Thanks to the source code decompiled by Flow I've found out that those nasty .scr viruses use Steam's API call to send messages and spread further.
There's no other exploit allowing that atm so if you want to protect your friends and you don't use it for other purposes add this line to C:\Windows\System32\drivers\etc\hosts\
127.0.0.1 api.steampowered.com
I'm yet to find out how to break the script further without blocking basic Steam functionality and one of us will probably publish some analysis further.
EDIT:
Some tool I made which allows you to whitelist apps to access steamcommunity.com
https://github.com/Kuba77/SteamWall
May conflict if you have many custom rules in the firewall
Thanks to the source code decompiled by Flow I've found out that those nasty .scr viruses use Steam's API call to send messages and spread further.
There's no other exploit allowing that atm so if you want to protect your friends and you don't use it for other purposes add this line to C:\Windows\System32\drivers\etc\hosts\
[code]127.0.0.1 api.steampowered.com[/code]
I'm yet to find out how to break the script further without blocking basic Steam functionality and one of us will probably publish some analysis further.
EDIT:
Some tool I made which allows you to whitelist apps to access steamcommunity.com
https://github.com/Kuba77/SteamWall
May conflict if you have many custom rules in the firewall
or just don't be dumb but cool
or just don't be dumb but cool
FYI you will need to run your editor as administrator to edit the hosts file.
FYI you will need to run your editor as administrator to edit the hosts file.
I've found a way to block sending tradeoffers and everything on Windows too, will post it in a few minutes!
I've found a way to block sending tradeoffers and everything on Windows too, will post it in a few minutes!
This for once is acutally useful for dumb people
This for once is acutally useful for dumb people
Linux users right now
[img]http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg[/img]
perfect_numberLinux users right now
http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)
[quote=perfect_number]Linux users right now
[img]http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg[/img][/quote]
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)
CHERRYperfect_numberLinux users right now
http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)
<3 I know, but I never claimed that there were no viruses - even though linux isn't perfect, the privilege system is better than the alternatives. Besides, the reason we don't have a lot of malware isn't because we're insignificant, but because our users are savvy enough to avoid 90% of what other users may fall for - linux being the predominant server OS.
[quote=CHERRY][quote=perfect_number]Linux users right now
[img]http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg[/img][/quote]
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)[/quote]
<3 I know, but I never claimed that there were no viruses - even though linux isn't perfect, the privilege system is better than the alternatives. Besides, the reason we don't have a lot of malware isn't because we're insignificant, but because our users are savvy enough to avoid 90% of what other users may fall for - linux being the predominant server OS.
perfect_numberCHERRYperfect_numberLinux users right now
http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)
<3 I know, but I never claimed that there were no viruses - even though linux isn't perfect, the privilege system is better than the alternatives. Besides, the reason we don't have a lot of malware isn't because we're insignificant, but because our users are savvy enough to avoid 90% of what other users may fall for.
that's an interesting viewpoint that's very self serving... according to Valve's steam hardware&software survey, 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.
[quote=perfect_number][quote=CHERRY][quote=perfect_number]Linux users right now
[img]http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg[/img][/quote]
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)[/quote]
<3 I know, but I never claimed that there were no viruses - even though linux isn't perfect, the privilege system is better than the alternatives. Besides, the reason we don't have a lot of malware isn't because we're insignificant, but because our users are savvy enough to avoid 90% of what other users may fall for.[/quote]
that's an interesting viewpoint that's very self serving... according to Valve's [url=http://store.steampowered.com/hwsurvey]steam hardware&software survey[/url], 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.
AloSecperfect_numberCHERRYperfect_numberLinux users right now
http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)
<3 I know, but I never claimed that there were no viruses - even though linux isn't perfect, the privilege system is better than the alternatives. Besides, the reason we don't have a lot of malware isn't because we're insignificant, but because our users are savvy enough to avoid 90% of what other users may fall for.
that's an interesting viewpoint that's very self serving... according to Valve's steam hardware survey, 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.
