💬︱general-chat

[wet sable]

burn the tree 🔥 🌴

[brittle root]

nunon mey dreh ni mindoraan... (Only fools do not understand)

[tired kestrel]

https://tenor.com/view/gun-gif-22839895

[placid wind]

damm

[safe echo]

anyone wanna play the modpack bogchadguysplus

[tired kestrel]

idk waltuh seeming sus lately

[proud imp]

I am groot (I’m made froom wood)

[safe echo]

im nopt nobody wants to play

[placid wind]

sh*t got real

[wet sable]

im gonna steal the Infinity Gaunlet

[tired kestrel]

https://tenor.com/view/chainsawman-chainsaw-anime-theroosterpl-gif-26261115

[proud imp]

I am groot (nonono)

[brittle root]

https://tenor.com/view/one-punch-man-ok-saitama-gif-4973579

[tired kestrel]

https://tenor.com/view/crazy-clancy-texas-chainsaw-massacre-chainsaw-horror-gif-16132522

[proud imp]

I am groot (I have it)

[weary pendant]

https://tenor.com/view/chainsaw-wanna-die-rage-gif-14270996

[wary bluff]

I forgot where I left my intelligence

[tired kestrel]

https://tenor.com/view/gimme-gif-5731137

[proud imp]

I am groot (no)

[wet sable]

https://tenor.com/view/fire-smoke-burning-trees-our-planet-our-planet-forests-gif-17111006

[placid wind]

this individual really likes chainsaws

[tired kestrel]

i wanna kill groot

[wet sable]

burn trees burn trees

[wide nacelle]

[brittle root]

https://tenor.com/view/snap-avengers-end-game-end-game-iron-man-gif-17433565

[tired kestrel]

https://tenor.com/view/reverse-uno-meme-oof-big-gif-20438443

[proud imp]

I am groot (I’m being bullied)

[wet sable]

also i burn all trees in Minecraft just to build a city

[placid wind]

This reminds me of that 2bt2 group that destroyd a LOT of trees

[wary bluff]

[wet sable]

in minecraft?

[brittle root]

We are groot (Just snapped you to an alternate universe where 3sec wasn't born and thus can't bully you xD)

[tired kestrel]

someone give me some choccy milk

[wet sable]

idk if someone TNT to remove trees

[brittle root]

Hands you Suspicious Chocolate Milk

[tired kestrel]

gives it to groot

[proud imp]

I am groot (good idea byeeeee)

[wary bluff]

Chocolate milk flavored nitroglycerin

[placid wind]

NO U KNOW,IN REAL LIFE, yea unlawul man slather too

[wet sable]

u mean the man behind the slaugther?

[wary bluff]

Weird pfp guy

[wet sable]

are u talking about my Dad

[wary bluff]

Why’d you ping me yesterday

[wet sable]

my father is William Afton

[wary bluff]

[brittle root]

heh?

[wet sable]

the man behind the slaugther

[placid wind]

anyway can I ask YOU GUYS, Nvidia or AMD?

[brittle root]

for a sec there i thought that was zoe from extra credits lol

[brittle root]

AMD 😛 Cos it's AMD at success 😉

[wary bluff]

Slaughters are lame I use napalm and dirty bombs

[wide nacelle]

At this higher point of 4000, I don’t think it matters until AMD releases more under their RX 7000 series

[placid wind]

It do be like that : DDD

[tired kestrel]

playing pixelmon but. why is this ungrammared

[wet sable]

how dare u, also i have to go, also say hi to Gregory.

[brittle root]

napalm and dirty bombs are lame... I jsut destabilise stars

[wet sable]

Gregory: hi guys

[placid wind]

AHHHHHHHHHHHHHHHHHHHHHHHH

[wet sable]

Gregory: what?

[wary bluff]

Lame I throw black holes into space fairing solar systems

[wheat swallow]

very relatable

[brittle root]

Lame I butt-delete realities 😛

[wet sable]

Gregory: there one dinosaur is stronger than T-Rex lol. its kinda blue color skin, it was called the beast of the beast valley.

[brittle root]

Side note, I unironically wonder how insane we can get this to become lol

[trim cave]

Im surprised there isn't a rule against rping

[placid wind]

I think I will be banned soon do to hate speech, that I am thinking on doing rn

[brittle root]

technically it's not RPing xD Cos where is the RP in saying absurd stuff and claiming that it's something we go?

[wet sable]

Gregory: Evan is offline, im using this account. well we both use a single account

[wheat swallow]

not you

[tired kestrel]

https://www.youtube.com/watch?v=z01-zrs3Y0Q&t=223s heres something to watch

[brittle root]

yes me.

Wait, who are you? 😂

[wheat swallow]

im nothing

[uncut crystal]

so can we download modpacks again?

[brittle root]

im everything. nice to not meet you ;P

[wicked cairn]

My last system i built around AMD (2 years ago i think?)
because the value for the money i got was better by a long way

generally tho intel are more reliable

[wet sable]

Gregory: just wait for annoucnement

[uncut crystal]

ok thx

[wheat swallow]

they already published the announcement

[uncut crystal]

@.@

[brittle root]

Looks like outside of the listed infected files everything else is still clean

[wet sable]

Gregory: there no new annoucement so lets wait for latest news

[wicked cairn]

Yes, please make sure you go over the article linked in #📢︱news and make sure you follow the instructions

[wide nacelle]

I thought it was about GPUs, as Nvidia was mentioned

[tired kestrel]

3 looks like a butt and i cant unsee it

[brittle root]

welp, looks like tomorrow Charred Frontier gets its update lol

[wet sable]

Gregory: i have to go, Glamrock Freddy is calling me.

[wheat swallow]

i like the new nvidia server cpus

[wicked cairn]

I was talking about a whole system, idk what they meants tbh
just gave my 2 cents

[brittle root]

was holding off so I could be sure that our upcoming mod additions wouldn't brick anyone's security lol

[wide nacelle]

Fair be it

[wary bluff]

7 times I sent this

[slim ridge]

i have a quetion, so this incident happend.. i use bitdefender, should it detect if im infected?

[wary bluff]

No

[slim ridge]

?

[wary bluff]

The antivirus won’t detect it until late stage

[modern valley]

For malware yet to be activated : https://github.com/overwolf/jar-infection-scanner
For malware alerdy active : https://github.com/overwolf/detection-tool

[wary bluff]

Use these tools to make sure your safe

[forest sapphire]

so curseforge is generally safe to use again?

[wicked cairn]

Yes, just make sure you follow the intruction attached in the #📢︱news link and you are good t ogo

[gritty glen]

Has the lockdown for mod upload lifted?

[wicked cairn]

Hi, please go to #📢︱news and read the article linked there
You will get all the details there and everything will be more clear 😊

Generally, only .jar files we affected and only for specific mods that are listed in the article

[calm drift]

Selam

[wicked cairn]

https://tenor.com/view/i-am-speed-gif-14031767

[vagrant fern]

goofy ahh nsfw

[minor hatch]

@fierce crypt here's your warning, this is a PG 13 server. do not send nsfw memes.

[swift pulsar]

So am i safe to play now?

[wary bluff]

Appears so go do check up

[slim gust]

There are no cases in which user got infected with the current security measures by CF
although that dosnt mean the problem is 100% solved, but it should be save to play modded Minecraft Rn
if u want to be even saver run the detection tool before u launch any instance of minecraft
the detection tool and a lot more information about that in #📢︱news

[swift pulsar]

How did u type this so fast????

[wild turtle]

copy n paste probably

[gritty glen]

lol, gone'd

deserved 😂

[wild turtle]

i'm happy because no virus in pc

[slim gust]

strg+V xD

[slim gust]

i answered this questen today more then 30 times so i made a text that i can paste

[gritty glen]

Finally seeing mod browser moves with new mod updates again, nice

[swift pulsar]

Oh okay

[minor hatch]

i dont have the patience today lol

[tidal pivot]

The detection tool doesn't seem to work for me, could you lend me a hand and see if there's something wrong?

[slim gust]

sure

[worthy apex]

Is it safe to download mods now?

[slim gust]

There are no cases in which user got infected with the current security measures by CF
although that dosnt mean the problem is 100% solved, but it should be save to play modded Minecraft Rn
if u want to be even saver run the detection tool before u launch any instance of minecraft
the detection tool and a lot more information about that in #📢︱news

[tidal pivot]

I'm not technically literate when it comes to this stuff, I'm just concerned about the safety of my accounts

[sick kite]

I can see the error is telling that the file couldn't be found. From the error message.

[tidal pivot]

I went through this to find the file

[slim gust]

try scaning the whole instance folder at once ...

[tidal pivot]

Same exact error when I remove \bruh\mods

[slim gust]

reinstall the bruh modpack if possible

[tidal pivot]

Delete, and reinstall?

