I did a scan already, but there was only 3 detections. It's apparently a trojan and password stealer according to VirusTotal. Since the images on the website are AI generated, I was just curious to see what the file does when you open it. Could someone with a VM check it out and tell me? I have an interest in viruses but can't seem to figure out how VMs work.

The VirusTotal link is https://www.virustotal.com/gui/file/55ace95a47830e91b8f04cbce81e51cec80ebb594f0a85c5353b525a05eebe57?nocache=1

The website link is hxxps://kuresagame,blogspot,com/

I'm pretty new to this type of stuff but I got send a minecraft modpack by a friend of mine and I decided to scan it because I am a very cautious person and I was surprised to actually see all of this stuff? Did my friend try to hack me???

(UPDATE) So yeah my friend did try to hack me, and unlike how some of you guys say it wasn't someone posing as them, he really was trying to steal my account for whatever reason :| I should be fine since I kept it in the zip file right?

https://[.]www.dropbox.com/scl/fi/okcvx9z6edsm8p4rt898m/RacingSim-Setup-2.0.0.zip?rlkey=kcmg6tzbx4oh81g0t10ohuv3u&e=1&dl=0

I was sent a fake game on Discord titled "RacingSim" that I stupidly trusted and ran. It seems to steal Discord tokens as well as possibly browser cookies. If anyone could reverse-engineer this and see what kind of damage it might've done it would be greatly appreciated. I am NOT asking for help removing it.

I should've removed most traces of the file via Microsoft Safety Scanner, a Codex sweep, quick scans with MalwareBytes and Windows Defender but there's always additional risk, because the file wasn't detected when I initially downloaded and scanned with MalwareBytes, which is likely what caused me to even run it. I know, very dumb of me. Once again, thanks to anyone in advance for looking into this.

Hey guys I was going to have fun with my FIFA 22 with editing shit so I went to download this but when I saw the virustotal result I'm a bit worried rn. I unpacked the zip file but I'm just a click away from running it. Should I do it?

Virus Total link: https://www.virustotal.com/gui/file/d1bf99d0de7b49d0787cb54f9aec305e06d8dc8d0b31badb54fb3cae62f3150f

Github link: https://github.com/xAranaktu/FIFA-22-Live-Editor

I found it while I was trying to get to Phone Link through my start menu, I looked it up and it could be malware. Can anyone check for this? Thanks.

VirusTotal Link: https://www.virustotal.com/gui/file/64d6999db62b249dd8e0d755e447ed835e0a6fa39cb340dd0d77bdc1d595a6a2/detection

So I was searching for some books to download and then came across a pdf on Google drive . It had a link to a downloader site https://pulse(dot)datastreamforge5(dot)cyou/nirali+prakashan+books+pdf+free+download.zip? . So clicked on it and it downloaded a 7z file. As I wasn't able to unzip it using inbuilt archiver,so installed 7z and extracted it. So usually here I'm bit cautious so I check the files in it without extracting it but I wasn't able to view it.

Then I uploaded the zip to virustotal , but wasn't able to check it as it has 3mb limit for archived files with password. So instead I just went ahead and extracted it , and then automatically got this prompted on my screen.

So apparently windows stopped it from executing but I don't know yet if it has caused any damage.Please let me know if it's safe or not and what should I do?

Edit: So I just extracted the .7z file in my mobile and zipped it again without password (as the unzipped version is around 800mb exe file) so zipped it without password and uploaded it to to virustotal. The virustotal analysis - https://www.virustotal.com/gui/file/7af47fffc2014f6f72981dc9860cb6048ba1bcd09f15ff2786a3bf1a0c87a0d0/summary

Edit 2: Just for everyone to know I didn't ran the exe file explicitly, the popup appeared just after I extracted the .7z using 7-zip.I didn't knew it had exe file in it untill I extracted it and the popup appeared.I mostly use virustotal to scan the downloaded files which are suspicious, and this time too I used it but virustotal don't support password protected archives more than 3mb, thus here I am in this subreddit.

Btw it's clarified by now it's a virus.So thanks for helping me out guys.

Note: The image I have attached resembles to the popup I got I can't remember it exactly but i remember it had don't run button below :)

I recorded booting up my computer and slowed it down 10x and this is the best frame I got. I can make out DOMS/system32/somethingexe, but something tells me this isn't really system 32.

