Announcing new way of Analog Obsession

VST, AU, etc. plug-in Virtual Effects discussion
User avatar
thecontrolcentre
KVRAF
31499 posts since 27 Jul, 2005 from the wilds of wanny

Post Sun Feb 23, 2020 6:10 am

I tried again and Defender identified & quarantined 4 Trojans from Harqules ... it also deleted the 64 & 32 bit VST2 files, but not the VST3. Something is very wrong. This has never happened before on my 5 year old PC.

User avatar
jethrobull
KVRAF
2419 posts since 5 Jun, 2011 from Preston, England, UK

Post Sun Feb 23, 2020 6:12 am

thecontrolcentre wrote:
Sun Feb 23, 2020 6:10 am
I tried again and Defender identified & quarantined 4 Trojans from Harqules ... it also deleted the 64 & 32 bit VST2 files, but not the VST3. Something is very wrong. This has never happened before on my 5 year old PC.
Same situ here unfortunately... :?
The inner workings of vurts mind are a force to be reckoned with.
music is a need in my life...yes I could survive without it but tbh I dont know how
myfeebleeffort
https://paulroach2.bandcamp.com/
https://hearthis.at/83hdtrvm/

Vortifex
KVRAF
2492 posts since 1 Sep, 2016

Post Sun Feb 23, 2020 6:16 am

How would it be possible for the files to be infected unless he had done it himself? I don't see why he would do that, are people sure it's not false positives?

User avatar
bmanic
KVRAF
9237 posts since 3 Feb, 2003 from Finland, Espoo

Post Sun Feb 23, 2020 6:19 am

Vortifex wrote:
Sun Feb 23, 2020 6:16 am
How would it be possible for the files to be infected unless he had done it himself? I don't see why he would do that, are people sure it's not false positives?
If it was a false positive, then all my previous downloads from my account of purchased plugins would also have these false positives. They do not.

The current free offerings have the trojans, not the purchased versions.
"Wisdom is wisdom, regardless of the idiot who said it." -an idiot

User avatar
sqigls
KVRAF
4799 posts since 25 Dec, 2004

Post Sun Feb 23, 2020 6:20 am

talk about kicking a guy when he's down.

User avatar
thecontrolcentre
KVRAF
31499 posts since 27 Jul, 2005 from the wilds of wanny

Post Sun Feb 23, 2020 6:25 am

sqigls wrote:
Sun Feb 23, 2020 6:20 am
talk about kicking a guy when he's down.
WTF? He's distributing infected files, whether he knows it or not, and asking for funds via Patreon. He should listen to what's being said here and either fix or remove the downloads. I was planning to do some music today, but instead I'm running a full system scan looking for malware.

Vortifex
KVRAF
2492 posts since 1 Sep, 2016

Post Sun Feb 23, 2020 6:55 am

bmanic wrote:
Sun Feb 23, 2020 6:19 am
Vortifex wrote:
Sun Feb 23, 2020 6:16 am
How would it be possible for the files to be infected unless he had done it himself? I don't see why he would do that, are people sure it's not false positives?
If it was a false positive, then all my previous downloads from my account of purchased plugins would also have these false positives. They do not.

The current free offerings have the trojans, not the purchased versions.
But how would that happen? Would it have to have been intentional on his part, or is there some other process whereby his downloads could unintentionally have become infected? I know very little about software development.

FWIW I scanned the Windows VST versions of SSQ, Sweet Drums, Dynasaur, Fetish, Harqules, Britchannel and Distox with Malwarebytes and Avast, and neither of them found anything. Uploaded to Virustotal and got this https://www.virustotal.com/gui/file/7a9 ... /detection
Last edited by Vortifex on Sun Feb 23, 2020 7:10 am, edited 3 times in total.

heavymetalmixer
KVRian
685 posts since 8 Jan, 2017

Post Sun Feb 23, 2020 7:02 am

It's also very weird that only the 32 bit files got infected, why not the other ones?

User avatar
bmanic
KVRAF
9237 posts since 3 Feb, 2003 from Finland, Espoo

Post Sun Feb 23, 2020 7:04 am

It could be completely accidental if his own computer, where he has packed the ZIP files, was infected. No idea what has happened or why. I'm just putting it out there that the files I've downloaded previously, as a customer from my account, do NOT trigger any antivirus software at all.

As for 32bit files.. I have no idea. People who use 32bit plugins usually run much older systems which are way more vulnerable. Perhaps these trojans target specifically these types of files as they provide better return on investment? No idea.. just speculating here.
"Wisdom is wisdom, regardless of the idiot who said it." -an idiot

User avatar
sqigls
KVRAF
4799 posts since 25 Dec, 2004

Post Sun Feb 23, 2020 7:06 am

thecontrolcentre wrote:
Sun Feb 23, 2020 6:25 am
sqigls wrote:
Sun Feb 23, 2020 6:20 am
talk about kicking a guy when he's down.
WTF? He's distributing infected files, whether he knows it or not, and asking for funds via Patreon. He should listen to what's being said here and either fix or remove the downloads. I was planning to do some music today, but instead I'm running a full system scan looking for malware.
WTF, firstly anti-virus programs are known to report false positives for certain code.
but, more to the point, I'm talking about the general situation he's in. Already suffering and then this happens. Poor dude.
anyways, this IS the internet, so no surprise... i'm unrolling the jump to conclusions mat now, anyone up for a game?