[gritty glen]

Try clone it and scan the cloned one

[wary bluff]

[waxen crow]

I wonder what's going on with minecraft In the past few days

[minor hatch]

nothin much, been pretty quiet ;)

[tidal pivot]

Tried that, didn't work :(

[worthy apex]

The scanner doesn't work on me either, using a 3rd party launcher with mods downloaded from cf

[tidal pivot]

Unfortunate

[harsh gulch]

I have a powershell scanner if anyone wants it

[waxen crow]

I still using curseforge, updating mods and play normally in the past few days

until I just checked informations on internet

[worthy apex]

I'm immune to the malware because my internet is so slow that it'll take years for the virus to activate stage 3

Use this to scan for now, https://douira.github.io/fractureiser-web-detector/

[proud imp]

I'm just sitting here on my Linux playing modded Minecraft and waiting for when I can go back to modifying and updating my server without issues.

I hate the threat of Malware

[north cargo]

does anyone know the best thing to do as a mac user? so far I found (one) mod that has been confirmed

[glacial abyss]

after my exams finish in 2 weeks, im spending 27 hours a day playing minecraft

[proud imp]

I have a friend working on her exams too. Glad I graduated already.

Does anyone know when CurseForge will add Minecraft to the mod launcher for Linux? Last time I checked it still only had World of Warcraft

[worthy apex]

Mac isn't affected, the malware is hardcoded for linux and windows

[wary bluff]

“Free time” the hell is that

[wide nacelle]

so true

[wary bluff]

Factorio player

[minor hatch]

The virus did not target mac users so as far as CF knows, macs are okay, but still keep an eye on #📢︱news

[hearty lantern]

have you played minecraft with that mod?

[wary bluff]

All I know is this is one hell of a headache

[north cargo]

yeah

[minor hatch]

facts

[wide nacelle]

[north cargo]

i just dont want a stage0

[open bramble]

Dawg what did ‘Create: Diesel and Oil Generators’ do to get malware

[north cargo]

like I just want to be 100% safe

[hearty lantern]

remove all your jar files, if you really want to be 1000% safe you can reformat pc

[north cargo]

wdym reformat

[minor hatch]

Yeah i can relate, but right now the malware specifically for linux & windows users, there is no detection tool for mac users because the virus was not targeted nor hardcoded for macs

[wary bluff]

I just want to get ahold of client.jar so I can add it to my collection of viruses stuffed in unassuming flash drives

[hearty lantern]

you wipe pc

[north cargo]

oh 😭

[hearty lantern]

if you're confident enough in your ability to locate anything that could be infected and remove it then you don't have to wipe, up2u

[wary bluff]

A slate so clean all there is is bios

[north cargo]

just... anything JAR.. right?

[wary bluff]

Yep

[hearty lantern]

yea as far as i know it's only JAR files that are affected

[errant patio]

help i loose all modpacks!!

[radiant rose]

Hey, I've got all my files stored on a usb drive. Will the scanner also detect the drive or does it only scan the hdd?

[proud imp]

Hello

[hearty lantern]

i'd guess that it'd scan the usb drive if it's connected

[modern valley]

yes, but it can create non jar files which are also malware

[north cargo]

is there a way for me to wipe everything JAR without losing the names of the mods I have on modpacks?

[north cargo]

huh?

[radiant rose]

i believe if you export your modpacks they'll create a list of jars in a config file without actually packaging all the jar files together

[modern valley]

wait nvm it only creates other jars, dumb

[north cargo]

wait whats this about

[rigid schooner]

The virus would create a file in appdata, and that file would then later be able to infect other Jars

[void atlas]

a wild discomanco

[rigid schooner]

Like a little self-sustaining system

[north cargo]

so am I fine if i delete all my jar files?

[modern valley]

yes'nt

[north cargo]

ah 💀

[modern valley]

For malware yet to be activated : https://github.com/overwolf/jar-infection-scanner
For malware alerdy active : https://github.com/overwolf/detection-tool use this

[rigid schooner]

An infected Jar files makes a .dll file, when then infects more Jar files

[fiery axle]

When 1.20 mc on forge

[rigid schooner]

If the correct parameters are met, that is

[north cargo]

i'm on a mac

[modern valley]

then u cant be infected

[north cargo]

but I still have the files that are stage0

[modern valley]

u can have the malware, but its hardcoded for windows and badly for linux

[north cargo]

i still dont want malware

[rigid schooner]

I don't think the virus can affect OSX, it was only really made for Windows and Linux

[modern valley]

run the first link if u can

[north cargo]

they said it could change in the future

[modern valley]

yea bc its a payload

[obsidian crow]

Hi all. I e got a server for Minecraft 1.19.4 with mods like maps and source packs. I’m having trouble updating my server to 1.20. Any help? I spent all day yesterday trying to get my server updated while still keeping my mods. Any suggestions on what I need to do? Thanks!

[rigid schooner]

Oh right, it's not a dll file, it is a jar file

[north cargo]

so what should I do, i'm trying to run the scanner

[modern valley]

select the .minecraft folder

[north cargo]

delete..?

[modern valley]

select it to be scanned

[rigid schooner]

Aren't the scan tools for windows only?

[modern valley]

uh not sure tbh

[north cargo]

yeah i think 😭

[slim gust]

1.20 is still relatively new so i wouldnt recomend updating to 1.20

[modern valley]

then u cant run it, just delete any mod u recently downloaded

[wild turtle]

why? that makes no sense

[quaint lake]

so is the whole malware situation over?

[north cargo]

what?

[modern valley]

data corrupitons, bugs, bad frames

[wild turtle]

just realized about the mods

[modern valley]

cant*, its not needed to delete other jars since it cant spread on mac

[north cargo]

oh

[rigid schooner]

Do a deep search on your system for "lib.jar" and "libWebGL64.jar". It does attempt to put it in %APPDATA%/Local/Microsoft Edge or /etc/systemd/system, but neither those locations exists on OSX, so I'm not sure it'd be able to function at all

[north cargo]

i really hope thats the case 😭

[modern valley]

yep, its hard coded , shitty worm

[rigid schooner]

Like, depending on how its written, it would check "If its Windows, download X here. If it's Linux, download Y there.", but neither is true, so it should just do nothing

[north cargo]

should

[rigid schooner]

Should, I haven't looked at the source code

[obsidian crow]

Even if the mods I use are updated for 1.20?

[rigid schooner]

Yeah, doesn't even mention OSX at all

[wary bluff]

It’s like beta but worse

How does it escape vms

I heard it escaped a vm

[slim gust]

its just a recommendation u are free to use them but there are probably still lots of problems...

[rigid schooner]

If there's anything anywhere, it should be in /home/, maybe in a /config/data/ folder there, and it should be "lib.jar" to look for.
Do remember to set your system to show all hidden files

[obsidian crow]

I can’t update though. The mods do not work when I update to 1.20. They are in the file. They all say they have been updated for 1.20 by the creators, but once I update, they don’t work. I’ve googled everything I can think of and tried to find a curse forge help chat or email but can’t seem to get to anyone.

[obsidian crow]

This is very frustrating. As I’ve spent a lot of time on my server and really want to incorporate these new additions but I just cannot play the game without my mods. Lol.

[wary bluff]

Wait a week and all the mods will be in beta

[slim gust]

yeah thats why i would stick to 1.19 but if u insist on playing on 1.20 paste ur logs in #🧱︱mc-other-help

[wary bluff]

How the hell did this virus escape a vm

[wild turtle]

i don't find you scary

[tired kestrel]

you're not scary you're spooky

https://tenor.com/view/qtum-spooky-spooky-month-halloween-gif-23553463

[quaint lake]

so it's safe to play modded minecraft now?

alright cool

[tired kestrel]

i can now plae pixelmon

[wet sable]

wait u can run the mod now?

[tired kestrel]

with my dead mods who are mods that uses blood and gore to the player (lol just kidding)

[wet sable]

u mean the Horror Elements mod?

[tired kestrel]

wait wat

[wild turtle]

i will download my spookyjam modpack back now

[tired kestrel]

wear a skid and pump skin

[wet sable]

well Horror Elements mod is decoration for zombie apocalypse or haunted places. it has dead corpse, blood spill, blood sign and just a head with only spinal cord.

[wild turtle]

i can't its just minecraft☠️

[tired kestrel]

gregory, do u see the small vent on the floor? have u ever heard of among us, gregory? You need to vent. i know it will be hard for u to be sus but i know u can do it , gregory

[wild turtle]

why some mods were deleted permanently?

[wet sable]

Gregory: welp, isn't that my Glamdad says

[tired kestrel]

https://tenor.com/view/amongus-sis-long-very-svyer-sus-yellow-imposyer-sus-sussy-baka-gif-23803344

[wet sable]

Gregory: u know glamrock freddy told me to go ot vents since the animatronics almost destroy the door

Gregory: also Vanny is coming

[wary bluff]

[tired kestrel]

https://tenor.com/view/obama-hes-dead-door-kick-im-out-gif-3465918

[wet sable]

Gregory: Vanny can open electric security doors.

