Be careful of crackingpatching

from u/itsNagon, posted to r/Piracy

Yesterday I went as usual and downloaded CP’s latest IDM Patch. And for the first time ever my PC was bombarded with ransomwares and fbrobot.exe (which uses 99% of your CPU and fucks up your RAM). Couldn’t do anything because they also disabled my Windows Security due to modifying my keys so Security couldn’t do anything to protect me. Today I woke up with all my accounts (Discord, social media etc) spamming everyone links with viruses, but managed to protect the important stuff thanks to 2FA.

Tl;dr Fuck Crackingpatching, use 2FA, be safe.

Update: So I was checking my hard drives and found a “_readme.txt” file, I went and used ID-Ransomware and turns out I was infected with Stop(DJVU) ransomware, I’m pretty sure every file that I checked isn’t encrypted, I’m not sure if me acting quickly and terminating the programs and deleting the keys disabling Windows Security aided me here or if Security already deleted the encrypted files lol, so if anyone is familiar with this ransomware could shed some light on this matter.

Luckily, Emissoft has a decryptor for it incase I find any encrypted folders, I already ran Windows Security, Malwarebytes, HitmanPro and cleaned everything and now I’m using the powerful Tronscript to wrap everything up.

Concerning the log ins from Ukraine, apparently Stop(DJVU) installs Azorult password-stealing Trojan so that explains the weird login attempts from all over the place, luckily every single account I have is protected via 2FA except my Discord one so that’s how they managed to send everyone virus links

Some people claim they have used CP recently and haven’t had any problems, I’d just say be careful and use 1337x to download IDM related stuff would be better, the file name I downloaded was “Download+Now+(+14.87+MB+).zip and it contains a setup exe that caused all of this trouble (and yes, it’s off CP’s official website) and straight up opened ShareFolder program and had different exe’s working simultaneously at the same time (one called 1.exe and its job is…you guessed it, disabling Windows Security)

In conclusion, I’d like to thank every single one of you for chipping your cents especially those who recommended these programs, stay vigilant guys and happy pirating.

Post link: r/Piracy
Archive: archive.is / web.archive.org

Edit
Pub: 23 Jun 2023 02:21 UTC
Views: 565