Shop Mobile More Submit  Join Login
WARNING - almost RESOLVED by karmat111 WARNING - almost RESOLVED by karmat111
UPDATE:
NEW INFECTED SKINS ARE STILL BEING UPLOADED, BE CAREFUL!
AND IT'S NOT JUST THE RAINMETER GALLERY THAT IS GETTING INFECTED

You can test each download for a virus by:
- Right-click 'Download File', choose 'Copy Link Location'
- Go to VirusTotal at [link]
- Paste the link location in the 'Search Bar' and press 'Submit Url'
- Click on 'View downloaded file analysis'
- The results are 0 out of 40 and if there are viruses, they are listed in red in the Results column
- This service is free

We will be still monitoring to make sure all the infected skins are found and pulled and will keep watch for new ones. We've found out that it isn't just the Rainmeter gallery that was attacked. Comment here or at the blog if you have any questions.

READ OUR POST AT THE RAINMETER GROUP [link]
------------------------------------------------------

WARNING - DON'T DOWNLOAD THESE INFECTED SKINS!

We at the Rainmeter Group [link] and the Rainmeter Forums [link] have discovered around 25 deviations so far that have been uploaded this week into the Rainmeter Gallery.

The above screenshot shows the skins (red squares) that are infected with malware - trojans, worms etc as well as stealth keyloggers. A number of us have reported them to dA, and hopefully they will be pulled soon. A member of our group, Varelse, has done extensive work finding them, testing them, doing virus scans, reporting them, creating a blog and keeping it updated, answering questions, etc etc.

I've posted this screenshot to warn people of what's going on in the Rainmeter Gallery - some lowlife is having his jolly's at your expense! As of last night there was almost 3,500 downloads. Today alone, there have been eight more infected skins uploaded, I haven't checked the downloads on them yet.

We first thought we were just finding copies of skins that were created by other people. The screenshots were exactly the same as the originals, even the descriptions were the same as the originals. Then when we looked further, we discovered that they were full of malware!

What we have noticed about all these uploads:

- the person is 'new' to dA (I think it's the same person just creating new personas)
- their profile page is bare, nothing personal
- their galleries only have 1 or a couple skins (all infected)
- their comments on the deviation pages have been disabled or the comments have been hidden

We will continue to monitor and report on this situation. We have a blog posting on our profile page [link] where you can go to get the
latest updates. On the blog, we are posting links for the infected skin, the original authors skin, and the virus report we get from VirusTotal [link] If you want to help us out, you can post the same info on any we might have missed. You can also report what you find to dA by including all three bits of information, but we were told that they prefer for the original author to report it, so you could let the original author know about it.

Hopefully, everybody has antivirus programs that they keep updated, right? I always thought (duh) that skins that I downloaded here at dA were safe, I figured that viruses were caught in the uploading process - NOT!

If you have any questions, just ask.

Karen
Add a Comment:
 
:iconmaximathevaporeon:
maximathevaporeon Featured By Owner Jan 13, 2012  Student Traditional Artist
I DFONT DOWNLOAD THINGS MY MOM DOES NOT LET ME
Reply
:iconwhittlingdesigns:
WhittlingDesigns Featured By Owner Jul 2, 2011
Some people are just dicks! :censored:
Reply
:iconpixeless:
pixeless Featured By Owner Sep 29, 2011  Hobbyist Interface Designer
lol
Reply
:iconkarmat111:
karmat111 Featured By Owner Jul 2, 2011
Absolutely!
Reply
:iconnarcot1c:
Narcot1c Featured By Owner Apr 28, 2011
Hate when such things happen, not to talk about happening here... I never thought about malware in this site, NEVER. From now on because of some "enthusiasts" every f.king thing I download from here have to be checked and rechecked... (Sry guys but that drove me mad) ... Thanks Karen
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 28, 2011
I know, I feel the same way. I just can't understand how people get joy out of doing this. :sad:
Reply
:iconbinarycon:
BinaryCon Featured By Owner Apr 24, 2011  Student Digital Artist
Had my work used in this way again, I've noted Chix0r about it since my reports never seem to get anything done about them. 5th time for my work now :rage: they should have a report for Malware option that temporally disables the download option till it can be looked at by a staff member.
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 24, 2011
Unbelievable! We've been reporting all of them. I posted a warning to the people that faved the ripped skin, so hopefully they'll take it out of their faves and replace it with yours.
Reply
:iconbinarycon:
BinaryCon Featured By Owner Apr 24, 2011  Student Digital Artist
Thanks I hadn't thought of that.
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 24, 2011
:)
Reply
:iconjadawgis732:
jadawgis732 Featured By Owner Apr 18, 2011
Can't we just make one report on a deviation trigger a skin getting pulled in the Rainmeter section until someone in charge has had a chance to look at it? The fact that people doing this are able to get away with it until the staff gets around to looking at all the reports that must be flooding in is crazy. If you guys aren't comfortable with that just make the trigger 2 reports, or 3. Also disabling comments in this section shouldn't be allowed. What are people afraid of? I doubt many legitimate skins submitted to this section have had comments turned off!
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 18, 2011
We (the dA Rainmeter Group) have suggested a few fixes to deviantArt, but unfortunately they haven't been taken up on. If you want to see what they think of this whole situation, ready the comments in our blog at [link]

