Windows 7: Sharing a quick warning for steam users

damoh · 27 Jul 2009

Hi all
Thought i would share this with u all, just incase. Please all steam users scan your PC. This is what virus i found last night, strange thing is i havent downloaded anything recently which makes me think it may be one of them time virus things.
I tried to delete the following virus
SDbot.gen!f

I used MSE and it said it couldnt delete it however it did quarantine. 20 minutes later my steam got hacked. Ive had to buy all games again ( long story which steam basically said tough)
So if you do scan and find it, please please change your pass quick.

mickey megabyte · 27 Jul 2009

thanks for the warning!

did this virus infect your machine even though you had mse running? worrying.

damoh · 27 Jul 2009

Well thing is that i only installed MSE yesterday lol. So im wondering how long it was on there for. Ive run a full scan both with AVG and MSE and only MSE detected it.
I may be paranoid, but i find it funny how when i try to remove it ( unsuccessfully) my steam hacks within minutes. I dont know enough about how viruses work to say wether me trying to remove it actaully activated it. Im concerned that AVG didnt detect it and still didnt after MSE had

zay · 27 Jul 2009

Sorry for your issue, I suggest you uninstall whatever AV you currently have, and install Avast and have it do a boot scan. You can remove avast afterwards if you want, and put MSE back on. I had issues where no other AV found what had infected my pc, and using Avast to do a boot scan fixed it right on up. I think it is worth a shot.

zigzag3143 · 27 Jul 2009

Quote: Originally Posted by damoh

Well thing is that i only installed MSE yesterday lol. So im wondering how long it was on there for. Ive run a full scan both with AVG and MSE and only MSE detected it.
I may be paranoid, but i find it funny how when i try to remove it ( unsuccessfully) my steam hacks within minutes. I dont know enough about how viruses work to say wether me trying to remove it actaully activated it. Im concerned that AVG didnt detect it and still didnt after MSE had

Damoh

What specific virus did MSE find? sometimes mse gives false positives.

Ken

damoh · 28 Jul 2009

Quote: Originally Posted by zigzag3143

Damoh

What specific virus did MSE find? sometimes mse gives false positives.

Ken

This one mate: SDbot.gen!f

I seem to have gotten rid of it, not before my steam got hijacked. But imho steam customer support has been 'flakey' at best. Told it can take upto 5 days for them to return my account to me. Then in the next breath im told that if said hacker does anything to my account which results in me getting a Vac ban then essentially tough.
Nice

ickymay · 28 Jul 2009

Quote: Originally Posted by damoh

This one mate: SDbot.gen!f

I seem to have gotten rid of it, not before my steam got hijacked. But imho steam customer support has been 'flakey' at best. Told it can take upto 5 days for them to return my account to me. Then in the next breath im told that if said hacker does anything to my account which results in me getting a Vac ban then essentially tough.
Nice

possibly "NAME: Randex
ALIAS: SdBot, Backdoor.SdBot.gen, Randex.C, Slanper.A
VARIANT: Randex.C

Randex is an IRC controlled worm, based on the well known SdBot IRC backdoor. This worm infects Windows computers on local networks that use weak passwords."

the weakness has been using IRC, check this site for details

damoh · 28 Jul 2009

Quote: Originally Posted by ickymay

possibly "NAME: Randex
ALIAS: SdBot, Backdoor.SdBot.gen, Randex.C, Slanper.A
VARIANT: Randex.C

Randex is an IRC controlled worm, based on the well known SdBot IRC backdoor. This worm infects Windows computers on local networks that use weak passwords."

the weakness has been using IRC, check this site for details

Never used IRC in my life.

zay · 29 Jul 2009

I hope you get this resolved soon.

Dinesh · 29 Jul 2009

This shows that MSE works better than AVG.

Windows 7: Sharing a quick warning for steam users

Sharing a quick warning for steam users problems?