Definitely a valid point, I never disagreed. I was referring more to viruses in general. But lets not turn this thread into a holy war.
[quote=AloSec][quote=perfect_number][quote=CHERRY][quote=perfect_number]Linux users right now
[img]http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg[/img][/quote]
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)[/quote]
<3 I know, but I never claimed that there were no viruses - even though linux isn't perfect, the privilege system is better than the alternatives. Besides, the reason we don't have a lot of malware isn't because we're insignificant, but because our users are savvy enough to avoid 90% of what other users may fall for.[/quote]
that's an interesting viewpoint that's very self serving... according to Valve's [url=http://store.steampowered.com/hwsurvey]steam hardware survey[/url], 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.[/quote]
Definitely a valid point, I never disagreed. I was referring more to viruses in general. But lets not turn this thread into a holy war.
AloSecperfect_numberCHERRYperfect_numberLinux users right now
http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)
<3 I know, but I never claimed that there were no viruses - even though linux isn't perfect, the privilege system is better than the alternatives. Besides, the reason we don't have a lot of malware isn't because we're insignificant, but because our users are savvy enough to avoid 90% of what other users may fall for.
that's an interesting viewpoint that's very self serving... according to Valve's steam hardware&software survey, 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.
You can blame AMD's support for it :D
[quote=AloSec][quote=perfect_number][quote=CHERRY][quote=perfect_number]Linux users right now
[img]http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg[/img][/quote]
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)[/quote]
<3 I know, but I never claimed that there were no viruses - even though linux isn't perfect, the privilege system is better than the alternatives. Besides, the reason we don't have a lot of malware isn't because we're insignificant, but because our users are savvy enough to avoid 90% of what other users may fall for.[/quote]
that's an interesting viewpoint that's very self serving... according to Valve's [url=http://store.steampowered.com/hwsurvey]steam hardware&software survey[/url], 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.[/quote]
You can blame AMD's support for it :D
On the side for me this just says "How to protect yours..." and I was like wtf a thread about condoms?
On the side for me this just says "How to protect yours..." and I was like wtf a thread about condoms?
CHERRYperfect_numberLinux users right now
http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)
Linux users: Edit /etc/hosts instead. Done.
[quote=CHERRY][quote=perfect_number]Linux users right now
[img]http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg[/img][/quote]
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)[/quote]
Linux users: Edit /etc/hosts instead. Done.
MasterKuniCHERRYperfect_numberLinux users right now
http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)
Linux users: Edit /etc/hosts instead. Done.
Except .scr viruses wouldn't work on linux
[quote=MasterKuni][quote=CHERRY][quote=perfect_number]Linux users right now
[img]http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg[/img][/quote]
You're basically the kind of people who make me want to write this sort of stuff for Linux to prove my point which is - there are no viruses for your system because no one cares about it enough, not because it's idiotproof :)[/quote]
Linux users: Edit /etc/hosts instead. Done.[/quote]
Except .scr viruses wouldn't work on linux
perfect_numberExcept .scr viruses wouldn't work on linux
Well yeah, but that's beside the point. My point was any exploit using the Steam API is just as easily countered in Linux as Windows, though the latter is certainly a more high profile target.
[quote=perfect_number]
Except .scr viruses wouldn't work on linux[/quote]
Well yeah, but that's beside the point. My point was any exploit using the Steam API is just as easily countered in Linux as Windows, though the latter is certainly a more high profile target.
rock-linux is for tards
read on Ubuntu :(
[quote=rock-]linux is for tards[/quote]
read on Ubuntu :(
rock-linux is for tards
right because valve isnt building an interface for their console with it
because its for tards
[quote=rock-]linux is for tards[/quote]
right because valve isnt building an interface for their console with it
because its for tards
Can we not just appreciate what cherry is doing without starting some OS elitist bullshit discussion?