AnalogObsession
KVRist

Topic Starter

479 posts since 3 Oct, 2018

Post Sun Feb 23, 2020 7:16 am

Sorry for this situation.

Just sent ticket to my service provider to understand what's going on.

Cause, i didn't do anything new. No new uploads or not newly installed plugins for website.

I just changed download links on website, quickly. Not special process...

Also, my download links are protected, too.

Will share reply from my service provider.

Sorry...
Last edited by AnalogObsession on Sun Feb 23, 2020 7:18 am, edited 1 time in total.
https://www.patreon.com/analogobsession Support for free VST2, VST3, AU for WIN & MAC

User avatar
thecontrolcentre
KVRAF
31499 posts since 27 Jul, 2005 from the wilds of wanny

Post Sun Feb 23, 2020 7:17 am

sqigls wrote:
Sun Feb 23, 2020 7:06 am
thecontrolcentre wrote:
Sun Feb 23, 2020 6:25 am
sqigls wrote:
Sun Feb 23, 2020 6:20 am
talk about kicking a guy when he's down.
WTF? He's distributing infected files, whether he knows it or not, and asking for funds via Patreon. He should listen to what's being said here and either fix or remove the downloads. I was planning to do some music today, but instead I'm running a full system scan looking for malware.
WTF, firstly anti-virus programs are known to report false positives for certain code.
but, more to the point, I'm talking about the general situation he's in. Already suffering and then this happens. Poor dude.
anyways, this IS the internet, so no surprise... i'm unrolling the jump to conclusions mat now, anyone up for a game?
No jumping to conclusions going on here. I had 4 Trojans identified and quarenteened. I double checked and got the same result so reported it here. It looks like its not just me .

Eauson
KVRian
1212 posts since 9 Jan, 2013 from morf

Post Sun Feb 23, 2020 7:25 am

So his site shows insecure, possibly, with the high demand of free bees that someone took advantage of situation?
Last edited by Eauson on Sun Feb 23, 2020 12:13 pm, edited 1 time in total.
Man is least himself when he talks in the first person. Give him a mask, and he'll show you his true face

User avatar
sqigls
KVRAF
4799 posts since 25 Dec, 2004

Post Sun Feb 23, 2020 7:48 am

thecontrolcentre wrote:
Sun Feb 23, 2020 7:17 am
sqigls wrote:
Sun Feb 23, 2020 7:06 am
thecontrolcentre wrote:
Sun Feb 23, 2020 6:25 am
sqigls wrote:
Sun Feb 23, 2020 6:20 am
talk about kicking a guy when he's down.
WTF? He's distributing infected files, whether he knows it or not, and asking for funds via Patreon. He should listen to what's being said here and either fix or remove the downloads. I was planning to do some music today, but instead I'm running a full system scan looking for malware.
WTF, firstly anti-virus programs are known to report false positives for certain code.
but, more to the point, I'm talking about the general situation he's in. Already suffering and then this happens. Poor dude.
anyways, this IS the internet, so no surprise... i'm unrolling the jump to conclusions mat now, anyone up for a game?
No jumping to conclusions going on here. I had 4 Trojans identified and quarenteened. I double checked and got the same result so reported it here. It looks like its not just me .
it's a shit situation, but we don't KNOW for a fact what's happened.
I've had plugins quarantined on Windows before too, a few times, but every time it's turned out to be false positive.
would be perfectly acceptable for me to join the pack and take strips off the guy, but i post a few words of sympathy and I'M the enemy ?

User avatar
thecontrolcentre
KVRAF
31499 posts since 27 Jul, 2005 from the wilds of wanny

Post Sun Feb 23, 2020 7:59 am

sqigls wrote:
Sun Feb 23, 2020 7:48 am
thecontrolcentre wrote:
Sun Feb 23, 2020 7:17 am
sqigls wrote:
Sun Feb 23, 2020 7:06 am
thecontrolcentre wrote:
Sun Feb 23, 2020 6:25 am
sqigls wrote:
Sun Feb 23, 2020 6:20 am
talk about kicking a guy when he's down.
WTF? He's distributing infected files, whether he knows it or not, and asking for funds via Patreon. He should listen to what's being said here and either fix or remove the downloads. I was planning to do some music today, but instead I'm running a full system scan looking for malware.
WTF, firstly anti-virus programs are known to report false positives for certain code.
but, more to the point, I'm talking about the general situation he's in. Already suffering and then this happens. Poor dude.
anyways, this IS the internet, so no surprise... i'm unrolling the jump to conclusions mat now, anyone up for a game?
No jumping to conclusions going on here. I had 4 Trojans identified and quarenteened. I double checked and got the same result so reported it here. It looks like its not just me .
it's a shit situation, but we don't KNOW for a fact what's happened.
I've had plugins quarantined on Windows before too, a few times, but every time it's turned out to be false positive.
would be perfectly acceptable for me to join the pack and take strips off the guy, but i post a few words of sympathy and I'M the enemy ?
I don't know why you think you are the enemy, and I for one have not torn strip of "the guy" ... I think you need to chill out.

Return to “Effects”