Is this a virus and if it is how do I remove it?

Just for clarity, the first image is what sites the post took me to while the second pic is what the post looked like, though it isn’t the exact post and had a different link.

It was in the replies of another normal post, I accidentally clicked it but closed the tab once I realized it wasn’t a photo. I closed before the last tab loaded but looking at my history, I guess it directed me to other links before hand.

I didn’t do anything besides click, and close the tab. Nothing else, so there is part of me that believes I am alright, but I have no idea what’s in these links, so I can’t help but say I am afraid.

This was done on the chrome app of my iPhone. If anyone can help out or determine how dangerous these links are I would truly appreciate it. 🙏

I got these off the steam workshop off the popular section not new and my my best guess was mabye it was something to do with using the game files as they all use "fildeinfo" but am also worried it could be a large scale attack

I don't use reddit, so please have mercy on me.

A friend i haven't spoken to in 4 years contacted me randomly one day and asked if i could test a game their friend was working on. So i was already immediately paranoid, but they sent the Link Bozimos(Dot)com. I checked both the Link and file they sent me to virus total. Im not really literate when it comes to these types of things so here is the Virus total link thing. 8c453e1e5bd20f32bc349a9828e2ee83d4915f7e7c37634ae20b73a18b399728. i havent tried to run it yet on my pc.

https://www.virustotal.com/gui/url/9847fe9e017bdb3d1a091769efa5bc6259db844ad30eacbab5599bba5191f2a8

I downloaded this file from Tumblr, which was in the description of a YouTube tutorial for getting NES Tetris on PC. After download, I used winrar, entered the password for the file, and extracted it. Pretty much immediately, Windows (10) security was like "this is a trojan virus." so I followed the prompts to remove it and deleted the files from my computer.

I thought that was the end of it, but 4 days later one of my friends on steam let me know that my pfp changed, and they received a message from my account that was a QR code steam gift card. Some kind of phasing attempt. As far as I can tell, they didn't try to do anything else. All my games are still there, no password change attempts. All the while, Windows security detects no threat.

I went ahead and downloaded a fresh windows install on a USB and wiped my computer. I'm not sure whether I should have created the windows install USB on another device to prevent any carryover. I'm also not sure what else I should be on the look out for. I guess I need to change my passwords for everything? I've already done that for my emails, steam, discord, and my banking apps.

I'm also confused why it took 4 days for it to do anything, and all it was was some phishing attempt. I guess my main question is - what do I need to be concerned about here?

I feel like a total goober.

There's a Discord community with almost 70k members, and they are reviving the old FIFA game servers on PC since EA shut them down years ago. Pretty much what I'm asking is:

Is this installer they make you download really a virus, or just a lot of false positives?

They say the launcher changes your game files and uses a modified DLL to send you to a fake server so you can actually play online.

I really hope it's not a virus since I'm dreaming of reliving my childhood memories again, but please let me know if it is -

https://www.virustotal.com/gui/file/5d578f574d7e813fa565c0d3c68936543274b3a5bc1f1a90a1cb12222e28d404/detection

I am very careful about running any installer on my PC. I check the exe through total virus and I have bitdefender running full-time. But since I joined a few of these Reddit groups I've have realized how easy it is to get an info stealer and see how costly it is to get compromised. I downloaded an exe installer off of GitHub. I don't think the guy is dealing malicious code, but I don't know enough to be certain. If his program had thousands of stars, I'd feel more confident that being open source the community would shut it down. But this program is fairly new and not widely used. It passed totalvirus, but as an extra check I tried any.run. I ran the install in their sandbox and it came back with some malicious results. Unfortunately, I don't understand the results. Can anyone give me advice? I don't know what I'd need to post for someone to help, so I'm asking first. I've had a lot of false positives with programs in the past. So I'm wondering if this is the case.

Many thanks!

I downloaded a mod for Palworld and when I launched the game I saw a command prompt window pop up. Given there was recently an issue with this happening with another game, mecca chameleon, I'm extra suspicious. The mod is a .lua so I can open it with notepad ++. The screenshot is of the part that mentions command prompt and claims to be for logging purposes. There is much more in the file than just this part though.

The mod was this one here: hxxps://www.nexusmods.com/palworld/mods/3874?tab=description

Hi,

I've been a longtime fan of a YouTube channel that posts Battlefield 2 gameplay, and have been interested in playing the game myself.