[tired kestrel]

https://tenor.com/view/spongebob-rainbow-imagination-meme-idc-gif-17331659

vanny can go suck marios pingas

[wet sable]

Gregory: u want to i run over you by using a go kart?

just like i did on Roxanne

[tired kestrel]

https://tenor.com/view/smg4-mario-laughing-gif-23988493

[rain crest]

I just purged my computer with anything mod related

[tired kestrel]

download viruses too

[wet sable]

Gregory: im out, im calling Evan right now

[rain crest]

No

[tired kestrel]

ok

[wild turtle]

i'm downloading mods again. should i play?

[tired kestrel]

download the latest FLOPPA mod

[wild turtle]

ok

[tired kestrel]

wtf is a caracal

[wild turtle]

Floppa's species

[tired kestrel]

o

[wild turtle]

all infected mods have been scanned and fixed or taken out

[clear dawn]

Yay

[limpid wagon]

ưtf

[wild turtle]

also fractureiser is an very cool villain name. bad it was used for evil purposes

[agile token]

I've got people saying "nothing is safe this kind of malware doesn't go away so quickly"

[wild turtle]

according to the news all mods have been scanned, but i can't prove that so don't trust me 100%

[limpid wagon]

My computer just got botnet when downloading mods on curseforge, it ran into my own router:"(

[wild turtle]

what is botnet?

[limpid wagon]

go to google and learn it, i can't explain it all, it's just a virus that can take over your computer

[agile token]

A botnet is a group of computers an entity has access over

[wild turtle]

oh i understand now

[limpid wagon]

I lost everything :"(

[wild turtle]

i don't think fractureiser can do that, maybe you downloaded an mod infected with an even worse thing

[hoary vigil]

Is it good to download updates from other mods and play mc now, right?

[sullen finch]

I think bro is making up shit

[agile token]

I just don't take people seriously when they call everything a virus instead of using the proper terms, like buddy I'm an expert at this stuff call it a rootkit

[wild turtle]

i think i'm safe to play spookyjam

[proud imp]

Should I do this scan If I did the first and the second one? The powershell/malware thing that they released

[placid socket]

I am not sure but i dont think you do

[wild turtle]

i recommend to do this scan, it scans stage 0 of the fractureiser

[placid socket]

well that changes things

[proud imp]

I deleted MC and curseforgz what Should I scan then @wild turtle

[sullen finch]

especially dude saying he lost everything and a virus infected his router from a fucking mod

[limpid wagon]

I need help, it's still in my secondary laptop lmao

[agile token]

Exactly

[wild turtle]

nothing. but if you are afraid of an virus follow the guide on hackmd and on the curseforge support, it will help you to find if there is an virus such as an microsoft edge (the real is microsoftedge)

i need to play with my friend bye

[agile token]

I mean the real Microsoft edge is malware to be fair

[proud imp]

I did the hackmd /curseforge but not the jar scan

[proud imp]

Fr

[limpid wagon]

Does curseforge have a flaw that they don't detect?

[agile token]

For once I can't go "haha Linux W windows L" because this is a mod site for a Linux game

[real jewel]

what different between the detection-tool-console-0-0-2-win.exe and the detection-tool-0-0-2-win.exe?

[limpid wagon]

idk

[agile token]

One is a terminal the other is a gui

[real jewel]

so i use either one is ok?

[placid socket]

Guys, will it be enough if i only scanned the Atlauncher folder in jar scanner? I only use Atlauncher

[agile token]

Can you use a terminal? If not then use the other one

[real jewel]

the gui one is fine , but the terminal one i open it and it close

[limpid wagon]

How to identify Viruses on linux?

[green sandal]

Look I know it’s not curseforges fault but I might not use them anymore after this fiasco. Like I am scared out of my mind over the Trouble a video game has caused.

[hardy halo]

Is a lot of things fault tbh

[limpid wagon]

The router I'm using is Xiaomi Mini, why is it so free to infiltrate my own router?

It's cr@zy

[green sandal]

Like I have done all the scans and all came up as negative, but I still don’t feel safe having anything Minecraft related on my computer

[silent bluff]

shut the butt up

[hollow wadi]

me too

[agile token]

Are you even on Linux?

[green sandal]

Am I safe? All the scans have been completed and I haven’t even opened curseforge or Minecraft, but can I still get the malware?

[dusty river]

Does the virus work on windows 11?

[limpid wagon]

Yes, I'm running linux on a laptop right now, but everything is disabled, nothing can be done.

[limpid wagon]

Virus, of course it will run from win xp to win 11

[dusty river]

Ye that’s what I thought

[lost wyvern]

yo guys

[dusty river]

I was hoping I was wrong

[agile token]

If you didn't have anything malicious at all then you're fine

[lost wyvern]

can i install better minecraft fabric bmc1 ? or is it infected too

[green sandal]

Like all the scans say there is nothing

[tired kestrel]

what if a discord predator was in this server 😱

[dusty river]

There probably is a few

[agile token]

Then you're probably fine

[tired kestrel]

you mean. A FEW PREDATORS?!

[dusty river]

Ye or more idk

[tired kestrel]

If i see a predator i would report to mods

[agile token]

If your system is unrecoverable just reinstall, I don't know how you think your router is also infected though

[hasty locust]

So which mods had the viruses?

[green sandal]

The movie is pretty good. 8.5/10

[dusty river]

U can’t just identify predators like that, for all ik ur a predator

[limpid wagon]

I don't know if it's serious, it seems that my keyboard is completely disabled, can't get into bios to reinstall, even linux itself can't do anything when entering

[tired kestrel]

I am not a discord predator. because i do not want to date anyone my age or under yet

[dusty river]

[limpid wagon]

At that time, I downloaded some modpacks and received a warning from avast, but I was also subjective and didn't care about it, when I installed it by tomorrow morning, everything was lost, both my linux laptop as well as my computer brick.

[tired kestrel]

i wouldnt do those things that the predators do.

[dusty river]

Yet lmao

[tired kestrel]

Please.. just believe me

[dusty river]

[green sandal]

Thank you everyone for the help. I am now going to sleep

[limpid wagon]

Luckily my bank account wasn't lost because they didn't have a pin

[tired kestrel]

https://tenor.com/view/hella-sus-among-us-imposter-impostor-digibyte-gif-19824591

[agile token]

Bro a Minecraft mod isn't going to go through your network and kill a Linux system just like that

[dusty river]

[tired kestrel]

theres predators among us. and its definitely not me

[real jewel]

LOL

[wide nacelle]

Im unsure of why you made the beginning statement, but to say “anything can happen” and then “not me” is antithetical regardless of your stance

[tired kestrel]

okay.

[dusty river]

It’s @narrow fiber he’s a predator

[limpid wagon]

I don't know what to do anymore, but I don't understand why my wifi router is bricked, so is my laptop, I brought my laptop to the shop for them to fix, and the router I feel its rom and boot is lost completely

[tired kestrel]

are you randomly accusing someone or

i kinda want proof

[dusty river]

No he’s 100% a predator

[limpid wagon]

My windows computer has been replaced with new windows, and I wonder if it runs on android?

[dusty river]

Okay I’ll send proof (very strange)

This is him

[wide nacelle]

Are you talking about fratureiser? Affecting android and your router?

[tired kestrel]

what does he mean by "it"

[agile token]

That's exactly what he's saying, he makes no sense

[dusty river]

Idk that’s for you to find out

[limpid wagon]

By no means can the frameiser be propagated to android and run it, and my router itself could be because of it.

[tired kestrel]

wait a second. does he mean his ding dong?

[dusty river]

Idk @narrow fiber respond

[wide nacelle]

I mean, that’s not to say it hadn’t affected his laptop or pc (I’m trying to understand if they have both), but yeah I’m not following

[agile token]

He apparently has a Windows PC that got completely fucked by Fratureiser, then passed to his router and erased it's bootloader, and has now bricked a Linux system

[wide nacelle]

If you’re saying your router is of its own accord sending malicious data from itself I don’t believe that that is correct

[proud imp]

Now his pc has a fractureiser/windows hybrid baby

[jaunty surge]

Is modded safe to play again?

[agile token]

Windows is more malicious than Fractuseiser

[wide nacelle]

Fractureiser OS

[wide nacelle]

I don’t want to instigate anything, but I assume that’s a joke

[limpid wagon]

I downloaded that modpack from my linux laptop, my laptop runs ubuntu, I have a lan cable plugged in, if I say there are 3 routers at home, the router that I am plugging in from my laptop is Xiaomi mini, and the main router is Viettle F606, the router in the living room is TP-LINK, and that xiaomi has been bricked, the other routers are working fine

[agile token]

Oh yeah it's a joke, I indulge in Linux fanboyism for the lols🤣

[weary vault]

hello guys looks like curseforge did something

[limpid wagon]

It may be from the outside environment affecting the xiaomi mini router, I am not sure that the Fractureiser virus can enter my router

[wide nacelle]

It’s unlikely, correct at least I’m unsure how it’d be possible, especially to then transfer to other devices

[proud imp]

You got hacked by Chinese gov

[wary bluff]

[agile token]

It would need to have been coded to do so, we're talking about a Minecraft modpack worm here though, not a state sponsored Malware like Stuxnet

[limpid wagon]

That router of mine has completely turned off security, so it's very possible for it to break in🐧

[wary bluff]

[agile token]

[north cargo]

wait so i cant find it

[wide nacelle]

My understanding of the worm was that it can propagate through any .jar file, which is still more significant than I’ve seen out of this stuff, but certainly not the worst (meaning more than MC)

[north cargo]

what should I do?

