deviant art

Deviant Login Shop  Join deviantART for FREE Take the Tour
[x]
more ▶

Featured in Groups:

Details

May 19, 2011
Link
Thumb

Statistics

Comments: 143
Favourites: 13 [who?]

Views: 153,236 (0 today)
[x]

There's a slew of new malware skins uploaded to the main Rainmeter Gallery in the last couple of days.  All downloads in the list at the end of this post are infected.

We try and check all the skins uploaded to our gallery for malware before accepting them and we try to keep this list up-to-date, but real-time interferes, so please practice safe downloading!

Some things to watch for:
- comments are usually disabled or hidden
- they are fairly new to dA, just a couple of new skins
- their profile page only has a few items on it
- they rip a skin/preview/description then upload it with malware or keyloggers
- downloads are zipped and have an .exe file which is the virus
- don't download files like Build.exe, Run.exe, FullInstall.exe, *.rmskin.exe, Full_Set_Up.pif - basically anything that ends in .exe or .pif.

How to test each download for a virus:
- Right-click 'Download File' link, choose 'Copy Link Location'
- Go to VirusTotal at [link] and choose the Submit a Url tab
- Click on 'Submit Url' and then paste the link location in the Search Bar

If you come across malware, report it as malware. If it's your skin that's been ripped, report it and file a DMCA takedown notice.

Thanks!
- Karen

Add a Comment:
 
:iconlightning420:
i thank everyone for letting noobs like me know witch skins are ok and the ones that arnt thank god i learned a long time ago from downloading torrents to read the comments before i download anything i hope in the long run everyones efforts will pay off and all skins on da will be safe to download
Reply
:iconmarcopixel:
~MarcoPixel Jun 8, 2012  Hobbyist Digital Artist
[link] - All with exes in them, comments disabled.
Reply
:iconkarmat111:
thanks, he's been banned, though he's probably back up under a different name
Reply
:iconmarcopixel:
~MarcoPixel Jun 8, 2012  Hobbyist Digital Artist
[link] - All with exes, comments disables
Reply
:iconpoiru:
Karen, I've updated the layout of the list to make it more compact. Let me know if this is OK or if you'd prefer the old one :)
Reply
:iconkarmat111:
I think it's more effective when you can see all the names like I had it. If you want to save on space on the home page, could the post not be pinned to the top, but still available when you click on the red warning button?
Reply
:iconpoiru:
Alright, I changed it back :) I left out the "BANNED" bit for each user, but I can add that back as well if you so prefer.
Reply
:iconjsmorley:
Just my two cents worth, but I think trying to actually keep track of the user names and skins is a losing battle. There are 2-3 new user names and dozens of skins every single day, and although it takes an unacceptably long time for deviantART to do anything about them, they do sweep through and clean up every few days (at least they have in the last week or two, but they are very likely to stop trying again.)

I think we just need to focus in and make it very clear that:

1) Never download a submission with Disabled or Hidden comments.
2) Never, ever, ever run any .exe file to "install a skin".
3) Be sure that any .rmskin is really a .rmskin and not .rmskin.pif or .rmskin.exe. For the love of all that is holy, turn off the setting "Hide extensions of known file types" in Windows.
Reply
:iconkarmat111:
I would still like my list to continue as is. I think it's worth the time it takes me. To me, as the list gets longer and not deleted, it shows how ridiculous this situation has gotten and it shows dA (if they ever look)that they need to do more.

It also proves that we're not crying wolf, that there really is a 'situation'. And if they have anyway of tracking, all those names and links will show to them who(s) is actually behind all this.
Reply
:iconjsmorley:
Fair enough...
Reply
Add a Comment: