Virus going around on Steam, here to warn you.

[Zack]

First, read this link:
http://www.reddit.com/r/gaming/comments/2m8sl1/virus_going_around_steam_do_not_open_wtf_dude_link/

Another link for clarification on the filename, mostly for curiosity sake, and more story on the issue:
http://www.reddit.com/r/SteamGameSwap/comments/2ggr31/psa_scr_files_are_executable_like_exes_they_are/


Basically, when a person is affected, their account will send messages to all friends in order to infect them aswell.

If you see someone send you a message that looks like this:

(name): WTF Dude?
  <link to a website here>

Ignore it. Do not click it. It is a virus.

Two friends of mine on steam have already been affected. Please do not click the link.

Thanks for reading.

[Ad Bot]

[LeetZero]

This is the third topic.

[Klocko²]

A guy on reddit decompiled the virus and found out who the phisher is:

http://steamcommunity.com/id/oneonlyonekey/

The virus trades away all of your items to the profile above.

[Steve5451²]

Yeah, scr is the windows screensaver extension, which executes exactly as an exe. If you change the file extension of any exe to scr, 9/10 times you'll have no issues with running it.
And there's a popular way of hackers using this to their advantage, using a right-to-left override unicode character they can disguise the scr file as, say, a music file.

here's an example i found on the internets

(RCS is the scr extension backwards)

[Ducky duck]

Zack your in my steam right?

I think I got this message from you .-.

Didn't open it tho because I was hosting.

[giant tootsie rolls]

Sent this thread to all my friends.
I don't want Chicken to be hijacked again.

[Ben Grapevine]

FYI you can click the link, just don't download the file.

[foulprairiedog]

A friend of mine got one of these.
Greeted with "Hi!" (which he never does)
Then "Look at this [fishy-ass link]"
i responded, and then the impostor replied
"Trade me, bro!" (we have an agreement to never call me 'bro')
he then proceeded to add an #IGNORE ME to the end of his steam username. what a great guy

[espio100]

A guy on reddit decompiled the virus and found out who the phisher is:

http://steamcommunity.com/id/oneonlyonekey/

The virus trades away all of your items to the profile above.

Look at his inventory
He go like 975 loving CS:GO items

[portify]

Look at his inventory
He go like 975 loving CS:GO items

.. you didn't notice the 2678 Dota 2 items?

[espio100]

.. you didn't notice the 2678 Dota 2 items?

Oh yes, rite.
Im blind

[ResonKinetic]

he then proceeded to add an #IGNORE ME to the end of his steam username. what a great guy

he probably did this so people wouldn't acknowledge him because he found out he was infecteeedddd

[Biostorm]

forget. The thing downloaded on my PC a week ago. Nothing happened though, I guess since I deleted the file immediately. Am I still screwed?

[Sitrus]

forget. The thing downloaded on my PC a week ago. Nothing happened though, I guess since I deleted the file immediately. Am I still screwed?

I wouldn't think so if it happened that long ago, but what do I know

[tnatsissA]

I had a friend of mine be infected too.
R.i.p.

His name was changed to "I LOVE HORSES!!!" Could this be happening to all infected users?