No!!!!!! Don't do it!!!!


Auston

 

Posted

Earlier this afternoon a buddy of mine, while on the phone with me, downloaded the new Map Pack from Vidiotmaps that included issue 17's new expl. badges and stuff.....

he's re-formatting as I type this, NASTY trojan piggy backed with it and screwed the pooch big time on his comp.

WARNING: DO NOT DOWNLOAD the new map pack from vidiotmaps guess they never fixed the problem.....


 

Posted

As some of you might recall, I got bit by this some time ago. As I stated previously, I do not think the issue is with the downloaded file, but rather with the host site Megaupload.com. A friend, bravely, downloaded the Issue 17 map pack, scanned it, and installed it. She then gave me a copy of the file, I too scanned it and installed it. Blessedly neither of us have had any issue with it.

Again, I strongly suspect the problem lies with Megaupload.com, its server, or one of the third party advertisers on their site. Please extend my sincere sympathies to your friend in dealing with this particularly evil virus.


 

Posted

Hmmm, I have it already. I got no trojans, viruses, or malware of any kind from downloading it. I just scanned the exe again. It comes up clean.



"Sorry bucko, but CoH and CoV are the same game." -BackAlleyBrawler
"Silly villain, CoX is for Heroes!" -Saicho

 

Posted

Same, myself and two friends have it and no infections, I scanned it with the Nod32, one friend scanned it with Avast, and the last scanned it with AVG. No bugs found


 

Posted

Quote:
Originally Posted by Vega View Post
Hmmm, I have it already. I got no trojans, viruses, or malware of any kind from downloading it. I just scanned the exe again. It comes up clean.
I hear ya Vega, but this makes the forth case I know of where someone downloaded a map pack and got a lovely parting gift to go with it. I do not know when Beefcake and Co. started using the current host, IIRC they used to host downloads on their own site, but something seems "off" about that host. Speaking with friends outside of this community, that host has a growing rep for giving guests more than they wanted in downloads.

Let me be clear, I'm not blaming Vidiotmaps, Badge-Hunters, Beefcake, or anyone involved in creating the map pack (so don't send me anymore PMs $%*&@#@ at me about it). There is a problem, when four different people, on four different systems get the have the same type of problem corresponding to the same site... there is an issue.


 

Posted

FYI, it's a particular ad that runs on megaupload. I grabbed all 3 files and can make them available on my webhost if people want.


If somebody you're arguing with goes off the deep end, don't follow.

 

Posted

Quote:
Originally Posted by kidengineer View Post
FYI, it's a particular ad that runs on megaupload. I grabbed all 3 files and can make them available on my webhost if people want.
That's awesome of ya Kid, it would be a shame if people didn't get to benefit from all the hard work that goes into finding the data and putting it together in map packs for all of us to enjoy.


 

Posted

Just out of curiosity, how would one KNOW that they've downloaded a virus from that?


 

Posted

In my case, my virus scanner screamed out about a virus attempt when I went to check it out. Going back into the log, it showed meg.xnoe.net as the source. I simply blocked all of Xnoe.net now.


Global @StarGeek
ParagonWiki.com-The original is still the best!
My Hero Merit rolls
Accuracy needed for 95% ToHit spreadsheet
Forum font change stripper for Firefox/Opera/Chrome. No more dealing with poor color choices, weird fonts or microscopic text
Search Wiki Patch notes, add site:ParagonWiki.com inurl:patch_notes to your Google Search

 

Posted

Quote:
Originally Posted by Riverdancer View Post
Just out of curiosity, how would one KNOW that they've downloaded a virus from that?
Boricua may shed some light on the specifics of what happened to his friend, but I can tell you what happened to my system. The virus shuts down your Windows Security Center, which controls your anti-virus and firewall software. It replicates in your registry, to the tune of roughly 17 different files, at least three of which are executables that will reinfect your system upon reboot if you do not remove them ahead of time. This can be difficult, particularly for people with less computer experience. Ultimately, the virus collects handy info like personal data to be fired off to a server somewhere in the nether-reaches of the interwebs.

Warning signs to look for...

If your system suddenly gives you security update warnings, particularly for programs that you are not currently running.

Alert icons appearing in your task tray, again for programs you are not running or do not have installed on your pc.

Sudden, unexplained lag in system performance. I'm not talking about ingame lag, but rather when you're running basic programs like Internet Explorer, Word, Solitare, etc.

Lastly, if your browser starts redirecting you to websites you do not intend to go to, also known as browser hijacking. If this happens to you, seek help immediately. If you do not know how to remove viruses, malware, trojans, etc from your pc, get help. Browser hijacking programs can, and often do, trash your system and leave you vulnerable to identity theft.


 

Posted

Quote:
Originally Posted by Ice9_ View Post
Boricua may shed some light on the specifics of what happened to his friend, but I can tell you what happened to my system. The virus shuts down your Windows Security Center, which controls your anti-virus and firewall software. It replicates in your registry, to the tune of roughly 17 different files, at least three of which are executables that will reinfect your system upon reboot if you do not remove them ahead of time. This can be difficult, particularly for people with less computer experience. Ultimately, the virus collects handy info like personal data to be fired off to a server somewhere in the nether-reaches of the interwebs.