[limpid wagon]

And if you say it physically, it's more believable,... so confusing, ignore that@@

[wary bluff]

Format drive for a nuclear option

Or delete system32 that’s always fun

[proud imp]

I got system32.jar on my pc is It normal 😱😱😱

[rigid schooner]

The virus likely doesn't work on OSX at all (since it's not considered an option), so I don't think it can affect you at all

[rigid schooner]

Nah man, gotta rename it system64 to properly upgrade to 64-bit

[limpid wagon]

bruh🐧🐧

[wary bluff]

Lmao

[regal kiln]

do i actually gotta reinstall windows to make sure im safe

[wary bluff]

https://tenor.com/view/top-gear-reliant-robin-jeremy-clarkson-richard-hammond-james-may-gif-25295350

[jaunty surge]

Is it safe to play modded again?

[solar hornet]

is bukkit secure yet?

[proud imp]

SYSTEM32🤮🤮🤮 is for losers

[north cargo]

what should I do to just rid of it anyway

[wary bluff]

Safety is a illusion

[limpid wagon]

can i post pictures here :v?

[jaunty surge]

I’m taking that as a no

[rigid schooner]

If the files are not found anywhere, you're likely not infected

[agile token]

No you should install Temple OS or Hannah Montana Linux for maximum security /j

[tired kestrel]

delete it, and you will be sorry

[wide nacelle]

After checking your system with the checks in #📢︱news , I believe we’ve been allowed

[north cargo]

arent the virus files... somewhere, at least?

[proud imp]

@tired kestrel I'm deleting it , I got system64 from a cool guy on discord

[wide nacelle]

Temple OS

[wary bluff]

For maximum security cut the fiber optic cables to initiate firewall

[tired kestrel]

your computer is gonna get messed up and wont boot

[agile token]

Download more RAM and a new graphics card

[regal kiln]

how do i do a deep search on windows

[limpid wagon]

temple os bruj :v

[proud imp]

@solar hornet what's that bio bruh

[cursive breach]

if the scanner comes clean and doesn't flag any of your mod files, you're fine

[proud imp]

@agile token a cool Russian guy got me a download link

[quaint lake]

man im so happy that the malware situation is over

[solar hornet]

dw abt it

[rigid schooner]

Well, considering how this particular virus is working..
You may have infected files, but they don't have anywhere to place their infection.
It's like a person trying to destroy all Engines, but you're on a bicycle

[limpid wagon]

Does it work like a RAT?

[rigid schooner]

You use the tools from the articles in #📢︱news

[weary vault]

question sooo uhh you basically uhh scan with that powershell/github thing and then youre fine? and if you didnt install one of these mods youre also fine?

[north cargo]

i HAVE a mod that's supposed to be flagged... i'm just on a mac and i'm trying to rid of the virus regardless of whether or not its working

[cursive breach]

if it's flagged, remove it

[agile token]

All hail Megatron

[wide nacelle]

#📢︱news has it listed out

[cursive breach]

just in case they ever develop a version for mac

[rigid schooner]

The scan tools are only for windows, and the virus itself only looks for Windows/Linux, and here there is a guy on Mac

[north cargo]

yeah :/

[proud imp]

I can just cut the mf legs

[limpid wagon]

I want to try that .jar file again, does anyone still have it?

[quaint lake]

👍

[regal kiln]

alright, also i watched some videos and almost all of them say to reinstall windows... is it even worth doing that

[tired kestrel]

im thinking this guy had deleted system32 and now his computer wont run

[wary bluff]

Download this cup holder

[proud imp]

I got system64 😎😎😎

[regal kiln]

i got system 128

[limpid wagon]

I'll see what it does with my own ubuntu touch:)

[solemn sandal]

@icy bolt

[weary vault]

yeah i read it, so you basically do this to check again, and then you run this??

[tired kestrel]

thats most likely a virus

[proud imp]

Why Is My username AndiAl?

[rigid schooner]

Considering we now know exactly how the virus works (since its all Java, and Java apps can be pulled apart), it might be overkill

[proud imp]

I'm joking lol

[regal kiln]

ic

[tired kestrel]

do not delete system32 though

because your computer will not boot because of some of the files

[regal kiln]

i deleted system 32 and my computer became 20x faster

[rigid schooner]

But definitely run the scan tools though. The first one looks for the backdoor that the infected files leave behind, and the second one looks for infected files

[proud imp]

I know x)

[north cargo]

are you aware of how I can completely deepsearch a mac ?i assume no

[tired kestrel]

ok

[wide nacelle]

Ye, I believe there’s two checks; one for stages 1-3 to see if the fractureiser has already begun and a stage 0 (dormant) detector to run on your curseforge instance folder to see if they’re safe to run should use both for safety

[glacial robin]

I deleted system 32 and my system boots instantly now! (Before shutting off)

[tired kestrel]

read this please

[rigid schooner]

Not really no, haven't used OSX in 10 years. A google should help you

[proud imp]

Quora 🤮🤮🤮🤮🤮🤮🤮🤮

[wary bluff]

Woosh

[glacial robin]

Please for the love of all that is holy learn to take a joke lmao

[tired kestrel]

yea

[rigid schooner]

https://tenor.com/view/you-dense-you-dense-motherfucker-motherflocker-you-dense-motherflocker-gif-17518444

[weary vault]

ok i ran that powershell/github thing already for like 3 times, but i will check with the dormant thing, thx again to make things clear

[tired kestrel]

okay and?

[wide nacelle]

[north cargo]

sorry

[restive fable]

will better mc ever be safe to use again?

[wary bluff]

https://media.discordapp.net/attachments/1087778021341134895/1114446232555880448/image0.gif

[rigid schooner]

and nothing, now excuse me while I upgrade my Windows to 64-bit by renaming it to System64

[wide nacelle]

not you dw

[rigid schooner]

That wasn't for you

[north cargo]

ah

[trail nova]

see #📢︱news for a summary of the malware issues and ways to scan existing files you have already downloaded previous to today

[north cargo]

what should I do though?

[rigid schooner]

Yeah, we're trying to figure out if there's a case for OSX users

[proud imp]

X86 should be even better , bigger numbers=best @rigid schooner

[trail nova]

it was always a dump of mods with no customizations beyond that so...

[north cargo]

i am very aware it doesnt affect osx

but it may and i'm trying to figure out how to remove it in case its updated to do so

[rigid schooner]

Yeah, so there's really nothing for you to do. It never had a chance to install the backdoor

[north cargo]

damn so i just do nothing 💀

[wary bluff]

Wow insulting you “competitors”

[warped cosmos]

Help i have a little problem, im playing the UniversIO and i have this on my screen (its my inventory), how can i remove it?

[wide nacelle]

I don’t believe we have a way of doing that besides potentially the stage 0 scanner, if that

[north cargo]

the scanner doesnt work on mac

[wary bluff]

Anyways idiocy

[rigid schooner]

He would have to download a new infected mod that works on OSX, which then could leave a backdoor somewhere

[limpid wagon]

Does anyone still have the malware mods?

[north cargo]

i think i do

[rigid schooner]

https://github.com/fractureiser-investigation/fractureiser/blob/main/decomp/Utility.java
If its for the sake of reading it

[wary bluff]

I probably have stage zero

[north cargo]

i have a version of dungeons arise i downloaded before the announcement

[wide nacelle]

I read the concern as “what if it learns to affect OSX,” effectively, which is a valid concern if you don’t understand it’s nature

[wary bluff]

Have yet to check

[quaint lake]

but yeah it's safe to play modded minecraft now right?

[flat forge]

hey im new What do the malware mods do?

[north cargo]

that is my concern yes

[limpid wagon]

Thanks, I will try it on vmware

[north cargo]

i am still scared :(

[wary bluff]

I’ve been downloading mods for a server have yet to actually play

[rigid schooner]

Oh I agree, but given how it works now, it can't affect you now.
If the time comes, there will be guides on how to remove it, like there is with Windows and Linux now

[proud imp]

Anti viruses can detect the malware now right

[wide nacelle]

@north cargo here you go

[rigid schooner]

If it learns to infect OSX, they would have to get a brand new Stage 0 infection that can then plant itself on your system

[north cargo]

i dont really want to wait until my passwords are stolen???

