-Brasil（葡萄牙语 - 巴西）
Română（罗马尼亚语）
Русский（俄语）
Suomi（芬兰语）
Svenska（瑞典语）
Türkçe（土耳其语）
Tiếng Việt（越南语）
Українська（乌克兰语）
报告翻译问题
此主题已被锁定 
讨论规则及指引
举报此帖
Well, yes. If there were no stupid people, it wouldn't work.
Wow you seem unaware what all can be infected.
For example
Visit youtube search for anything (possible infection), those ads that pop up in screen of the video (infectable), those ads that run on the side (infectable), the x close box on either to remove them (infectable), as well as if you actually click on their link. And that's all without logging into a youtube account, cause your sign in is (infectable).
Hitting/using a program with a hyperlink or/and exe designation isn't the only way to get hit by hackers.
Simple logging into my email, and not even opening a single one is what infected my box. I never clicked link one.
You watch any video on any site. The site used your adobe flash, silverlight, winvid, java, and/or a few windows subproceeses just to allow your stream.
Use google or any search engine you just opened your firewall up.
Try visiting IMBD right now. they got hit this week and still haven't shut down their hack status. You better remove the 3 worms you'll get on their opening splash page alone.
Comcast.net got hit 2 weeks ago and it still doesn't function worm free.
Steam got hit last week, and they patched for it. But I think they patch every week recently.
The hacker stuff is flying thick right now. Cashing in on hloiday online shoppers and that stupid N Korea stuff too.
Just avoiding strange links and hoping your virus scanner is working is grossly delusional in the current enviroment.
So sad. I don't wish you an infection. But you'll get one with those delusions.
Go take a programming course dude.
http://en.wikipedia.org/wiki/Nimda#Methods_of_infection
http://en.wikipedia.org/wiki/Klez
http://en.wikipedia.org/wiki/SQL_Slammer#Technical_details
http://en.wikipedia.org/wiki/Sasser_%28computer_worm%29
http://en.wikipedia.org/wiki/Conficker#Initial_infection
Oh agreed. But that dude is so clueless he'd even argue with the programming for dummies book. I just thought he'd listen to a professor a tad better.
That is also true. You will not get your Steam account stolen through such worms. That kind of malware is usually trying to make your computer join a botnet, crash the internet, destroy computers en masse, or otherwise bigger payloads.
Its the same old Security Issue that hit Win95 long long Time ago, i don't get it why Steam repeats the same Security Issue and still hasn't fixed it.
Its a open Door for exactly such Attacks, where the Scams send you Files with non-executable Extension that are in Reality executable, this should be made impossible.
In the Past it was possible to send a File like .jpg.scr or .jpg.exe and only the .jpg was showed, but if someone opened that File, it was executed. The Steam Client seem to have the exact same Security Issue, i checked those Links and the true Extension .scr is not shown, instead it looks like an Image.
So its clearly a Steam Client Security Issue and a such Thing should be fixed instantly else Steam is to made Responsible for any Damage caused by it!
Yeah of Course, People should know by now that they should not execute any unknown Files, but opening an Image with .jpg extension is not executing a File and if the Software (in this Case the Steam Client / Steam Webhelper) is so dumb and cheap that it allows hidding extensions to the User and then instead showing a Image executes the File, it's also the fault of the Software and not only the one of the User.
Good Thing is this Attack does not really work with newer Windows and if Internet Explorer is up-to-date, at least the User will get a Warning Message and is asking for permission to execute, because Steam seems to use the Internet Explorer Engine.
And clicking on those Links opens Internet Explorer with that Link, at least its what happened when i tested it and this should not execute it if your System is up-to-date.
Also i analysed that Virus a bit, it seems that it trys to directly hijack the Session, at least there is code for it in there. So i suppose it's able to hijack the Steam Session and to use the API directly to do his malicious work. Thats also why it is able to send Messages to the whole Friendslist.
Steam really should fix that Hole, why the hell they put so much Effort on detecting Cheats with VAC but then seem to be totally blind if their whole Client/API gets hijacked?