Steam virus/worm Alert

[PsychoBastard 71]

Just a heads up that there seems to be a steam virus going around in the wild.  If you receive a link from your friends on steam and it looks like an image file or some other normally safe link do not click on it unless 100% sure . 
 
For example http://xxxxxxxxx.com/Screen_19521.png
 
I checked quickly on google and it looks like this could be a legit concern.  Here is a few posts that discusses it.
 

http://forum.blockland.us/index.php?topic=269875.0
http://steamcommunity.com/app/209650/discussions/0/617319460934270413/

 

Virus description

https://www.virustotal.com/en/file/42d29073508d945b586825aa436f55b672c0cd2827b8f64aaeb389501fa6262e/analysis/1416093435/

[Zack 100]

Thanks for letting us know man :D

[Anti 1307]

Ain't got nothing on me :dave:

[jwofles 1009]

Wait I just clicked the example png, that's safe right?

[Darmuh 1090]

Wait I just clicked the example png, that's safe right?

 

Considering it leads to a 404 and nothing downloads to your computer I doubt it, but eh I'm not a PC expert

[jwofles 1009]

If anybody wants the real link it's 

xxxx://screen-pictures.xxx/img_012/

I copied it from reddit, I'll leave the .com and http as Xs for obivous reasons but yea, just so you know the exact link.

(you can go to it if you want the virus.)

[Darmuh 1090]

If anybody wants the real link it's 

xxxx://screen-pictures.xxx/img_012/

I copied it from reddit, I'll leave the .com and http as Xs for obivous reasons but yea, just so you know the exact link.

(you can go to it if you want the virus.)

 

it'd probably be best not to link directly to the virus from here....

[jwofles 1009]

it'd probably be best not to link directly to the virus from here....

Good thing it had the XXXs in it.

it's just that @@PsychoBastard's example link wasn't specific to the main virus that's going around atm.

[Cat 290]

I had that link sent to me and I clicked on it, but it 404'd, was that supposed to happen?

[Arnold 1029]

if you clicked it yesterday/2days ago, the virus file had already been removed from the server. also windows was patched to prevent the exploit...

[jwofles 1009]

I had that link sent to me and I clicked on it, but it 404'd, was that supposed to happen?

no you're going to die next week lock up yer house!

It was a fake link anyway brah.

[PsychoBastard 71]

I just received 2 more PMs on steam from my friends that seem to be infested. To be safe Do not click on any link that you do not know is legit. That should be your standard action regardless.

[Lossy 1968]

This explains more about what it is http://www.reddit.com/r/Steam/comments/2mlvq5/steambola_what_it_is_and_how_to_prevent_it/

 

 

TL;DR only accept picture links from websites like http://imgur.com/ and don't accept random friend requests

[jwofles 1009]

Can't believe I was laughing at this before..

[Tinman 427]

I thought it would never happen to me. Eh, I actually thank you Waffles... I have every right to start building a new PC, one that isn't outdated by 10 years this time :dave:

[jwofles 1009]

for future reference, you can not google search links..

[siikdude 240]

http://gyazo.com/6520dbed3949003d8318b751f31ac77e Wait is this bad???

[jwofles 1009]

http://gyazo.com/6520dbed3949003d8318b751f31ac77e Wait is this bad???

No, that's your steamguard file. Basically if you the hack it tries to upload that so it can send it to itself and take all the items from your inventory.

[siikdude 240]

No, that's your steamguard file. Basically if you the hack it tries to upload that so it can send it to itself and take all the items from your inventory.

Oh, but I read on reddit to delete all files with "ssfn" but I guess this is the legit one that comes with steam

[Lossy 1968]

Oh, but I read on reddit to delete all files with "ssfn" but I guess this is the legit one that comes with steam

yes delete it if your account does get hijacked... lol

[jwofles 1009]

You delete them so then the hackers have nothing to upload so they can't access your account.

However, you didn't click the link so just leave the files for now.

[Arnold 1029]

 

:kingdave:

[jwofles 1009]

Bit late @@Bear ;>

At least I said it was a virus c:

[Anti 1307]

Bit late @@Bear ;>

At least I said it was a virus c:

Oh, wasn't suppose to click that...

Eh, didn't get it so doesn't matter :P

[Tinman 427]

The ONE SINGLE perk of having a Mac... NOTHING else. NOTHING :troll: