TROJAN FOUND IN A POST! DO NOT DOWNLOAD

[meowth]

TROJAN FILE FOUND IN https://zonegfx.com/p3d-robin-hd-for-genesis-8-female/ this file. Do not download it

[Anonymous]

@monkseye

[RuinedClaw]

They get all their content from here, why do they spike their files like this?

[InverseKinematics]

So what is in this file exactly?

Links to shit sites? A trojan?
Can we be more specific here please.

[normand]

@legolas18 Surface assertion.
A rich collection of viruses is identified.
Does anyone know why this post is still on the blog and available for download?

@hunter ?

https://www.virustotal.com/gui/file/4821b4f601e2fdf33eb1e7034d0427c4c59e45ce112aec20fbf40e3543acc734

IM00071371-01_P3DRobinHDforGenesis8Female.zip\Content\Runtime\Textures\!P3D\Robin\P3DRobinFaceL09_1001.jpg
https://www.virustotal.com/gui/file/dd680d5da0b59455aa4fa7dda2df89661f0e72560b602454f999669ef5e25c7d

And further

IM00071371-01_P3DRobinHDforGenesis8Female.zip\Content\data\DAZ 3D\Genesis 8\Female\Morphs\P3Design\Robin\CTRLP3DRobinHDLv5.dsf
https://www.virustotal.com/gui/file/dd680d5da0b59455aa4fa7dda2df89661f0e72560b602454f999669ef5e25c7d

Note the fixed check date, someone already scanned this four months ago
2022-08-29 04:39:41 UTC 4 months ago

[InverseKinematics]

Thanks for the clarification @normand

[InverseKinematics]

@legolas18
I just downloaded the character elswhere and I'm getting the same results as @normand. So what do you think is going on here? I scanned the entire Zip BTW.

[InverseKinematics]

@legolas18

Thanks for the heads up. So what's going on with the OP's files if they say they downloaded them here?? Getting a little confusing now if the OP doesn't come back to verify this.

[normand]

@legolas18 Does the degree of infection (covid or flu) matter in this case?

I downloaded from this first link
https://drive.google.com/file/d/11_h2lrzJIzqYvzF_gjLI5h-SLIyaoq6-/view

https://www.virustotal.com/gui/file/09e7d5e0d7a4d14a113c3b8123aeda5f9a869a4c6b7abd13a31aacca91830ae9

91.49 MB
Size
2022-05-12 01:33:04 UTC 7 months ago

[InverseKinematics]

@legolas18

Are you using a good AV or the modern false positive AV 😛
I say this tongue-in-cheek because of the complaints i see on various 3D app GFX sites. It appears we have a band of infectious actors installing mining software into files and uploading them.

[InverseKinematics]

@legolas18

Sounds like you have K.I.S.

If so it's the best IMO. Like you said it removes files right after they've downloaded to avoid infection.

[ulysses]

P3D Robin HD for Genesis 8 Female.rar\IM00071371-01_P3DRobinHDforGenesis8Female.zip\Content\Runtime\Textures\!P3D\Robin\P3DRobinFaceL09_1001.jpg
Result description: Detected
Type: Trojan
Name: UDS:Trojan.Win32.Generic

--------------------------------------------------------------------------

P3D Robin HD for Genesis 8 Female.rar//IM00071371-01_P3DRobinHDforGenesis8Female.zip//Content/data/DAZ 3D/Genesis 8/Female/Morphs/P3Design/Robin/CTRLP3DRobinHDLv5.dsf//

Result: Detected
Result description: Detected
Type: Trojan
Name: HEUR:Trojan.Win32.Generic

Those are my results. Never seen a trojan in a .jpg before. Weird.

[InverseKinematics]

Perhaps there's a chance of the OP vaccinating the files and re-upping them.

@ulysses
Neither have I. It appears to be old school Hex Editing that can do this.

[normand]

here, probably, the warhead of these files

Names
P3DRobinFaceL09_1001.jpg
CTRLP3DRobinHDLv5.dsf
PPro2014Kg.exe
Fiore Ear.dsf
ppro2014kg.exe
BWM Chest Wide-R.dsf
setup.exe
PPro2014Kg.exe.!ut
file-5954188_exe
PPro2014Kg.exe1

[InverseKinematics]

I just deleted the file. I cannot be bothered vaccinating it even in a sandbox.

[Author]

Posts