Author Topic: Maleware in Addons folder - Locked, not caused from a downloaded addon (Read 4164 times)

MackTheHunter · December 21, 2009, 08:20:50 PM

I just got back to my computer, and my avast screensaver said that it had detected mailware.

When I got out of the screensaver and Avast popped up, it said that the file was in c:\Program Files (x86)\Blockland\Addons.

Someone has some real EXPLAININ' to do. I don't join other people's servers, I strictly stay in my own due to too long loading for other servers (Unless it's someone I've known for a while).

So somebody has snuck some swamp water into one of their addons, we might want to figure out who. I'm sifting through my recently downloaded addons right now.

Mega edit:

I've already deleted the file in my addons folder. Something tells me that a seperate executable, possibly something I recently downloaded, shoved itself into that file.

I redownloaded the 2x cube, scanned it, and got nothing. It definitely must have been another file.

EDIT: stuff, IT'S BACK. The same file, except this time it's in one of my goddamn Garry's Mod addons (Advanced Duplicator).

What is it with this file and infecting game addons?!

Well, anyway, I'm going to do a full scan of my computer to figure out where the hell this mailware is coming from. It obviously isn't someone's addon, it must have been something I downloaded - I've scanned the 2x cube about 50 times now. Same with the SVN of Advanced Duplicator, I get nothing.

So I'm sorry for the false alarm, it's my fault (At least I think it is, siblings :C) Locking.

Ad Bot · Advertisement

Wynd_Fox · December 21, 2009, 08:21:42 PM

Tyler66 had the same thing happen.

Tingalz · December 21, 2009, 08:22:06 PM

Does it say what file?

MackTheHunter · December 21, 2009, 08:22:51 PM

I didn't catch what the file name was, something like "mail32biz" or something.

Tingalz · December 21, 2009, 08:23:52 PM

Now I'm paranoid that I might have it D:

TMAN7676 · December 21, 2009, 08:24:31 PM

not going on my Blockland, gonna wait tills this is fixed

Truce · December 21, 2009, 08:25:07 PM

Post a list of the add-ons you have; any not recognizable or made in the past couple days should be looked into.

DrMobius · December 21, 2009, 08:30:19 PM

You probably downloaded some crap-on.

Regulith · December 21, 2009, 08:39:14 PM

For some reason Bloxel keeps coming up as a virus on my computer, but that's probably just McAfee being stupid. Avast! says it's fine.

Plornt · December 21, 2009, 08:45:10 PM

McAfee was stuff from the beginning. Get something else.

pitfall · December 21, 2009, 08:52:56 PM

Quote from: Plornt on December 21, 2009, 08:45:10 PM

McAfee was stuff from the beginning. Get something else.

Mine thinks blockland itself is a virus...

MackTheHunter · December 21, 2009, 09:40:49 PM

It came up again, and I got it. It was in brick_2X_Cube.zip, it was called m32.bzz .

Deleted it. You guys might want to check it as well, it was trying to execute like 50 things.

Tom · December 21, 2009, 09:56:48 PM

I think you're just pointing fingers. This mod is about a month old now. I think if it where truly in the mod file we would have had a lot more problems.

http://forum.blockland.us/index.php?topic=49045.0

ShadowZero · December 21, 2009, 10:05:13 PM

Quote from: pitfall on December 21, 2009, 08:52:56 PM

Mine thinks blockland itself is a virus...

I recently downloaded a add on from the forums but not rtb and norton detected malware.And yea that happens to me sometimes.

MtnDew · December 21, 2009, 10:43:20 PM

dude holy stuff :(