[proud imp]

Anti viruses can detect the malware now right

[wary bluff]

No

[limpid wagon]

I will run this same malware on windows 10 pro, how will it be~

[wary bluff]

I will run this malware In Windows xp

[rigid schooner]

The thing is, the infection itself can not be modified remotely. The infection can leave a wound, that can then modify new infections. But since you're immune to the wound, you're going to be ok

[proud imp]

Fractureiser only becomes a threat when you run its jar right

[rigid schooner]

Yes, but Forge/BukkIt runs all its jar files when it launches

[wide nacelle]

Lmao your pfp

[proud imp]

He's gonna get yo msn@wary bluff

[proud imp]

Im good then

[rigid schooner]

It spreads when you launch your modded client

[north cargo]

is it pointless for me to delete any jar files then, contrary to what other people told me?

i was also suggested a format

[limpid wagon]

Does anyone still have any malware mods, I tried it once, (Wrong language lmao)

[wary bluff]

Me when virus

[rigid schooner]

On Mac, it is basically pointless yeah.
The only "danger" could be if you share the jar files, which then restarts the virus

[proud imp]

We are so fucked

[limpid wagon]

Pojavlauncher will it be affected :v?

[rigid schooner]

All the people saying "FORMAT YOUR HARDDRIVE NOW!" and those that reads "VIRUS" and thinks that formatting is the only option of removal.
Which for bigger viruses is true~..

[proud imp]

This IS a bigger virus

[rigid schooner]

But it doesn't burrow itself deeply, because its made in Java

[north cargo]

well, deleting this "danger" wouldn't be impossible right?

[queen abyss]

is ftb right now safe to use?

[wary bluff]

Format drive NOW !!

[north cargo]

won't deleting the jar files delete the malware

[limpid wagon]

It's not a big virus, for coders, it's just an alum virus~

[rigid schooner]

It will yeah

[wary bluff]

[north cargo]

then isnt it not pointless to delete jar files

[rigid schooner]

It's not pointless to delete the jar files, but for you it's pointless to look around for the infection it could leave behind

[north cargo]

and that's because it cant spread right

[rigid schooner]

It doesn't know how to install itself on Mac, so it just does nothing

[north cargo]

meaning it stays in the mod jar file?

[rigid schooner]

Exactly

[north cargo]

are you 100% certain of this

[wary bluff]

Yes

[glacial robin]

Imagine going through all this effort to target Minecraft modding community

But even you CBA to write stuff for MacOS

[north cargo]

i trust you but i blame you if something happens and it spreads hehe

[eager sedge]

what are the jar files

[wary bluff]

Look at the code like fact check it yourself if you’re so skeptical

[north cargo]

im not a coder :(

[grave knoll]

Then listen to the ppl who are here

[north cargo]

thats what i am doing

[lavish hinge]

me panicking even though i already checked my pc

[wide nacelle]

Java based files Minecraft and many other programs needs to run, simplest explanation

[tropic lagoon]

It's moreso malware than a virus

[wary bluff]

Yeah and we are telling you it’s a windows/Linux virus not Mac OS

[rigid schooner]

We have access to the code of the virus, which basically says "If its Windows do this, if its Linux do that."
It's not a "smart" thing that then tries to figure what to do if it can't do either

[limpid wagon]

Facile?

[wary bluff]

It’s a massive flowchart in code

[wide nacelle]

Same tbh lmao

[wary bluff]

If so then do

[rain crest]

so what mods can i still use?

[eager sedge]

in which folder are they

[rigid schooner]

The code has a Flowchat of 2 options, but you're there in the 3rd option wondering if you've been spotted

[lavish hinge]

i didnt even download any of those mods and im still worried lol

[wary bluff]

[limpid wagon]

lol i'm running it

[wide nacelle]

Most of them. The particular ones to look at for this are the mods folders, but when scanning I recommend finding an overarching parent folder that has everything and scanning that, namely “curseforge/Minecraft/instances”

[warm lynx]

Hi

[restive fable]

is fabric safe?

[warm lynx]

Does anyone know if it’s safe for me and my friends to play bcg + together? I don’t know much about the safety of playing with mods at this point in time…

[wide nacelle]

I’ve always had the “none detected” but still have reservations despite the lack of any known

[rigid schooner]

https://github.com/fractureiser-investigation/fractureiser/blob/main/decomp/Utility.java#L110
https://github.com/fractureiser-investigation/fractureiser/blob/main/decomp/Utility.java#L161
You can see that it does say "if (windows) {do bad stuff" and "if (linux) {do bad stuff", and the next code in line outside of those 2 is a shutdown

[north cargo]

okay so in conclusion, mac users shouldn't have to worry about the malware because:

1. the malware isn't designed for osx and therefore it cannot affect me
2. the malware cannot spread to other files or locations because it is incapable of functioning on an osx

and therefore if I want to get rid of stage0, I am able to simply delete the mod jar files found in the mods folder for curseforge and mc, and this will rid of any threat of the malware going forward, including sharing modpacks, or the mod being able to affect osx in the future. Am I precisely correct?

[limpid wagon]

How to run it >?

[rigid schooner]

You are very correct

[wide nacelle]

That’s the fractureiser code

[worthy loom]

its safe to download and update mods now right?

[warm lynx]

Is anyone free to answer my question?

[rigid schooner]

Or well, you can never save yourself from being affected on OSX in the future, but you would have to download a new malware for that. Like I said, the wound is what makes it change, and you can't get the wound

[limpid wagon]

I'm pretty dumb when it comes to coding and I love playing with malware

[queen abyss]

is ftb safe to use after all of this right now?

[north cargo]

therefore, I should be okay with any distribution of a modpack or use of one myself as long as I replace the jar files for any of the infected mods?

[wide nacelle]

What is bcg?

[wraith wyvern]

dawg i have an infected mod that i played two weeks ago but it was on macos

[rigid schooner]

You would have to compile the Java code, but all services it tries to call has been put offline

[glossy birch]

time to play sky factory 4 the failure of skyblocks

[proud imp]

Delete it now

[worthy loom]

is it safe to download or update mods now?

[wraith wyvern]

already did 🤙

[limpid wagon]

oh

[north cargo]

but deleting the jar files will get rid of it, so I shouldn't have to worry about being affected in the future unless I download something new, right? then isnt that the same as just being careful of installing a completely new malware

[warm lynx]

Big chad guys plus here’s the link: https://www.curseforge.com/minecraft/modpacks/bigchadguys-plus

[north cargo]

btw i'm so sorry that i'm asking for utmost clarity and i'm very thankful people like you are here to help me 😭

[rigid schooner]

Your only worry is sharing it to Windows/Linux users. The mod you have on your system can never affect OSX. It would have to be a new download with a modified virus

[worthy loom]

can anyonw answer my question

[rigid schooner]

CurseForge is done with its scan of all projects, you should be safe

[north cargo]

even if I delete the jar file?

[worthy loom]

ok thx

[warm lynx]

@wide nacelle bcg + is a mod I found that I want to play with a group of friends and it’s really good

[rigid schooner]

If you delete the jar file, you don't have to worry about sharing either

[north cargo]

that's what I was asking, then, so good

[warm lynx]

Does that mean that any old project like a mod pack would be safe to play now?

[north cargo]

i AM completely getting rid of the malware by deleting the jar file on my mac though right

[rigid schooner]

If a new attack happens that can also target OSX, then you'd join the rest of us in that particular attack. For this attack, you're safe.

[wide nacelle]

Im unable to view the mod list for some reason, but if you scan it using whats detailed in #📢︱news and get no malware detected, you should be clear. If you haven’t already downloaded it, that article should also say it’s okay to download i believe

[rigid schooner]

Any modpack that hasn't been updated since end of March 2023 should be safe. Earliest malware found was from mid-April

[wide nacelle]

Yes, short answer

[north cargo]

whew thank god

[limpid wagon]

I need that Mods malware :"(

[north cargo]

and thank you

[wide nacelle]

[warm lynx]

Okay, Tysm for your help guys. And you too @wide nacelle

[north cargo]

uh, one more question- the list of mods on the new curseforge article is complete, right? like, they're certain there's no more mods involved with the malware?

[limpid wagon]

pls:)

i need it

[proud imp]

do I need to worry about the malware if I played better MC Fabric ?

[trail nova]

read the #📢︱news . all found files on the database have been purged. use the scan tool for any files that exist on your computer if you're concerned

[rigid schooner]

Outside what's available at https://github.com/fractureiser-investigation/fractureiser/tree/main, you might be out of luck

[quaint turtle]

yo can anyone help me with this malware thingy, idk if im infected since it says im safe but i can see the malware path in the run app

[wide nacelle]

That is unless a known infected file exists within a user’s mod folder somewhere still

[rigid schooner]

And if they do, they should run the scan tools :V

[north cargo]

i dont doubt that, but for one I can't use the scan tool and for another one of the mods that's apparently effected that I also have on my oxs (dungeons arise) doesn't have an available update so I am curious how that was purged?

