Hey Jeff, did you get anywhere with him? I'm just about to post a comment at dA that Fiona and Heidi will see and thought I'd check first to see you if you've made any progress.jsmorley wrote:I will put some thoughts together in the next day or so. I think I might know that guy from Netherworld BBS. I was the sysop of the Interconnect BBS (and the president of the Capitol Area Sysops Association) at the time he was running Netherworld.
It is currently December 1st, 2023, 6:40 am
Warning from the Rainmeter Team
-
karmat
- Posts: 329
- Joined: July 7th, 2009, 11:10 pm
- Location: Canada
Re: Warning from the Rainmeter Team
-
jsmorley
- Developer
- Posts: 22593
- Joined: April 19th, 2009, 11:02 pm
- Location: Fort Hunt, Virginia, USA
Re: Warning from the Rainmeter Team
I did not. I have been away and haven't had a chance to ping him. Sorry.karmat wrote: Hey Jeff, did you get anywhere with him? I'm just about to post a comment at dA that Fiona and Heidi will see and thought I'd check first to see you if you've made any progress.
-
karmat
- Posts: 329
- Joined: July 7th, 2009, 11:10 pm
- Location: Canada
Re: Warning from the Rainmeter Team
I have been reporting and reporting and reporting but dA is just not removing them. I sent the following message to Fiona with a copy to OtisBee...
Fiona, there are still 17 skins in the Rainmeter Gallery that are infected with malware. The oldest one has been there since April 17, a month ago. Last time I counted, 16 of these skins had generated almost 4,000 downloads. I have reported all of them, some in the old way, all of them in the new way. Obviously, there is still a problem with malware reporting.
Could I get an update on when these will be removed and if dA is going to implement an antivirus check at upload? Would really be appreciated.
See below for a list of the infected skins...
Fiona, there are still 17 skins in the Rainmeter Gallery that are infected with malware. The oldest one has been there since April 17, a month ago. Last time I counted, 16 of these skins had generated almost 4,000 downloads. I have reported all of them, some in the old way, all of them in the new way. Obviously, there is still a problem with malware reporting.
Could I get an update on when these will be removed and if dA is going to implement an antivirus check at upload? Would really be appreciated.
See below for a list of the infected skins...
-
jsmorley
- Developer
- Posts: 22593
- Joined: April 19th, 2009, 11:02 pm
- Location: Fort Hunt, Virginia, USA
Re: Warning from the Rainmeter Team
I was sorry to see that Enigma copy pop up there yesterday. I was hoping the guy had gotten bored and moved on....
It is my hope that this is one guy with some stick up his behind and the problem more or less goes away when he is done having fun. It's why I have been keeping kind of quiet, just hoping that not feeding his ego will help some. I don't think we are ever going to be happy with the response from DA. They are a huge site that has outgrown their ability to manage it properly with only paid staff, and unless they change their minds about some kind of area-specific moderation (and I doubt it) I think we are going to have to live in a world where most of the time things go along just fine, but once in a while we get one of these situations, and all we can do is try to beat it into people's heads that if comments are disabled, you don't download the skin.
It is my hope that this is one guy with some stick up his behind and the problem more or less goes away when he is done having fun. It's why I have been keeping kind of quiet, just hoping that not feeding his ego will help some. I don't think we are ever going to be happy with the response from DA. They are a huge site that has outgrown their ability to manage it properly with only paid staff, and unless they change their minds about some kind of area-specific moderation (and I doubt it) I think we are going to have to live in a world where most of the time things go along just fine, but once in a while we get one of these situations, and all we can do is try to beat it into people's heads that if comments are disabled, you don't download the skin.
-
karmat
- Posts: 329
- Joined: July 7th, 2009, 11:10 pm
- Location: Canada
Re: Warning from the Rainmeter Team
Just saw this skin...
Avatar RM Theme by phong1970 http://phong1970.deviantart.com/art/Avatar-RM-Theme-208936758?q=in%3Acustomization%2Fskins%2Fsysmonitor%2Frainmeter%20sort%3Atime&qo=0
VirusTotal doesn't pickup anything. The zip file just has one file - AvatarSkininstaller.exe - I scanned it with Avast and Malwarebytes and it comes up clean.
Avatar RM Theme by phong1970 http://phong1970.deviantart.com/art/Avatar-RM-Theme-208936758?q=in%3Acustomization%2Fskins%2Fsysmonitor%2Frainmeter%20sort%3Atime&qo=0
VirusTotal doesn't pickup anything. The zip file just has one file - AvatarSkininstaller.exe - I scanned it with Avast and Malwarebytes and it comes up clean.
-
poiru
- Developer
- Posts: 2872
- Joined: April 17th, 2009, 12:18 pm
Re: Warning from the Rainmeter Team
The AvatarSkininstaller.exe executable contains:karmat wrote:Just saw this skin...
