- This topic has 12 replies, 7 voices, and was last updated 1 year, 10 months ago by
.
-
Posts
-
On 3D-Load and Render-State, I'm finding a lot downloads that MS Defender immediately marks as being infected with a Trojan, specifically Trojan:Script/Sabsik.FL.A!ml , which is detailed here:
This may be a rash of false-positive, but my paranoia says to not trust it, and I wouldn't put it past morons like 3D*K to spread malware.
Incidentally, this coincides with a vulerability in 7Zip, detailed here: https://cybersecuritynews.com/7-zip-vulnerability-arbitrary-code/ Note that this can be solved by updating your local copy of 7Zip to the latest version.
Could you give a link to one such file or the webpage? I'd like to inspect the file and do some "research".
🙂
This is one that reported this morning: https://3d-load.net/red-witch-for-genesis-8-female/
I've been seeing this for about 2 weeks now. Strangely it seems to be the sex pose mods that have it the most. When they get to 3d-load they still report on defender , but when they show up on render-state they are mostlty clean but still report severe virus occasionally. I was going to mention it, but I've gotten tired of being lectured about false positives. I dont think its a defender issue because older files still dl ok. My guess is real virus threat.
Checked the file and there's nothing suspicious in it. It's a false positive. Also, "!ml" suggests it's a machine learning based detection which are usually false positives anyway. Would've been fun if there was an actual virus in it. As for the 7zip cve, I doubt if vendors on 3d sites have the technical know-how required to be able to exploit that.
You can never be too cautious when downloading files from the web. Guess being paranoid is a good thing, therefore.
Hmm, my cracked Poser installs always ran fine.
I eventually bought all of them including 12 & 13, but still use a cracked copy of Poser 11, because that machine isn't allowed to go online at all.
But, yeah, better save than sorry.
If I come across anything suspicious, I use Sandboxie Plus to have a closer look.
So far I've only been hit once by a Poser related virus, way back in the early naughts.
That bastard infected all my .exe files, making all DAZ installers I had downloaded unusuable.Best defense IMO, rather than an intrusive Anti-Virus programm which by itself can be a liability, is to make good backups, and/or mirror your system.
And do your really important stuff on a machine that isn't connected to the internet at all.
(Which is also the best defense against nosy operating sytems like Windows 11)🙂
It's been happening to me the past few weeks as well. The product that were flagged for me were:
md list of products used
my favorite script
old stone walls 2
adventure time tank
cocktail hour: summer story jewelry
text decal kitYou should not underestimate Creators
I was talking specifically about the integer underflow issue in 7-zip. Afaik, there's no publicly available info on how to exploit it. One would need to understand the code to be able to craft a malicious archive that triggers the bug. Still don't how it can allow remote code execution directly since 7zip itself does not interact with the network (it doesn't even have auto-update) but idk, I'm not a coder.
You will not even notice having such scripts built into a DUF file
True, but if someone's paranoid, they can install content manually and check if there are any executables/ scripts in the archive that can cause trouble.
I get your point though, you can never be too cautious.
🙂
There was a microsoft update about the same time that this started. Today I rebooted my computer for a different reason and at first glance it seems to have fixed the issue with virus detections. Someone else try this and let me know if it changes your operation as well.
Haven’t browsed the forums in a bit, but decided to lol for a thread pertaining to this. I’ve also seen an increase in these alerts. I don’t know if I’m being paranoid or what, but my system is behaving abnormally (random fan rpm spikes and a bit slow). I scanned the full system multiple times with multiple AVs that look for rootkits. Nothing has popped up, but I’m pretty sure I might have had some virus hiding there. Decided to do a fresh Windows install tonight. Luckily I have all of my important stuff on another machine, and my project are all backed up.
- You must be logged in to reply to this topic.