[rigid schooner]

As far as I'm aware, they posted an update to the mod that contained the malicious code. That particular version has now been removed

They can't go back and infect previous versions

[trail nova]

osx was never in danger with this - see the article in #📢︱news

[north cargo]

really? i still see it on the curseforge application

[rigid schooner]

That's because Dungeons Arise is a legitimate mod, but a bad versions of it was made

[north cargo]

yes i'm aware but i was still concerned about it due to other things like sharing the modpack or it developing to affect osx, but i think disco has covered me on that already

[quaint turtle]

sorry but i just need some clarification cuz i ran malwarebytes, windows security, malware detection tool and the windows powershell script from the prism website but i still see this?

[rigid schooner]

Don't include the file name in that

[quaint turtle]

mb :(

[brisk heart]

Don’t run that

[quaint turtle]

run what

[rigid schooner]

Run %LOCALAPPDATA%\Microsoft Edge\ - if it opens the Microsoft folder, then you're fine

[limpid wagon]

I don't know how to run it lmao

[north cargo]

?

[quaint turtle]

ok

[trail nova]

run the scan tool linked in #📢︱news . it checks that automatically as well as several other places.

[wide nacelle]

There was likely a more recent one that had the virus. That one is gone now

[quaint turtle]

well i think im fine but imma be sure n change my pass and stuff, and thx for the tip 👍

[lime blade]

it does open microsoft folder, so im safe

[proud imp]

wdym bad version, if I downloaded any modpack such as better mc im prone to the malware ?

[north cargo]

it says it was "fixed" and not purged, though i am curious how that could have been done if the mod wasnt updated?

[rigid schooner]

Many of the infected mods were dummy mods, or fake mods if you will. DungeonsArise is not.
DungeonsArise is a legitimate mod, with the newest version being 1.19.2-2.1.55. When the attackers did, was make a version 1.19.2-2.1.56, and made it include bad code. 2.1.56 has been removed (version numbers made up)

[north cargo]

OH

[quaint turtle]

well nonetheless i hope yall stay safe n stuff

[proud imp]

but when did this whole thing start then

[north cargo]

i'm dumb sorry

[proud imp]

cause I installed the modpack like a week ago

[rigid schooner]

Yeah me neither

[lime blade]

so is that affected to tlauncher, i think yes it affected

[rigid schooner]

Shouldn't use TLauncher to begin with

[rustic pagoda]

what to do when i am affected

[minor flume]

tlauncher is a piracy supporting launcher, we do not provide support for it. Talking about or attempting to get support for it will result in a ban as per our rules. See: #📛︱rules #4

[wide nacelle]

dw, panic and confusion makes sense with stuff like this.

[quaint turtle]

bro tl is spyware lmao

[rigid schooner]

That's like a malware on its own

[north cargo]

wait so I don't have to delete the jar file then

[quaint turtle]

ik some alts but yknow i aint gonna tell you :P

[round raptor]

Thank you peeps at Curse who checked things out and put together tools for the communities to utilize

[rigid schooner]

If you don't have a bad version of the mod, then you don't need to no

[wide nacelle]

^

[quaint turtle]

first of all delete the jar file, if you cant see it enable show hidden files, after that check if you still have the malware with available tools that you can proly find in some yt vids

[steep moon]

So wait, curseforge cleared themselves?

[wide nacelle]

Also true

[restive fable]

is better mc safe now or should i still stay away from it?

[north cargo]

so i'm safe

[rigid schooner]

They removed the bad versions from their website - they can't check your PC for you, that's why we have the scan tools

[rigid schooner]

Would indeed seem so, since the mod is still on CF

[steep moon]

well yeah, but I was about to start building a modpack just before I caught wind, I should be good to do that still?

[rigid schooner]

If you download it now, it's safe. If you have downloaded it within the past couple weeks, there's a tool to scan the mod files

[north cargo]

mkay

[rigid schooner]

If you wish to scan your mod folders, check this out:
https://support.curseforge.com/en/support/solutions/articles/9000228509-june-2023-infected-mods-detection-tool/#Detect-if-you-have-any-dormant-/-other-infected-mods/Jar-files

[arctic forge]

I'm honestly still pissed off I was affected by this it shouldn't have happened in the first place

[limpid wagon]

hmm, empty?

[sudden copper]

Is Curseforge Safe?

[arctic forge]

I'm going to have to go through so much work resetting every single password and my fucking PC

[trail nova]

use the scan tool in #📢︱news

[limpid wagon]

i'm safe~

[steep moon]

whats the last part of that file address?

[rigid schooner]

You may be hit, you should definitely run the scan tools. I wouldn't toy with it TBH

[wide nacelle]

Without scanning, you’re sure?

[rigid schooner]

The files are hidden by default, behind a double "Hide files"

[mental scaffold]

I terminated all my mod packs after it was reported, if we redownload the mod pack, and they don’t have any of the mods listed, are we most likely safe?

[arctic forge]

You guys have to have enable hidden folders on That's exactly what my folder looked like unless you guys have already removed the virus and your detector says you're clean it might be in there

[limpid wagon]

I don't know when it appeared@@

[proud imp]

guys, can I play minecraft now ?

[trail nova]

no files currently on the curseforge database are infected with the malware.

[mental scaffold]

Oh so if I terminated the mod packs, any new ones I downloaded are safe?

[azure wharf]

Can I add my own mod files to aternos forge? And not be limiter to the aternos mods

[restive fable]

is better mc safe now?

[rigid schooner]

%APPDATALOCAL% opens /AppData/Local/, /Microsoft Edge/ attempts to take you to the Microsoft Edge folder, or Microsoft folder if the former doesn't exist.
The real folder for Edge is called MicrosoftEdge (note the space)

[azure wharf]

Ya sure? I downloaded alot of mods but not on the list

[rigid schooner]

They did a 12 hour scan of all their files, they're pretty sure

[wide nacelle]

Scan first with both checks, if you return with a positive case of the malware, then it’s not safe

[limpid wagon]

YO WTF

[wide nacelle]

Otherwise downloading is safe

[limpid wagon]

0KB? My Avast deleted it

[rigid schooner]

Could be why the scan tool didn't detect it, because it's already quaranteened by Avast

[proud imp]

Anyone plays pixel gun 3d?

[limpid wagon]

Why is it running when I just enabled hidden files?

1.1mb => 0Kb

[lime blade]

how do i know if i got affected because my folder its different. C:\Users\name\AppData\Local\Microsoft\Edge

[wide nacelle]

“MicrosoftEdge” is the official browser and “Microsoft Edge” with a space is the malware’s hiding folder

[steep moon]

I had a "microsoft.microsoftedge" folder turns out it was updated recently and it was all cookie updates

[north cargo]

wait is this an infected mod

[steep moon]

no lol, thats just what my folders are named

[limpid wagon]

I think my friend is in danger, because he updated mods since 7/6

[regal kiln]

What happened

[rigid schooner]

Microsoft is a legitimate folder along with all its contents. MicrosoftEdge is a legitimate folder. Microsoft Edge is not.

[lime blade]

But my edge folder is inside on microsoft folder

[rigid schooner]

Doesn't matter, it specifically makes and uses a /Microsoft Edge/ folder

[wide nacelle]

as long as it isn’t “Microsoft Edge” with a space. Recommend running the automatic check anyway in #📢︱news

[rigid schooner]

Just like can be seen in this picture

[lime blade]

ah i see then

[regal kiln]

How do I find something called "Microsoft Edge" to make sure im safe

[limpid dock]

when is the create mod 1.20 coming out

[zinc furnace]

So is it safe to download mods now?

[rigid schooner]

WinKey + R to open the Run window, then put this in %LOCALAPPDATA%\Microsoft Edge\ and press Enter.
If it opens the Microsoft folder, then you're fine

[wide nacelle]

According to curseforge, every download should be clean now, so it should be alright. Though I understand the time frame is a bit scary

[north cargo]

is it clean if it's from last month?

or should i update it to that 6/6

[regal kiln]

so we good?

[north cargo]

wait, i can't anyway nvm

[rigid schooner]

Yep, we good

[lime blade]

yes

but im still scared to play my dawncraft even i know im safe

[regal kiln]

my friend also had this but his microsoft folder had a "crypto" folder

[rigid schooner]

That's an odd one, but seems entirely unrelated to this issue

[regal kiln]

is there anything else i gotta search

[rigid schooner]

Apart from maybe your mods folders with the tool from CF, nope

[steep moon]

Does anyone know if microsoft took care of 1.20?

[wide nacelle]

How do you mean?

[old ferry]

which versions of dungeons arise were affected by this?

[steep moon]

I was informed that that the 1.20 update had affected files

[north cargo]

apparently some new version?

[steep moon]

I can't gaurentee thats true tho, We were all panicking last night

[north cargo]

btw is the mods list for infected mods absolute? is that confirmed to be everything?

[old ferry]

only one?

[north cargo]

whats your version?

[old ferry]

is this version affected by any chance?