Warning signs to look for...

If your system suddenly gives you security update warnings, particularly for programs that you are not currently running.

Alert icons appearing in your task tray, again for programs you are not running or do not have installed on your pc.

Sudden, unexplained lag in system performance. I'm not talking about ingame lag, but rather when you're running basic programs like Internet Explorer, Word, Solitare, etc.

Lastly, if your browser starts redirecting you to websites you do not intend to go to, also known as browser hijacking. If this happens to you, seek help immediately. If you do not know how to remove viruses, malware, trojans, etc from your pc, get help. Browser hijacking programs can, and often do, trash your system and leave you vulnerable to identity theft.
What Ice said and he told me he was getting a boat load of pop-ups and a prompt command to open his c: drive, and another prompt for some CC information.

I downloaded it and nothing happened to me, but then again after I downloaded it I got a message from my Nortons saying a recent attempt to attack my computer was thwarted, so I guess I got lucky.

Rican


 

Posted

Speaking for those who'll use this and be spared the strife of being infected, I say thank you Kid. 'Tis a very good thing you've done here.

Also, I'd like to thank Sooner Spirit, she's the one who helped me get the map pack without further risking my own system. I also owe a shout out to Major T for his guidance and advice when I toiled with the effects of the virus a few weeks ago.


 

Posted

Quote:
Originally Posted by kidengineer View Post
Also here.
These files were pulled from the hamidon.com links above and scanned against Symantec (not Norton), McAfee, AVG, Kaspersky and Avast. As far as these AV packages are concerned, they're clean.

http://cox-supergroups.com/vm_mappack_i17.exe
http://cox-supergroups.com/vm_bind_files.exe
http://cox-supergroups.com/vm_vip_i17.exe

I've extended Beefcake the offer of an account that he himself can host the files from so he can control versioning.



Clicking on the linked image above will take you off the City of Heroes site. However, the guides will be linked back here.

 

Posted

Quote:
Originally Posted by Hyperstrike View Post
I've extended Beefcake the offer of an account that he himself can host the files from so he can control versioning.
That's very cool, I'm sure both Beefcake and the fans/users of Badge-Hunter will appreciate it.


 

Posted

Quote:
Originally Posted by Boricua View Post
Earlier this afternoon a buddy of mine, while on the phone with me, downloaded the new Map Pack from Vidiotmaps that included issue 17's new expl. badges and stuff.....

he's re-formatting as I type this, NASTY trojan piggy backed with it and screwed the pooch big time on his comp.

WARNING: DO NOT DOWNLOAD the new map pack from vidiotmaps guess they never fixed the problem.....
First off, I'd like to apologize for any viruses you may have gotten a hold of while browsing the web.

Second, I can assure you there is "NO" viruses on the map pack or any other downloads you get from my site.

Actually, I did correct the problem from before, which is why you see no ads on my site anymore.

And for the record, I've had over 6,000 people download the map pack for the new Issue 17 so far, and I've heard of 3 people having this same issue. And to me, thats more than I would hope to see have this issue. So yes, I do care about things like this and I'm grateful someone has brought it to my attention instead of coming here and posting about it, when it should've been brought to my attention. But never the less, I hope I can find another place to store the files.

It is very possible that it came from the advertisements the file sharing site use. I know they display ads on their site. This unfortunately, isn't something I can control. I have however contacted the file sharing site and made them aware of the problem and they are currently looking into the situation.

I don't know their policy on things like this, as I'm not a partner with the site or know their policies. Anyone can sign up to the site to store files. Actually, you don't need to create an account to download either. Anyone can download if I'm not mistaken.

The reason I use the file sharing site is due to bandwith, my site can't handle it. Well it can, but I can't handle the costs, bandwith is pretty expensive once you exceed your maximum threshold.

So if anyone has a better place for me to store the files, please don't hesitate to let me know, I will gladly move them to another site. I have no ties to the current file sharing site I'm with. Just PM me and I will do what I can to move the files away from the current site so this doesn't happen to anyone else.

~Beef


[B]Leading Badge Holder in the City of Community[/B]
Owner & Operator of...
[URL="http://www.vidiotmaps.com/"]Vidiotmaps.com[/URL] & [URL="http://www.badge-hunter.com/"]Badge-Hunter.com[/URL]

[URL="http://net-warrior.mybrute.com/"][B][SIZE=3][COLOR=darkorange]Challenge My Brute[/COLOR][/SIZE][/B][/URL]

 

Posted

Quote:
Originally Posted by Beef_Cake View Post
First off, I'd like to apologize for any viruses you may have gotten a hold of while browsing the web.

Second, I can assure you there is "NO" viruses on the map pack or any other downloads you get from my site.

Actually, I did correct the problem from before, which is why you see no ads on my site anymore.

And for the record, I've had over 6,000 people download the map pack for the new Issue 17 so far, and I've heard of 3 people having this same issue. And to me, thats more than I would hope to see have this issue. So yes, I do care about things like this and I'm grateful someone has brought it to my attention instead of coming here and posting about it, when it should've been brought to my attention. But never the less, I hope I can find another place to store the files.

