Jump to content

Bad news about a japanese mod site


SakuraX222

Recommended Posts

Posted

modtype . doorblog . com is loaded with malware and whatnot else and I'm pretty sure i got viruses from there.  DON'T Use it.  it has great mods, but its best if we don;t use it anymore. heck my chrome installation got messed up and i had to do a fresh install of it, not that i use it.  so far I see no symptoms of malware, other than presumably fake processes.  i also get more than a dozen copies of a process called xgtwmpcmrq . exe if anyone has any info on it id greatly appreciate it.   google and bing have nothing.

Posted

I have used http://modtype.doorblog.jp/a lot and have never ever gotten any type of virus or spyware/maleware from there. I would be more worried about getting something from bing and what it wants to take you to. When I first saw bing it made me think virus/maleware search bar so I treated it as one and dumped it from my computer.

Posted

I've used it lots of times, I'm regularly checking it because just some things don't get featured anywhere else. Are you sure it isn't some adblocker giving you false positives because of some ad? And a dozen copies of any exe that you DON"T know where it came from is a more alarming issue. I'd suggest running Spybot S&D and malwarebytes to get some of those bugs off, and use a little more caution visiting those naughty sneaky porn sites :D

Posted

modtype . doorblog . com is loaded with malware and whatnot else and I'm pretty sure i got viruses from there.  DON'T Use it.  it has great mods, but its best if we don;t use it anymore. heck my chrome installation got messed up and i had to do a fresh install of it, not that i use it.  so far I see no symptoms of malware, other than presumably fake processes.  i also get more than a dozen copies of a process called xgtwmpcmrq . exe if anyone has any info on it id greatly appreciate it.   google and bing have nothing.

I've also never had any problem with any form of malware from ModType.

Of all things,my computer was infected with Malware(spy ware and ad ware) from a regular automatic Java update which I may have forgotten to off tick one of the optional installs from,making those more dangerous than ModType.

Posted

 

modtype . doorblog . com is loaded with malware and whatnot else and I'm pretty sure i got viruses from there.  DON'T Use it.  it has great mods, but its best if we don;t use it anymore. heck my chrome installation got messed up and i had to do a fresh install of it, not that i use it.  so far I see no symptoms of malware, other than presumably fake processes.  i also get more than a dozen copies of a process called xgtwmpcmrq . exe if anyone has any info on it id greatly appreciate it.   google and bing have nothing.

I've also never had any problem with any form of malware from ModType.

Of all things,my computer was infected with Malware(spy ware and ad ware) from a regular automatic Java update which I may have forgotten to off tick one of the optional installs from,making those more dangerous than ModType.

 

 

Then you dont download Java from Java.Com. or oracle.

And if you want to know so do Java installation install Ask.Com advare.

But you have the option to not install it.

Posted

More likely the online ads they use have probably been compromised and invaded by a trojan, which was the same problem that plagued this site some weeks ago.

 

It's becoming a regular attack vector for those trojans/malware to use online ads to attack vulnerable end-users.

 

---------

OP, since you're infected, pick up some anti-malware tools at BleepingComputer. And use some form of adblocker (but please, whitelist LoversLab if you have an adblocker enabled).

Posted

well maybe it is only your antivirus

every single mod for patrizian4 and rise of venice my avast mark as virus (downloaded from official sites)

also he mark as virus entire game(corsair) because it is not on english but russian 

and that is nothing new

every single russian mod i was used in oblivion avast was marked as virus

Posted

You have a higher chance to get a virus from Nexus than some random japananese bloggers.

Funny you say that, nexus mod page seems to be re-directing me to upload a new browser

Guest carywinton
Posted

modtype . doorblog . com is loaded with malware and whatnot else and I'm pretty sure i got viruses from there.  DON'T Use it.  it has great mods, but its best if we don;t use it anymore. heck my chrome installation got messed up and i had to do a fresh install of it, not that i use it.  so far I see no symptoms of malware, other than presumably fake processes.  i also get more than a dozen copies of a process called xgtwmpcmrq . exe if anyone has any info on it id greatly appreciate it.   google and bing have nothing.

 

Use a good Antimalware scanner, I use Malwarebytes and it does a good job, especially the professional paid version, it will stop junk like that before it even tries to install, as to the multiple rogue processes you have running, that is probably a rootkit and Malwarebytes will also detect and remove a good percentage of these too. Also get a copy of HitmanPro and boot your PC using this on a USB drive, if something really bad is in there, it will find it and either kill it outright or make recommendation of what to do from there. If you use Java and Adobe Flash for interactive web and game content, then keep them up to date and never download a web site version, always go directly to Java.com or Adobe.com and check for updates and your currently installed version. Keep whatever antivirus you have running up to date and run a "full" scan immediately upon even a hint of infection.

I hope that helps you get rid of the menace. I would also start backing up important stuff to an external drive or somewhere other than the main operating system drive, just incase you have to reinstall your operating system.

 

As to the sites you mentioned, I have been on them and never personally had a problem, but then again my PC is pretty well covered against most online stuff. What some folks have stated is probably true too, it was probably an add site that got hit with some malware and such and this is what started your problems.

Posted

You can use 

Spybot – Search & Destroy®

as compliment for Malevarebyte or other similar program. Since it can block i don't know how many bad sites. Last i checked it was like 22000 sites whit malevare/virus.

I have used that for several of years now.

I give you the correct adress for it since several of the other domains have virus on them. They use similar names so that is why.

Did have one friend that used *.com and DL that and it was one pain to get it clean again.

 

http://www.safer-networking.org/

 

Hope the mods understands :heart:

  • 3 weeks later...
Posted

You need to check your boot drive in another computer with something like tdsskiller from kaspersky make sure you don't have any hidden rootkit virus, then scan your drive with that other computer with a good AV like kaspersky or nod32. Then put your boot drive back in and run combofix and some stuff from the download page for combofix can't remember the name atm but there is two of them on there you will see it when you find it. After that you can run things like spybot search and destroy. When that is all done run windows update and patch all the holes then install a good AV like above mentioned. Use firefox or chrome with adblock plus since it blocks malware domains now and not just ads. Don't EVER click on sports streaming sites like soccer streaming sites they are all fake.

Posted

Tips for not getting annoying viruses on sities like this one= use addblock. 99% of the viruses u got most likely come from adds. Here you go https://chrome.google.com/webstore/detail/adblock/gighmmpiobklfepjocnamgkkbiglidom?hl=sv

 

Thank-you for pointing this out Jakobodman. Here's the english version of that -

https://chrome.google.com/webstore/detail/adblock/gighmmpiobklfepjocnamgkkbiglidom?hl=en

 

I only use Chrome for YouTube and TwitchTV. Firefox is my primary browser for everywhere else with a combination of Noscript, AdBlock Plus and Ghostery.

(LoversLab is white-listed for all three, just mentioning this for... reasons ;))

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...