Our group is only a group here, we have no power to change anything in the main rainmeter gallery, only our group's gallery which we are trying to keep clean of malware. We are just members here who have formed a group to compliment the Rainmeter Forum [link] which is more technical. We do not work for deviantART and they won't accept us as volunteers either.
Reply
:iconstieven:
Stieven Featured By Owner Apr 14, 2011   Digital Artist
[link] Back at it again?
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 14, 2011
Thanks! We've reported it.
Reply
:iconnoteve:
noteve Featured By Owner Apr 14, 2011  Hobbyist General Artist
Thanks for the effort and for posting your warnings!
I sometimes wish to hurt such persons very bad lol

Yet I come to suspect your "answer post" thingy
has a copy/paste virus xP
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 14, 2011
Yet I come to suspect your "answer post" thingy
has a copy/paste virus xP

What do you mean? or were you joking? :)
Reply
:iconnoteve:
noteve Featured By Owner Jun 14, 2011  Hobbyist General Artist
of course it is a joke ;)
i saw you posted that warning text
somewhere else too ..
Reply
:iconnuclearblasshole:
NuclearBlasshole Featured By Owner Apr 13, 2011  Hobbyist Interface Designer
here is another infected one: [link]
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconcomputerdummy5:
computerdummy5 Featured By Owner Apr 13, 2011
Hooray for the good guys :teamwork:
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconfunfunfunfun234:
funfunfunfun234 Featured By Owner Apr 13, 2011
what user was doin this?!
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
We don't know yet who's doing it.

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconfunfunfunfun234:
funfunfunfun234 Featured By Owner Apr 13, 2011
allright! go AWESOMENESS! :iconanimefaceplz:
Reply
:icongivesnofuck:
givesnofuck Featured By Owner Apr 13, 2011  Student
thanx mates :)

:peace:
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconhellrick54:
hellrick54 Featured By Owner Apr 13, 2011
Thank you
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
You're welcome.

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconhellrick54:
hellrick54 Featured By Owner Apr 15, 2011
Tanks....
Reply
:iconornorm:
Ornorm Featured By Owner Apr 13, 2011  Hobbyist General Artist
Thanks a lot for the information and the time and energy you've spent on this.
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
You're welcome!

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconornorm:
Ornorm Featured By Owner Apr 14, 2011  Hobbyist General Artist
Thank you again. I follow the blog so I had the opportunity to read all the last details.
I wait for the new report function on dA for malwares and viruses to report the ones I find.
Have a good evening.
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 14, 2011
Your welcome. Hopefully the new reporting process will work, doesn't seem to be in effect yet. :)
Reply
:iconvervi59:
vervi59 Featured By Owner Apr 13, 2011
Thanks Karen..
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
You're welcome!

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconotep1984:
otep1984 Featured By Owner Apr 13, 2011
gracias chin yo tenia uno juju , quien carajos los infecto???
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
You're welcome!

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconwall-e-ps:
wall-e-ps Featured By Owner Apr 13, 2011  Hobbyist Artist
"Avast" didn't report anything O.o
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
Sometimes it doesn't. I use Avast and Malwarebytes. You can try using VirusTotal, an online virus checker, before you download.

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconwall-e-ps:
wall-e-ps Featured By Owner Apr 14, 2011  Hobbyist Artist
:D Thanks for caring ;)
Reply
:iconhuldufolk:
huldufolk Featured By Owner Apr 13, 2011  Student
same thing with me and i've downloaded more than one... I dont know what to do... I've just bought the computer I dont want to format it already... :(
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
Update your virus definitions and do full scans. I've been using Avast and Malwarebytes. You can also use TotalVirus, an online scanner that will scan by url or files on your computer.

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconhuldufolk:
huldufolk Featured By Owner Apr 15, 2011  Student
thanks
=]
Reply
:iconwall-e-ps:
wall-e-ps Featured By Owner Apr 13, 2011  Hobbyist Artist
I downloaded "speed" skin but i didn't use it, or install it...So I'm safe I guess...
If I'm in your place I would scan my computer and uninstall this skins...Just to be sure...
Reply
:iconjokerneb:
JokerneB Featured By Owner Apr 13, 2011
THKS,,,
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
You're welcome!

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconllightdriver:
Llightdriver Featured By Owner Apr 13, 2011
Muchas gracias. Thank you very much.
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
You're welcome!

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
:iconphilluppus:
Philluppus Featured By Owner Apr 13, 2011   General Artist
thank you greatly for the warning and all your efforts
Reply
:iconkarmat111:
karmat111 Featured By Owner Apr 13, 2011
You're welcome!

Most of the infected skins that were reported have been removed. There's still a few more to come out but now new ones are starting to come again. But we will keep monitoring and reporting. You can get the latest updates on our blog [link] or to notify us of any bad skins that we've missed. Don't worry, we'll have a clean gallery soon, low-lifes have short attention spans!
Reply
Add a Comment:
 
×




Details

Submitted on
April 12, 2011
File Size
4.3 MB
Link
Thumb
Embed

Stats

Views
7,589
Favourites
16 (who?)
Comments
130
Downloads
188
×