[READ] Malware on d3scene.com

[Darchrow]

Hi folks,



lately there were a high number of posts which contained malware. I know it's a regular problem and we can't stop it for 100%. But I still wanted to inform you guys to open your eyes and help the staff (and the users) to keep d3scene as good as clean.

Some advices to detect malware:

• Be ALWAYS distrustful to new users ('1-poster') who post attachments or links to downloads.
  
• Be skeptical to users who spammed their posts to create threads with links/downloads.
  
• Executable files (.exe .scr. .bat and so on) should TURN ON your ALARM BELLS. Never trust them blind.
  
• People who have bypassed the link restriction to publish their stuff are often more suspicious.
  
• Don't trust virustotal (jotti and so on) results and always scan the files on your own. The results are often faked.
• Don't trust if the files are in an archive and there are .dll files, configs or readmes in there. These files are often used to let look the malware as a legit software.
• Don't even trust if the files look legit because they are often crypted or binded to clean software.
• Be distrustful at thread titles like '[HACK] NEW UNDETECTED MEGA UBERLEET MULTIHACK FREE'. Spreaders just want to bait you so don't be foolish ;-) If there will be a new hack for a popular game you will see it on an official way on d3scene.
• USE COMMON SENSE!

What YOU can do with suspicious or infected files on d3scene.com:

• Scan the files on your own via an online virus scanner like virustotal.com (search on d3scene for 'Virus Scans' and you'll find a list in the Operating System subforum).
• Scan the files via an online sandbox like Anubis (there is a list in the same thread 'Virus Scans').
• Run the files in your offline sandbox like Sandboxie or in a virtual machine like VirtualBox.
• Reverse or analyze the suspicious files if you have the knowledge.
• REPORT THE POST/THREAD by using the report-feature so that the staff can delete/check/edit it or at least post in the thread that the files are probably infected so that the staff can get attention.

Regards, Darchrow

[n0real]

Thanks Darchrow, these steps are the rules that every gamer out there should follow

Or well.. just any person downloading hacks and stuff

[AbuseStylo]

thankx folk

[forceedge11]

Thanks !

[Yorkshire88]

thanks for the info ^^

[Darchrow]

Please keep this in mind it's getting more and more malware/scam.

[phantommaelstrom]

As an added protection...

I would like to add that installing WOT would help you avoid malicious sites, while installing a javascript restriction add-on on your browsers such as NoScript (Firefox) or NotScript (Chrome) could help you avoid getting malwares.

[BlackRa1n]

Thanks Darchrow ill keep that in mind. Ill report any malware that i see

[Cipa]

I think there's more and more malware on d3scene, I personally suggest Malwarebytes-AntiMalware, because I have not yet seen any malware crypted that can't be detected by it.

[Tracky]

I personally do not use any AV.
Whenever I download a file I run it in various sandboxies, check for registry entries AND check by whom it was posted.
There are trusted sources (I consider my friends as trusted ).

If a hack looks too good to be true it's most likely a scam or malware bound to it.

By the way: Make D3Scene a better place and hit the 'report' button whenever you see malware being posted (and please provide some evidences). - We will then take care of it!