Avatar RM Theme by phong1970 http://phong1970.deviantart.com/art/Avatar-RM-Theme-208936758?q=in%3Acustomization%2Fskins%2Fsysmonitor%2Frainmeter%20sort%3Atime&qo=0
VirusTotal doesn't pickup anything. The zip file just has one file - AvatarSkininstaller.exe - I scanned it with Avast and Malwarebytes and it comes up clean.
- AcrobatUpdater.exe
- A .zip (seems to be a valid .rmskin)
AcrobatUpdater.exe seems suspicious..
-
karmat
- Posts: 329
- Joined: July 7th, 2009, 11:10 pm
- Location: Canada
Re: Warning from the Rainmeter Team
I just did Malware Report #4 http://rainmeter.deviantart.com/blog/40705562/
Fiona responded in the comments saying that they are currently testing anti-virus on submission and have been using this gallery in particular for testing.
I commented back, I hope I didn't overstep my boundaries here, what do you think?
Fiona responded in the comments saying that they are currently testing anti-virus on submission and have been using this gallery in particular for testing.
I commented back, I hope I didn't overstep my boundaries here, what do you think?
-
jsmorley
- Developer
- Posts: 22593
- Joined: April 19th, 2009, 11:02 pm
- Location: Fort Hunt, Virginia, USA
Re: Warning from the Rainmeter Team
I responded in that thread. I think your post is fine.
-
karmat
- Posts: 329
- Joined: July 7th, 2009, 11:10 pm
- Location: Canada
Re: Warning from the Rainmeter Team
I responded again as well.
Also, I've received about 20 automated replies - all but 4 that I've reported have now been removed and most of the usernames have been banned - finally!
Three of the four that are left don't show any virii when checked by VirusTotal, but they all have an installer.exe file in the zip. The automated replies I received for these ones say that my report is invalid and that... A member of the staff has preformed an independent virus scan on the download associated with this deviation and has not detected any viral component.
How do I explain that to Fiona so that they can understand and delete them?
The ones in question are:
- Enigma - but it was just reported today
- http://phong1970.deviantart.com/#/d3ge8mu
- http://intellodu77.deviantart.com/art/Simplicity-v6-5-8-1-209090406
- http://intellodu77.deviantart.com/art/Simplicity-v6-5-8-2-209213193
Also, I've received about 20 automated replies - all but 4 that I've reported have now been removed and most of the usernames have been banned - finally!
Three of the four that are left don't show any virii when checked by VirusTotal, but they all have an installer.exe file in the zip. The automated replies I received for these ones say that my report is invalid and that... A member of the staff has preformed an independent virus scan on the download associated with this deviation and has not detected any viral component.
How do I explain that to Fiona so that they can understand and delete them?
The ones in question are:
- Enigma - but it was just reported today
- http://phong1970.deviantart.com/#/d3ge8mu
- http://intellodu77.deviantart.com/art/Simplicity-v6-5-8-1-209090406
- http://intellodu77.deviantart.com/art/Simplicity-v6-5-8-2-209213193
-
jsmorley
- Developer
- Posts: 22593
- Joined: April 19th, 2009, 11:02 pm
- Location: Fort Hunt, Virginia, USA
Re: Warning from the Rainmeter Team
I responded to this issue about the replies I received as well that there were no viruses found in several of them. VirusTotal does find a virus in the Enigma 1.3 .exe, but only 3 or 4 of the engines do. It is either a new variant that the engines have not cataloged yet, or this guy is submitting these bogus skins with nothing but a .exe but no virus, just to cloud the waters.karmat wrote:I responded again as well.
Also, I've received about 20 automated replies - all but 4 that I've reported have now been removed and most of the usernames have been banned - finally!
Three of the four that are left don't show any virii when checked by VirusTotal, but they all have an installer.exe file in the zip. The automated replies I received for these ones say that my report is invalid and that... A member of the staff has preformed an independent virus scan on the download associated with this deviation and has not detected any viral component.
How do I explain that to Fiona so that they can understand and delete them?
The ones in question are:
- Enigma - but it was just reported today
- http://phong1970.deviantart.com/#/d3ge8mu
- http://intellodu77.deviantart.com/art/Simplicity-v6-5-8-1-209090406
- http://intellodu77.deviantart.com/art/Simplicity-v6-5-8-2-209213193
We really need some kind of local moderation over there. Yes, a lot of them were deleted today, but it is only because Fiona jumped in personally again. She is right that we should not expect to be "fast tracked" like that, and as of tomorrow it will go right back to just how it was. She only gets mostly on top of this when we beat her up, and then goes back to the broken system that doesn't work at all. That isn't fair to anyone. Not us, not her, not her team, and not the rest of deviantART.