I've gotten a link to an installer of the game that downloads it and generates a key (Since the game has been delisted by EA for a long time now).

I've made sure that the link to the install is legit by the people that run the revival project (BF2Hub\[.\]com).

Scanning the Unzipped setup file using Windows Defender showed no threat, but out of curiosity I checked Virus Total.

The report link is added. I'm not sure if 2/71 is a cause for concern, as the big names such as Kaspersky and what not - didn't detect anything odd.

I scanned the setup executable itself, as the whole folder is 3.9gb.

Haven't run it yet, would love some insight.

Thanks in advance to anyone taking the time to answer.

aeeptos{.}sbs it is a government (UAE, Dubai) because thats where im living fake ransomware gonna share ts with Trainium

VirusTotal link:

https://www.virustotal.com/gui/url/410cce447a57c1fb809be6ac1f399b0975099f651d42abe70f6895daca8eb554

Hello, i'm kind of freaking out as every ai tells me this is malware. i have downloaded the file and put them in their vst folders, but didn't run them

I make music using FL studio, and often use third party plugins. these are NOT cracked, and are free samples.

I'm using some plugins from someone called "Quietmusic ", I used these in the past for multiple years without any issue, but i had bad cybersecurity when I was younger, so i put all files through virustotal now.

As far as I know, i got them from their official gumroad page https://quietmusic[.]gumroad[.]com/l/KdHou

Both of them run some sort of "readme.dll"file, and i'm really scared it's malware.

https://www.virustotal.com/gui/file/f80b87f16891663770e3c7fd4dd3ac28d899d5c7199bd042dddac0a639f96c36/behavior

https://www.virustotal.com/gui/file/e37476a49cb49cd210f774b163f5f555af471e148056ed287535a406f947c7b3

I'm not really tech savvy, and I use AI to look at the results. However, I know how faulty AI is, and i don't know who else to ask.

Please help, thank you.

95% think it’s a false positive. Any info guys? Malwarebytes says no virus.

Virus total link:
https://www.virustotal.com/gui/file/4f3e78c62891210812de608d445622073b0d8f3f046ae511f9f18d7297858c96/detection

it said "No security vendors flagged this file as

malicious" but it literally infected my laptop and there was no release under the github page but it had a big red button that said releases and it redirected me to a zip file? i was told to use virustotal to scan stuff and although my computer is okay now, I don't know what to make of this if it isn't detected on virustotal when it's actually malicious? i would appreciate any help..

https://www.virustotal.com/gui/file/0aadf0001294f4cd7c26ceb990e30e2465f7a66a9f727a8035d830cf1278c1ce/behavior

Getting flagged for a "Trojan agent" sounds really spooky, I don't know anything about computer so this makes me anxious. I'm trying to set up this label printer I bought and the original driver download page is defunked so I tried another route. This website called "Treexy" seemed legitimate enough but when I ran the file through a virus scanner it got flagged for this.

Is this a false alarm or really bad? Please help. Here is where I downloaded the driver from:

hxxps://treexy(dot)com/products/driver-fusion/database/printers/kuaimai/cx418/ 

https://www.virustotal.com/gui/file/a969dff551fbc18183caefea117e06cdb495aa59eb17fb4144e328e233f5ab7a this is the virustotal link

I'm trying to install a free plugin for my DAW, I've installed the zip file from their website, which is "hxxps://adieusounds(dot)com/plugins/magic-8-ball" but when i try to open the installer, which is the only file in the zip, Windows SmartScreen blocks it (I've upload the screenshot).

I've already tried to run a scan with VirusTotal, but both the zip file and the installer seems legit (hxxps://www.virustotal(dot)com/gui/file/adf8ba0886c67a5d0f64d0ea24979fe6e571fe50e84a98032aac940c4d7d2ec6 for the installer and hxxps://www.virustotal(dot)com/gui/file/62db2573f5a660d1a4b720009aa02eb17ba3ff2fa6820867df20923a7f505a35 for the zip file)

Opening file proprieties of the installer file it says that "this file comes from another computer" i don't know what it means but maybe it can be helpful

I'm not exactly sure if this is real or not but look at the url and everytime i refresh it changes so I think that's not Google

i went on to this website called "net faps" or some stupid shi like that but it download a file and deleted it and now idk what to do 😭

So everytime i reboot my pc this pops up from malwarebytes