About the .scr file - malware

[`ptzxc]

Will deleting this file and changing steam and email passwords enough?

[canttttttt aimmmm]

Do i need Premium or the free Malware?

[Brujeira]

Opprinnelig skrevet av Belgian Problem:

Well, will norton fix the problem? If i do a full system scan i pressume it will work, right?

Don't bother with Norton - it's already got past that once when you got infected so it probably won't show in the scan. Use MalwareBytes Anti-Malware instead.

Opprinnelig skrevet av I think i got hacked:

Do i need Premium or the free Malware?

The free version's fine.

[Belgian Problem]

I must also ask the question: Exactly what will it do? has it already got my steam passwords? Credit information stored on my steam account? Or is it when i enter any details it then steals those?

[Belgian Problem]

Also, can i get the link? I would rather be safe an not have to google it.

[Brujeira]

Opprinnelig skrevet av Belgian Problem:

I must also ask the question: Exactly what will it do? has it already got my steam passwords? Credit information stored on my steam account? Or is it when i enter any details it then steals those?

What will it do? Well, that's anyone's guess - it could have keylogged all your details or it could have been a test run that did nothing except spread itself on. You should play it safe and change your passwords again once you're rid of the virus... here's the MalwareBytes link:

https://www.malwarebytes.org/

[BetaSword]

New Troyan/Virus hijacking the Friend-Chat

A new Troyan/Virus appeared for me and a Friend, While I was able to prevent my System from getting infected, His System seems to be affected
The first Contact after quite a while was send by that Virus:
"
Hi see what gift I did. you need for free: screen4you.in/##########
"
I censored thesecond half of the URL for your Safety.

If you open that entire URL, you'll download a knife.scr-File(from googleusercontent.com), being a Virus/Troyan cloaked as a Screensaver.
Accoring to my Friend, it hijacks several Chats, trying to spread it's URL through messages.

While I'm quite sensible about possiblevirusses, I'll refuse to take any unknown file, even from a friend, when the last contact was several months/years ago.

If someone (Like someone working against Virusses or from Valve) likes the entire URL, I'm still capable to give the URL, but not as open as this Discussion here, so that normal Users are not in danger of getting infected/hijacked.

[Bradnitney]

yeah i just got this i havent been hacked yet but i got the link and i didnt download it

[Bradnitney]

ive seen the link two of my friends got it i didnt do it though i clicked the link and it asked for download i didnt download it

[C4]

Just funny people was giving me a hard time for warming people about itt....Oh well

[Nkosana Obayana Abioye]

ATTENTION ALL STEAM USERS - VIRUS THREAT

Hello there fellow members,

Just a couple days ago, a virus has been going around steam. You may randomly get a message saying "DUDE WTF" followed by a link.

For god's sake do not click on that link. It isn't a picture. If it were a picture, it would have a .jpg or other picture extension at the end.

Your friend that sent you that was simply the victim of the virus, they weren't intentionally trying to harm your computer. I got lucky and opened the link on my phone where no harm could be done.

[allen the dumpster]

WTF IS THIS EXHANGE THING?!!?!?!?

So recently i was spammed, and people thought i spammed, people, it spammed : You will exchange this thing? With a weird link... So if gaben finds this, PLEASE HELP!!!

[PUNCHLINE]

very good discussion! it got me too :(

[Solidus1983]

Yep new one out. Heading to screen-pictures which is also a fake site. Runs the same pattern as most facebook scams i.e infects upon clicking link then fires the same link to everyone else in the friend lists. DO NOT CLICK THE LINK!

[BetaSword]

Opprinnelig skrevet av Totoro:

ATTENTION ALL STEAM USERS - VIRUS THREAT

Hello there fellow members,

Just a couple days ago, a virus has been going around steam. You may randomly get a message saying "DUDE WTF" followed by a link.

For god's sake do not click on that link. It isn't a picture. If it were a picture, it would have a .jpg or other picture extension at the end.

Your friend that sent you that was simply the victim of the virus, they weren't intentionally trying to harm your computer. I got lucky and opened the link on my phone where no harm could be done.

Agreed, according to his statements, he got this Hijacker the same way, the Link reached me, as a Message from an infected Friend.
And just because I thought of this being a Virus/Troyan, I didn't open it, asking him why he sended me this before openng it.
Also, just like I already stated, we weren't that active in any method of communication within the last months/years.

However, If this were to spread on more Computers(most likely to happen), It is quite possible to recieve such a Virus/Hijacker/Troyan from Friends you usually trust, making it easier for it to reach us.

[Solidus1983]

Well i found the owner of the site. Its a Russian Owner.

Levkovskiy Alexander Olegovich
and tied to a russian name server.

Where do i send all these details to steam to get this site closed.