procedural fluid? (Answered, MOD WAS A VIRUS)

[Pavlovian Afterdark]

I saw the mod this morning. Came looking for it not long ago to try and donwload it to test it but its' gone.

 

 

What happened?

 

Thank you.

 

Thank you for the promp answer MadMansGun.

Edited 12 hours ago by Pavlovian Afterdark
Information updated.

[beanman2122]

Yeah it was up for about an hour before it got removed, no idea what happened to it.

[MadMansGun]

it was a virus.

 

edit this is what a user on discord reported:

Creates %USERPROFILE%.vscode

Downloads "vscode-bootstrap.cmd" from an address

Executes the downloaded script

Edited 12 hours ago by MadMansGun

[zeugmaballs]

Is it known if the version currently on the nexus is malware as well or was this an isolated case?

[Pavlovian Afterdark]

11 minutes ago, MadMansGun said:

it was a virus.

 

edit this is what a user on discord reported:

Creates %USERPROFILE%.vscode

Downloads "vscode-bootstrap.cmd" from an address

Executes the downloaded script

Damn, its gonna get riskier to add mods to your load orders now. I am already nervous because of the multiple mods with executables on the steam workshop that have appeared. Its one of the reason I dont play zomboid anymore. And now even Skyrim. 

 

Fuck.

[MadMansGun]

Just now, Pavlovian Afterdark said:

Damn, its gonna get riskier to add mods to your load orders now. I am already nervous because of the multiple mods with executables on the steam workshop that have appeared. Its one of the reason I dont play zomboid anymore. And now even Skyrim. 

 

Fuck.

tips:

don't be the first to download new mods, let them sit for a week.

don't download from new modders/users that have nothing to show from before now.

 

anyone with actual skill would of made a lot of dog crap before now to learn that skill (also they would of been around long enough for people to know, and would of likely asked questions on how to do things).

[judge007]

49 minutes ago, MadMansGun said:

tips:

don't be the first to download new mods, let them sit for a week.

don't download from new modders/users that have nothing to show from before now.

 

anyone with actual skill would of made a lot of dog crap before now to learn that skill (also they would of been around long enough for people to know, and would of likely asked questions on how to do things).

scan all mods with antivirus before use

mod has an .exe file? pass

mod has a .dll file? is it from a reputable modder? if not do as MadMansGun said, wait a week or two

Has the mod author been a member for ten or more years and just now got 2 posts? pass

Does the mod recommend/require a .dll file that isn't from nexus/LL/a respected author? pass

 

Consider this and the post above a "modding condom"

[Pavlovian Afterdark]

24 minutes ago, judge007 said:

scan all mods with antivirus before use

mod has an .exe file? pass

mod has a .dll file? is it from a reputable modder? if not do as MadMansGun said, wait a week or two

Has the mod author been a member for ten or more years and just now got 2 posts? pass

Does the mod recommend/require a .dll file that isn't from nexus/LL/a respected author? pass

 

Consider this and the post above a "modding condom"

Just want to be clear. How does this virures work. I mean, just donwloading it is enough to infect my pc? or is there a "trigger" to them?.

Edited 10 hours ago by Pavlovian Afterdark

[zeugmaballs]

33 minutes ago, Pavlovian Afterdark said:

Just want to be clear. How does this virures work. I mean, just donwloading it is enough to infect my pc? or is there a "trigger" to them?.

 

It depends. The majority of malware you'll come across requires some kind of user input, whether its running an executable (.exe file), or loading a DLL like the mod in question. Note that DLLs cannot be run like an executable but instead are loaded alongside an executable, like when SKSE is launched and all its plugins are loaded.

 

That being said, always err on the side of caution when downloading anything from someone or a website you do not know or trust.

[General Goods]

The OStrands on the nexus is the "original" this one was a malicious rip-off of.

That one is safe and works as advertised, even with sexlab('cept the cum part, as that relies on OCum).

[Rose-red Knight]

Anyway to tell whether damage was done? Defender caught it just as I installed it. Though the folder in temp was already created.