It is very possible that it came from the advertisements the file sharing site use. I know they display ads on their site. This unfortunately, isn't something I can control. I have however contacted the file sharing site and made them aware of the problem and they are currently looking into the situation.

I don't know their policy on things like this, as I'm not a partner with the site or know their policies. Anyone can sign up to the site to store files. Actually, you don't need to create an account to download either. Anyone can download if I'm not mistaken.

The reason I use the file sharing site is due to bandwith, my site can't handle it. Well it can, but I can't handle the costs, bandwith is pretty expensive once you exceed your maximum threshold.

So if anyone has a better place for me to store the files, please don't hesitate to let me know, I will gladly move them to another site. I have no ties to the current file sharing site I'm with. Just PM me and I will do what I can to move the files away from the current site so this doesn't happen to anyone else.

~Beef
my apologies beef_cake:

1. my intent was too infrom my Protector brothers and sister about a possible attack that could occur if they downloaded the map pack, and not too bash you or the great work you do.

2. i'm sure that if I had done a bit more searching I cold have gotten your contact info and came to you directly and informed you about the virus piggy backing on your map pack.....again I apologize.

3. as I stated I downloaded it also and didn't get a virus so the attacks may be random, i'm not a computer guru, I don't know how this stuff works, I turn on my comp, load CoH and commence to play, thats the extent of my computer knowledge.

I am in no way trying to squash you or badge-hunter, it's a GREAT site, extremely helpfull and I use it all the time, thank you for all the work you put into it and all the helpfull infromation you provide us with.

again my apologies Beef_Cake


 

Posted

Quote:
Originally Posted by Hyperstrike View Post
Also here.
These files were pulled from the hamidon.com links above and scanned against Symantec (not Norton), McAfee, AVG, Kaspersky and Avast. As far as these AV packages are concerned, they're clean.

http://cox-supergroups.com/vm_mappack_i17.exe
http://cox-supergroups.com/vm_bind_files.exe
http://cox-supergroups.com/vm_vip_i17.exe

I've extended Beefcake the offer of an account that he himself can host the files from so he can control versioning.

Hyper, I don't care what anyone else says, I think you are DE AWESOME! *hugs*


 

Posted

Just letting everyoen know, I removed all the files from MegaUpload and placed them on a private server, so feel free to download at will.

No more advertisements to cause any more issues.


[B]Leading Badge Holder in the City of Community[/B]
Owner & Operator of...
[URL="http://www.vidiotmaps.com/"]Vidiotmaps.com[/URL] & [URL="http://www.badge-hunter.com/"]Badge-Hunter.com[/URL]

[URL="http://net-warrior.mybrute.com/"][B][SIZE=3][COLOR=darkorange]Challenge My Brute[/COLOR][/SIZE][/B][/URL]

 

Posted

Quote:
Originally Posted by Beef_Cake View Post
Just letting everyoen know, I removed all the files from MegaUpload and placed them on a private server, so feel free to download at will.

No more advertisements to cause any more issues.
Good call, BC.


Be well, people of CoH.

 

Posted

Quote:
Originally Posted by Beef_Cake View Post
Just letting everyoen know, I removed all the files from MegaUpload and placed them on a private server, so feel free to download at will.

No more advertisements to cause any more issues.
You...
are...
a...
GAWD!

Don't let anyone tell you different.



Clicking on the linked image above will take you off the City of Heroes site. However, the guides will be linked back here.

 

Posted

Quote:
Originally Posted by Beef_Cake View Post
Just letting everyoen know, I removed all the files from MegaUpload and placed them on a private server, so feel free to download at will.

No more advertisements to cause any more issues.
I sincerely wish whoever created this virus would fall down a flight a stairs for all the pain they have caused. A very, very long flight of stairs. Here's hoping no one has to go through this dance again.

Quote:
Originally Posted by Bill Z Bubba View Post
Good call, BC.
I agree, completely.


 

Posted

I would like to let everyone know, I am the friend that Boricua was talking about. In defense of Vidiotmaps, and what happened, I do not have much security software on my comp, as money is an issue, and have not been able to afford to keep my software up to date. I do not surf the web or do many things on the internet, just mostly these forums and this game. If I had the proper software, this might not have been an issue.

I have nothing but the deepest respect for Beefcake and Vidiotmaps, and have been using the services ever since I joined the game, just prior to Issue 8. I will continue to use the services, and do not consider what happened to me to be a reflection on the above mentioned in any way.

Thank you.


 

Posted

Thanks Beef Cake for acting on this. I really appreciate it.

And thanks for everything you do for us.


 

Posted

Auston,

Avira AntiVir is free. Found here.

For Spyware, some swear by Malwarebytes but I didn't care for it and still use Spybot Search and Destroy. Both are free.

As a matter of fact, the protection software that you have to pay for is usually garbage. I would NEVER install Norton or McAfee on my rigs. Even AVG is heading down the bloat path lately.


Be well, people of CoH.