Can we not just appreciate what cherry is doing without starting some OS elitist bullshit discussion?
what exactly does this virus do
what exactly does this virus do
perfect_numberAloSecsteam hardware survey, 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.
Definitely a valid point, I never disagreed. I was referring more to viruses in general. But lets not turn this thread into a holy war.
I would say that steam has a fairly high percentage of linux users compared to most other demographics. So I doubt there is any other circumstance where it would be cost-effective to make a Linux virus, regardless of the difficulty.
[quote=perfect_number][quote=AloSec][url=http://store.steampowered.com/hwsurvey]steam hardware survey[/url], 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.[/quote]
Definitely a valid point, I never disagreed. I was referring more to viruses in general. But lets not turn this thread into a holy war.[/quote]
I would say that steam has a fairly high percentage of linux users compared to most other demographics. So I doubt there is any other circumstance where it would be cost-effective to make a Linux virus, regardless of the difficulty.
[quote=perfect_number]Linux users right now
[img]http://img3.wikia.nocookie.net/__cb20130905014158/walkingdead/images/6/68/15160-you-have-no-power-here_w_zps5f66908c.jpg[/img][/quote]
:)
fatswimdudeperfect_numberAloSecsteam hardware survey, 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.
Definitely a valid point, I never disagreed. I was referring more to viruses in general. But lets not turn this thread into a holy war.
I would say that steam has a fairly high percentage of linux users compared to most other demographics. So I doubt there is any other circumstance where it would be cost-effective to make a Linux virus, regardless of the difficulty.
Well, to be fair unix-like OSs hold a very significant market share in webservers, big data, etc; so a successful linux virus could do a lot of damage. But earlier I was trying to make the point that these would not be targeted with simple phishing attempts.
Anyhoo, what does it matter if desktop linux has security by obscurity? Sure a systems engineer may scoff, but the fact remains that my linux box is much less likely to get a virus than my windows one. Besides, It was just a joke - what have we done?
[quote=fatswimdude][quote=perfect_number][quote=AloSec][url=http://store.steampowered.com/hwsurvey]steam hardware survey[/url], 95.49% of all steam users use Windows, while just 1.13% use linux. if I were to code a virus, I would know which OS I'd target.[/quote]
Definitely a valid point, I never disagreed. I was referring more to viruses in general. But lets not turn this thread into a holy war.[/quote]
I would say that steam has a fairly high percentage of linux users compared to most other demographics. So I doubt there is any other circumstance where it would be cost-effective to make a Linux virus, regardless of the difficulty.[/quote]
Well, to be fair unix-like OSs hold a very significant market share in webservers, big data, etc; so a successful linux virus could do a lot of damage. But earlier I was trying to make the point that these would not be targeted with simple phishing attempts.
Anyhoo, what does it matter if desktop linux has security by obscurity? Sure a systems engineer may scoff, but the fact remains that my linux box is much less likely to get a virus than my windows one. Besides, It was just a joke - what have we done?
futurerock-linux is for tards
right because valve isnt building an interface for their console with it
because its for tards
linux confirmed supported by console casuals
[quote=future][quote=rock-]linux is for tards[/quote]
right because valve isnt building an interface for their console with it
because its for tards[/quote]
linux confirmed supported by console casuals
https://github.com/Kuba77/SteamWall
May conflict if you have many custom rules in the firewall
https://github.com/Kuba77/SteamWall
May conflict if you have many custom rules in the firewall
fatswimdudefuturerock-linux is for tards
right because valve isnt building an interface for their console with it
because its for tards
linux confirmed supported by console casuals
????????
[quote=fatswimdude][quote=future][quote=rock-]linux is for tards[/quote]
right because valve isnt building an interface for their console with it
because its for tards[/quote]
linux confirmed supported by console casuals[/quote]
????????
WOO APPLE OS SUKM Y D ICKK
WOO APPLE OS SUKM Y D ICKK