"View more info" virus.

[Cadetmaster]

Not sure if this is the right forum, but well, I'll put it here anyway.

I was looking at someones profile (I can't remember who) who was participating in the new steam trading card beta thing and I was reading their info on their profile and I clicked "view more info" and the next minute I was redirected to a website which basically logged me out of everything I owned, (including steam), my anti-viruses went insane and as I'm writing this now from a different PC, I'm not even sure if my PC is infected, but it seems highly likely.

Basically, I'm just saying be rather careful upon clicking the "view more info" link as currently, it can be easily disgiused as a link to a website that could be malicious.

[DarkCrystalMethod]

The View more info link provided by valve will pop up the rest of the user's profile.
Do not click ANYTHING in the popup unless you copy the link first, paste it in notepad and make sure its safe.
I'd really like my full-height profile summary back without the popup, but it looks like thats not going to happen.

[Satoru]

Use the 'free text showcase' if you want to assault my eyes with your ascii art

[Satoru]

If you had the profile I could look at the javascript code but there's nothing in there that woudl seem to allow what you're describing.

[Cadetmaster]

I honestly can't remember it, it was a very high level profile, 40+ infact.

[Satoru]

should be in your browser history on the other computer. But like I said without the source profile I can't really say how its possible otehr than perhaps an overflow or an unchecked kind of input that passest hrough the javascript.

Without the target account your account coudl ahve been compromised via another method that just 'happeend' to conicide with what you did.

Its a concern that's worth investigating

[Cadetmaster]

The Steam ID is CrystalTheory from what I can find, it's a very popular profile with tons of stuff.

[Satoru]

http://steamcommunity.com/id/CrystalTheory

This one?

[Cadetmaster]

Yes, I think so, I basically just clicked "view more info" and everything went insane. I'm a bit of a scrub with things like this, so if the problem isn't much of a problem after all, I must apologise.

[Satoru]

Aha I see what happened

1) The "more Info" actually links to a URL it is not the 'view more info' that is normal its' actually a custom URL link
2) Notw when you click it it does warn you that you 're going to an external site (which you ignored)
3) the site autologs you out of many services

Aka if you read the warnting its not a big issue and teh webstie uses javascript to log you out of websites which isn't that hard to do actually.

Lesson, when staem warns you about going to anexternal website, be careful :P

[Cadetmaster]

I generally wouldn't ignore if it warned me that it was an external site, I don't even recall being warned, but then again, I was about to sleep, so it's highly likely. The site itself isn't actually harmful then?

[Satoru]

The link does giveyou the standard "External URL" warning before you click OK for me it did at least.

The site itself is not harmfjul otehr than logging you out of various popular services. it's mostly jsut annoying.

[Satoru]

I thought it used to be more 'buttony' before i wonder why they reverted it to a URL-ish looknig thing

[Cadetmaster]

Thanks a lot for the support Satoru, don't know what I would of done without you. :)

[Roee]

I think i marked the ''Don't tell me again'' button when i clicked a link in the past, is there any way to return the warning?

[mimizukari]

Roee a écrit :

I think i marked the ''Don't tell me again'' button when i clicked a link in the past, is there any way to return the warning?

there's such a thing? I'd like it to not warn me.... since I only click links I trust in the first place