[pearl pawn]

is the new jar detector tool safe?

[wide nacelle]

A version now purged from curseforge. If you installed it however, you’ll need to scan for malware with the detector in #📢︱news for activation

[eternal night]

i tryed using the new version of jar malware scanner and it just gives me this error?

[old ferry]

I have verified and nothing came up, check multiple times my pc, nothing.

[gritty fable]

Kinda hilarious how when Microsoft makes people unable to uninstall edge that people now impersonate the Microsoft edge directory because they know people can’t get rid of it 💀

[pearl pawn]

is the new jar checker actually from curseforge or is it a malware?

[azure wharf]

Can I add my own mod files to aternos forge? And not be limiter to the aternos mods

[rigid schooner]

From what I gather, your PC doesn't have high enough version of PowerShell? Which is kinda weird

[steep moon]

if im not mistaken, thats grounds for a class action lawsuit

[north cargo]

does anyone know if visual workbench is affected?

[eternal night]

i got windows 10?

[north cargo]

its made by lunapixel, at least according to curseforge

[limpid wagon]

It's the truth lmao

[gritty fable]

Yeah true but sadly in this world there is no cure for stupidity even in one of the largest companies on the planet

[rigid schooner]

Yeah not a clue TBH. Try CurseForges version instead (I assume that's from Prism's version)

[pearl pawn]

how can i know its dafe?

[old ferry]

My version of when dungeons arise is 1.18.2 - 2.1.50, am I in danger?

[wide nacelle]

The list is in #📢︱news at the bottom of the article, if you’re looking for specific ones. Otherwise, if updating or downloading, it’s all supposed to be safe

[north cargo]

really? it says most of lunapixel studios mods were affected

according to lunapixel's website its one of the mods by them

[wide nacelle]

“Most,” plus it’d be listed in the article if it were.

[north cargo]

okay good

[eternal night]

this is their app?

[north cargo]

uh, doesnt lunapixel have a ton of mods under their name? and according to the post only a few are listed

[steep moon]

It'd be nice to see all the top launchers and mod providers to fight this kind of stuff, I get it microsoft is huge, but I'd say hundreds of thousands of people were affected

[lime gust]

So downloading stuff on curseforge is safe again? 0v0’

[rigid schooner]

Not sure, I'd google the error.

[restive fable]

soo is it safe to download better mc?

[echo mortar]

uh i heard the site had infected mods

[wide nacelle]

Correct, but if they are not listed, Curseforge has determined over the past near 24 hours that it should no longer have malware if it even did

[echo mortar]

how do i check if my pc is infected

[rigid schooner]

Had, indeed. Check #📢︱news

[nova crater]

check #📢︱news and you'll see how

[echo mortar]

ait

[north cargo]

so some of the mods that might have malware werent listed?

[gritty fable]

Would be nice but at the end of the day they could care less about others well beings unless it directly effects them or harms them in some way

[rigid schooner]

The list started as 14-20 mods, and increased to 30 as the scan continued on

[north cargo]

oh

[wide nacelle]

Nono, the ones listed had malware

[rigid schooner]

And indeed, they had malware :P

[steep moon]

Doesn't curseforge make money from mods, or monetization? they could claim that microsoft is ruining profits

[north cargo]

arent there some not listed that also may have had it?

[zinc sierra]

Hey so does this mean we can download better Minecraft as usual and issue is fully fixed and we’re safe?

[gritty fable]

Kinda hard to say really

[wide nacelle]

It’s hard to justify that when Microsoft owns the game

[rigid schooner]

They would have been caught in their site-wide scan

[north cargo]

okay

as long as it's NOT on the list, there's no way it's infrected then

[wide nacelle]

I believe so, yes

[steep moon]

They own the game, not the mods. The mods are completely seperate from what I understand, I could be wrong though

[zinc sierra]

Thank you ☺️

[wide nacelle]

Correct

[pearl pawn]

was RLcraft affected? IDK what mods or plugins does the mod pack have thus im not sure if some elements of it werent on the infected list

[rigid schooner]

Mods are very much in a gray area of Minecraft. I believe that technically Forge and Fabric is kinda not allowed to do what they do? But also are allowed through a loophole or two?

[wide nacelle]

The thing is that CF technically neither owns the mods nor the game itself though Idr understand how it works, but it seems as though the power to profit off of auxiliary properties to another’s property is very muddy

[gritty fable]

They would’ve needed permission to create an API based on closed source code

[azure wharf]

Where is support channels

[gritty fable]

Scroll down

[azure wharf]

Oh discord glitcjed like usual ,didn't show me anything below a certain point,nice

[pearl pawn]

was RLcraft affected? IDK what mods or plugins does the mod pack have thus im not sure if some elements of it werent on the infected list

[steep moon]

Hm, maybe the modlaunchers should implement a waiver type thing for modmakers, and pack authors, it'd save y'alls butts if something like this happens again

[rigid schooner]

Yeah, but the game is Java, and Java can be decompiled. That's how it started. Mojang didn't even release official deobfuscation lists until a few years ago, and even those came with licensing agreements that weren't favourable, so nobody uses them

[wide nacelle]

#📢︱news to scan for malware, otherwise updates and new installs are clean

[gritty fable]

If you are gonna copy and paste the same question go to the support channels

[pearl pawn]

the scan didnt find anything but i dont fully trust it

[haughty oar]

When does the malware date back?

[wide nacelle]

Reinstallation is an option then the new install would be clean, and you could export and reimport your saves

[gritty fable]

Eh I mean the technicalities behind that stuff is weird I don’t think most people knew how it came to be from a legal standpoint

[lime gust]

I did a full reset of my computer and am reinstalling curseforge 0v0 would I need to do any checks?

[rigid schooner]

Yeah, that's kinda why its a gray zone

[eternal night]

their first version works fine second version gives error but i scanned my pc after i played a modpack im safe yea

[rigid schooner]

After a full reset, nah, you should be more than good

[lime gust]

Okay good- thank you 😅

[gritty fable]

Doubt it tbh the only kind of virus that would stay in the event of a pc reset would be those in the bios/uefi which the chances of that are astronomically low

[steep moon]

I didn't see it in my sys 32 folders so you should be good

[lime gust]

That’s good- very relieving :] so I’m good to download mods and mod packs without having to worry about a virus?

[wide nacelle]

Yep

[tawny osprey]

can anyone help me?

[gritty fable]

I’d still be cautious about downloading mods for now but that’s just me

[tawny osprey]

im trying to launch a curse forge modpack minecraft and it says an error msg

[wide nacelle]

At least, wary

[primal thorn]

can any1 help me with checking? i appear to lack a microsoft edge file whatsoever

[lime gust]

Wonderful- thank you :]

[rigid schooner]

Should probably head to #🧱︱mc-other-help, and show the error

[gritty fable]

Well that’s a decent sign at least but for further help scroll down and go to support

[primal thorn]

ok

[rigid schooner]

It's a folder you want to be on the lookout for, but if that's lacking its a good sign

[primal thorn]

ok

[vital garden]

Tbh it says they removed all the affected ones but what if there's more?

[rigid schooner]

Then we have a whole separate problem

[vital garden]

Like sure they got this specific problem but God knows if there's different versions of this

[gritty fable]

It’s a possibility but all we can do now is being cautious about downloading mods and trust the process curseforge is taking to try and prevent it from happening

[rigid schooner]

Its a never ending war. This battle was won for now, but the war goes on

[gritty fable]

That’s if you checked your pc already

[vital garden]

Had we not done that before?

[wide nacelle]

Done what part

[gritty fable]

Wdym exactly?

[hardy halo]

I wouldn’t

[lime gust]

I’m not gonna for a bit Atleast- until we get a 100% clear from curseforge

[vital garden]

The people who downloaded this stuff off course forget assumed they were safe because they trusted curseforge to not let this happen

[hardy halo]

Ye I think waiting for more info good idea

[rigid schooner]

To me, this is a 100% clear

[wide nacelle]

“Similar files”

[gritty fable]

Ofc I don’t 100% trust anything but what else can you do in this situation?

[vital garden]

Wait?

[gritty fable]

Which is literally what I said

[fair sail]

So how long could it be now that we are 100% fine and can play without fear?

[gritty fable]

No one knows really

[south harbor]

is it safe to download mods for 1.20 now?

[tender roost]

As long as you scam before using any mods yes

[vital garden]

Unless all of the people who did this whole thing are like "yeah we failed" I don't think it'll be garuanteed for a while

[rigid schooner]

Is there even a modloader out for 1.20 yet?

[south harbor]

fabric i think

[wide nacelle]

100% isn’t attainable. What is known is that for the most part we are currently, within reason, safe to go about

[tender roost]

Fabric. It updates really fast

[rigid schooner]

Oh right, Fabric is always super fast

[gritty fable]

Fabric is a lightweight api for a reason lol

[restive fable]

is better mc 100% clean now?

