Viruses in Steam version of SoundPackager 10!!

I was first alerted to viruses on my computer when someone tried to access my microsoft account from somewhere in Russia last night. But after removing all the infected files I noticed they had somehow installed themselves in the root folders for Stardock software. After reinstalling SoundPackager 10 from steam however, I noticed three files would download that were infected with malware.

Below is a scan result from ClamWin after a fresh install of SoundPackager 10 from Steam. Can something be done about this?

Scan Started Tue Dec 06 16:04:20 2022 ------------------------------------------------------------------------------- D:\SteamLibrary\steamapps\common\SoundPackager 10\SdAppServices.dll: Removed. D:\SteamLibrary\steamapps\common\SoundPackager 10\SdAppServices_x64.dll: Removed. D:\SteamLibrary\steamapps\common\SoundPackager 10\Stardock.ApplicationServices.dll: Removed. D:\SteamLibrary\steamapps\common\SoundPackager 10\SdAppServices.dll: Win.Malware.Jaik-9979089-0 FOUND D:\SteamLibrary\steamapps\common\SoundPackager 10\SdAppServices_x64.dll: Win.Malware.Jaik-9979089-0 FOUND D:\SteamLibrary\steamapps\common\SoundPackager 10\Stardock.ApplicationServices.dll: Win.Malware.Jaik-9979089-0 FOUND ----------- SCAN SUMMARY ----------- Known viruses: 8645534 Engine version: 0.103.2 Scanned directories: 4 Scanned files: 47 Infected files: 3 Data scanned: 161.15 MB Data read: 72.10 MB (ratio 2.24:1) Time: 57.267 sec (0 m 57 s) Start Date: 2022:12:06 16:04:20 End Date: 2022:12:06 16:05:17 -------------------------------------- Completed --------------------------------------

3,086 views 9 replies
Reply #1 Top

I certainly hope you've notified Steam about this event...which is, I understand, someone hacking your pc via your MS account and inserting malware files in Sound Packager which you obtained from Steam. Is that correct? If so, you should notify MS, as well and probably change your password.

addendum: Your downloads might be getting infected on your machine or through backups.

 

Reply #3 Top

I've gone through and already secured my account, right down to the telemetry, so I'm certain there's no foreign connections going on. However, every time I install this software fresh it downloads these three infected files.

Reply #4 Top

Quoting druss666uk, reply 3

I've gone through and already secured my account, right down to the telemetry, so I'm certain there's no foreign connections going on. However, every time I install this software fresh it downloads these three infected files.
End of druss666uk's quote

Ask Steam to check your and their files. Also, for your own protection do an online multi-scan for viruses.

Here's a link. If you have constant backup, you'll want to scan that, too.

https://www.techsupportall.com/best-multi-engine-antivirus-scanners/

Reply #5 Top

The Av is called ClamWin?

Reply #6 Top


I was first alerted to viruses on my computer when someone tried to access my microsoft account from somewhere in Russia last night.
End of quote
From the same AV program?

False positives are very common amongst major free antivirus, including closed source commercial ones like AVG, Avast, ESET etc. Before you proceed, the first thing you should do is try another AV program. The chances that any file downloaded from a major commercial vendor like Steam, are slim, compared to a small free open source AV program like ClamWin.

Reply #7 Top

Quoting TPScroggins, reply 5

The Av is called ClamWin?
End of TPScroggins's quote
[Link]

Reply #8 Top

Yea i just scanned with AVG and that's not finding anything. I guess i'm quite alarmed with the whole breach in security thing that happened earlier.

Reply #9 Top

I suggested a multiple antiviral engine scan because single engine scans like AVG or ESET, etc. can give false positives or false negatives. A multi-engined scan can give a more trustworthy one.