[south harbor]

so i should scan my computer with the windows thing before i download?

[tender roost]

After you download before you press play/launch

[wide nacelle]

As curseforge says #📢︱news

[south harbor]

alright, thanks

[hardy halo]

4 sentences doesn’t inspire a lot of confidence

[fair sail]

Yeah but the risk is high to get one still

[hardy halo]

Aigh I see the update nvm

[empty root]

this whole thing gave me a crazy idea, what if someone could write a program that could detect suspicious or malicious activity from other programs and inject a, er, "false flag" error that would safely crash the suspicious program?

[proud imp]

💀

[wide nacelle]

As it is when you install anything anywhere. Downloading google chrome may have a virus, that’s just how that goes

[vital garden]

Can I get some context

[proud imp]

i called him buddy

[fair sail]

i delet yesterday cruse forge because of fear... When i download it again now could i get anything?

[nimble perch]

W google chrome

[hardy halo]

I mean you should expect minecraft mods from something like curseforge to be safe 🤣 what’s the point of the platform rly

[rigid schooner]

https://tenor.com/view/hacker-typing-hacking-computer-codes-gif-17417874

[proud imp]

in #🧱︱mc-other-help

[gritty fable]

I mean it’s not an awful idea but you would also have to account for false positives as well especially if this kind of design philosophy was used for a software for any file

[tender roost]

No because only the mods the had were infected.

[wide nacelle]

Nono, sorry i understand my lack of directness, I meant it’s extremely unlikely to get the malware

[wide nacelle]

and it was rectified

[tender roost]

You also have to run Minecraft before the virus can do it’s thing

[nimble perch]

Time to play roblox ig

[restive fable]

should i run the detector before launching minecraft?

[tender roost]

Yes

[fair sail]

Yeah i search the saved files from the cruseforge folder

where my saved files are and the mod packs there was nothing found..

But im still scared to play minecraft now 😢

[wide nacelle]

If it’s new, it shouldn’t be necessary, but to be safe, sure

[nimble perch]

Don't open Minecraft for the meantime

[wide nacelle]

[keen nova]

Man, I'm tired of having to search every single jar file. I'm just gonna toss my CPU into a bonfire

[wide nacelle]

You don’t have to. Scan your instance folder to scan it all at once

[tender roost]

You don’t search each jar file one at at time lol

[gritty fable]

I know it’s been said not to open Minecraft at all but for the majority of people that’s a tad bit overkill in my opinion

[empty root]

there's a few obvious things that I think would be easy to check for, programs that aren't part of the os making edits to key os files, for example.

[tender roost]

As long as you scam before you play you should be good.

[keen nova]

Could you explain what an instance folder is like I'm 5 and my mom just left my at the preschool for the first time?

[wide nacelle]

Some things can easily falsify permissions for the very same concept though

[tender roost]

The folder on your pc that your launcher stores your modpacks and vanilla instances

[keen nova]

And where exactly is that located?

[tender roost]

Wherever you installed your launcher

[keen nova]

Hmmm yes yes, I forgor 🗿

[rapid marlin]

Could Fractureiser cause boot up problems?

[wide nacelle]

Curseforge creates your modded Minecraft profiles in a folder called “instances” that can be accessed reaching the mods folder on a profile and backing up on the top of the file explorer until you reach “Curseforge/Minecraft/instances” and scan that folder

[gritty fable]

True false positives are a general problem for all AV type programs which is why most programs don’t take drastic measures such as deleting files instantly but instead prompts the user

[nimble perch]

Maybe kids idk

[keen nova]

Thanks

[wide nacelle]

Of course

[empty root]

can I instead explain it to you like you're 14 and wanting to know what this "system32 virus" thing is?

[gritty fable]

Kids yes but realistically a lot of kids probably aren’t tech savvy enough for modding to begin with let alone going into specific launcher directories and finding jar files and such lol

[nimble perch]

Just don't open Minecraft folks, that's it

[keen nova]

Idk what a system 34 is I deleted it when I was installing "free ram"

[wide nacelle]

you’re basically saying “don’t use a computer, ever, it could get hacked”

[nimble perch]

Yes sirr, jk it's for not too tech savvy peeps

[gritty fable]

Welp guess I am moving down to Amish country 👋

[empty root]

good >w<

[vital garden]

A bit extreme I would more so just avoid curseforge for now

[brazen sierra]

Is curseforge safe or are we still in the trenches

[keen nova]

You could become the best oxymoron, tech support Amish

[hardy halo]

Terraria time

[tender roost]

They gave the all clear, the scan finished

[nimble perch]

Sorry lemme rephrase, don't play mods in the meantime

This better? Im bad at phrasing

[rapid marlin]

Could Fractureiser cause startup issues?

[empty root]

it's in the local folder.

[keen nova]

We have yet to take over Constantinople but we have taken the minor provinces

[gritty fable]

“Hello there sir how may I help you with repairing your horse drawn carriage today?”

[wide nacelle]

As the absolute safest option, sure, but of course it should be known that risk is lower, even if not 0, though that’s true for anything at anytime

[gritty fable]

Doubt it it seems to be a spyware like Trojan more than anything from what I know

[vital garden]

I know I saw it, but should other types of viruses pop up, I'm going to personally wait a second since there possibly could be more compromised accounts, and considering all the announcements, I believe at least they could very well adapt to their failure

[nimble perch]

Nice

[keen nova]

I'm also having some problems but just waiting or pressing F2 and exiting fixes it, im like 90% sure it's my outdated graphics drivers

[runic gull]

If I have opened vanilla minecraft using official mc launcher virus could activate itself if there was still mods in mc folder?

[hoary hamlet]

So they've given the all clear to use files on mc now? I'll still check through myself to see if malware is located but just to make sure they have

[gritty fable]

I straight up have not updated any mods/modpacks in like a year I barely ever update mods because most of the time it just breaks things on modpacks and or servers if you don’t know what you’re doing

[wide nacelle]

They state they did, to some varying degree at least

[vital garden]

If you notice tho it says similar files, idk me personally ima wait a sec

[nimble perch]

Does the virus cause my townhall 12 to be destroyed and get 3stars?

[hoary hamlet]

Was it jsut mods or was it data packs as well?

[vital garden]

It gives 3 million power in rise of kingdoms

[wide nacelle]

Well, it says “infected files” and “similar files [also]”

[keen nova]

Yes, my princess towers were instantly destroyed

[old edge]

Man, this shit is crazy

[gritty fable]

Guys the virus stole all my power in rise of kingdoms 😳

[vital garden]

My point is what if the dude simply doesn't make malicious code similar to what it was before

[nimble perch]

This malware said "free robux"

[hoary hamlet]

free roux

[tender roost]

They have implemented more verification to prevent something like this in the future.

[gritty fable]

I made a meme post about this situation on the Minecraft memes subreddit only for it to get like 750 upvotes for no reason

[wide nacelle]

By similar files, I’m sure they mean “embedded malware” and not “the same guy with a different malware”

[vital garden]

What is this verification? Not trying to sound hateful

[keen nova]

Na I love the shade and disrespect the investigation team uses "we have reasons to believe the hacker is inexperience"

[lofty wyvern]

It’s a rat.

[gritty fable]

The investigation team is talking mad shiz

[hoary hamlet]

Tbh i think its better to just used the modpacks and stuff you have already installed untill tommorrow just to make sure something like this doesnt happen again today#

[keen nova]

You gotta say it in a thick Italian accent with mafia movie songs in the background

[gritty fable]

Which literally stands for remote access Trojan 🤣

[wide nacelle]

But also to scan with stuff in #📢︱news to make sure they aren’t compromised if they’re older

[lofty wyvern]

I’ve been in communities where ratting is really common, and I gotta say. This is the closest I’ve ever come to being ratted

[hoary vigil]

Just want to make sure, it's safe to launch minecraft now, correct?

[lofty wyvern]

Diff from spyware

[nimble perch]

My chef was a mafia?

[hoary hamlet]

I've had a very complex scan of the files myself, mine luckily didint have any malware in it

[wide nacelle]

nice! Glad you’re safe

[hoary hamlet]

Fr ty!

[keen nova]

As a god loving freedom spreading merican it's my god given right to call you a communist

[tender roost]

It was a worm though not a rat. Nothing in any of stages showed that it remotely accessed people’s pc.

[nimble perch]

Ain't no way ratatouille is bad

[wide nacelle]

Ratworm

[vital garden]

As an American how the fuck do you LIKE America, I only claim to like it when people from other countries call it bad because haha mine better

[tender roost]

There was nothing that showed it gave the creator access to people’s pc.

[wide nacelle]

Sorry, was showing my disgust at the thought of a Rat-Worm

[gritty fable]

“America is so co-“ looks at New York rn

[keen nova]

Because I'm mexican
MERICA 🔫🔫🔫🦅🦅🦅🦅🇺🇸

[vital garden]

[keen nova]

Ain't nobody gonna defend merica as it's closest neighbor I gotta do smthinf