Overclock.net › Forums › Software, Programming and Coding › Networking & Security › Rainmeter .exe skin virus?
New Posts  All Forums:Forum Nav:

Rainmeter .exe skin virus?

post #1 of 11
Thread Starter 
So I just downloaded a Rainmeter skin called HUD.Vision from Customize.org (it's an .exe file). but it didn't work so I uninstalled it.

Later I heard that .exe rainmeter file contains malware eek.gif. I upload the .exe file to online sandbox but there is no suspicious behavior, a few antivirus detect it as malware though frown.gif

So is my computer infected? Here's the skin @ customize.org
hxxp://customize.org/rainmeter/skins/58074
Old One
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon 64 3000+ Gigabyte GA-K8N51 Sapphire Radeon HD5670 1.85GB 
Hard DriveOptical DriveCoolingCooling
Western Digital WD5000AADS Samsung Super WriteMaster DVD Stock heatsink 2x Arctic F12, 1x Papst 120mm @ 5V 
OSMonitorKeyboardPower
Windows Vista Viewsonic 19" 1680x1050 Generic EnLight 350W 
CaseMouseMouse PadAudio
Cooler Master Elite 335 Microsoft SideWinder X5 Cloth Pad Creative Soundblaster VX 5.1 
  hide details  
Reply
Old One
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon 64 3000+ Gigabyte GA-K8N51 Sapphire Radeon HD5670 1.85GB 
Hard DriveOptical DriveCoolingCooling
Western Digital WD5000AADS Samsung Super WriteMaster DVD Stock heatsink 2x Arctic F12, 1x Papst 120mm @ 5V 
OSMonitorKeyboardPower
Windows Vista Viewsonic 19" 1680x1050 Generic EnLight 350W 
CaseMouseMouse PadAudio
Cooler Master Elite 335 Microsoft SideWinder X5 Cloth Pad Creative Soundblaster VX 5.1 
  hide details  
Reply
post #2 of 11
Do a scan of the file in question online at http://virustotal.com

I don't believe rainmeter is malware, but that skin you downloaded may possibly be.
FreeNAS
(9 items)
 
Beast
(14 items)
 
Alura :)
(11 items)
 
CPUMotherboardGraphicsRAM
Intel Xeon E3-1245 v5 SuperMicro X11SSM-F-O C236 Integrated 2 x 16GB Kingston ValueRAM ECC KVR21E15D8/16 
Hard DriveCoolingOSPower
5 x 8TB Seagate IronWolf Pro in ZF2 Array CoolerMaster Hyper 212 Evo FreeNAS 11 EVGA SuperNOVA G2 550W Gold 
Case
Fractal Design Node 804 
CPUMotherboardGraphicsRAM
i7 4790k Asus Z97 Pro WIFI-AC Sapphire Nitro Radeon R9 Fury Tri-X OC+  G.Skill 4 x 8GB F3-2133C9D-16GXH 
Hard DriveOptical DriveCoolingOS
2 x Intel 730 480GB SSD in RAID 0 Asus DRW-24B1ST/BLK/B/AS Noctua NH-D15 Winblows 10 Pro x64 
MonitorKeyboardPowerCase
Pixio PX277 Logitech G510 Seasonic SS-660XP2 Fractal Design R4 Blackout 
MouseMouse Pad
Logitech G500 Xtrac Ripper 
CPUMotherboardGraphicsRAM
i5 2500k Asus P8Z68-V Pro MSI R7970 Lightning BE 2 x 4GB G.Skill Ripjaws 2133mhz 
Hard DriveOptical DriveCoolingOS
Mushkin Enhanced Chronos 240GB and WD Black 1TB Asus DRW-24B1ST Cooler Master Hyper 212 EVO Windows 7 Ultimate x64 
MonitorPowerCase
Hannspree 24 inch Thermaltake Tough Power TP-750P 750W Gold Cooler Master HAF 932 
  hide details  
Reply
FreeNAS
(9 items)
 
Beast
(14 items)
 
Alura :)
(11 items)
 
CPUMotherboardGraphicsRAM
Intel Xeon E3-1245 v5 SuperMicro X11SSM-F-O C236 Integrated 2 x 16GB Kingston ValueRAM ECC KVR21E15D8/16 
Hard DriveCoolingOSPower
5 x 8TB Seagate IronWolf Pro in ZF2 Array CoolerMaster Hyper 212 Evo FreeNAS 11 EVGA SuperNOVA G2 550W Gold 
Case
Fractal Design Node 804 
CPUMotherboardGraphicsRAM
i7 4790k Asus Z97 Pro WIFI-AC Sapphire Nitro Radeon R9 Fury Tri-X OC+  G.Skill 4 x 8GB F3-2133C9D-16GXH 
Hard DriveOptical DriveCoolingOS
2 x Intel 730 480GB SSD in RAID 0 Asus DRW-24B1ST/BLK/B/AS Noctua NH-D15 Winblows 10 Pro x64 
MonitorKeyboardPowerCase
Pixio PX277 Logitech G510 Seasonic SS-660XP2 Fractal Design R4 Blackout 
MouseMouse Pad
Logitech G500 Xtrac Ripper 
CPUMotherboardGraphicsRAM
i5 2500k Asus P8Z68-V Pro MSI R7970 Lightning BE 2 x 4GB G.Skill Ripjaws 2133mhz 
Hard DriveOptical DriveCoolingOS
Mushkin Enhanced Chronos 240GB and WD Black 1TB Asus DRW-24B1ST Cooler Master Hyper 212 EVO Windows 7 Ultimate x64 
MonitorPowerCase
Hannspree 24 inch Thermaltake Tough Power TP-750P 750W Gold Cooler Master HAF 932 
  hide details  
Reply
post #3 of 11
http://www.virustotal.com/

nao

report back!

EDIT: ninja'd lol
SuperMegaPwnsauce
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4770k Asus Z87-PRO MSI GTX 1080 Gaming X Gskill Ripjaws X 19200 16GB 
Hard DriveCoolingOSMonitor
Samsung 850 EVO 500GB SSD BeQuiet! Dark Rock Pro 3 Windows 10 Home 64Bit  Dell S2716DG 2K 144hz G-Sync 
KeyboardPowerCaseMouse
Logitech G910 Orion Spectrum Seasonic Flagship PRIME TITANIUM 650W Fractal Design Define R5 W/ 3 Phanteks PH-F140S... Logitech G Pro 
Mouse PadAudioAudio
PC Gaming Master Race Glorious XXXL Pad & Razer... Creative Sound Blaster Z & Schiit M&M 2 Uber/Mu... HifiMan HE400i & Antlion ModMic 4.0 
  hide details  
Reply
SuperMegaPwnsauce
(16 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4770k Asus Z87-PRO MSI GTX 1080 Gaming X Gskill Ripjaws X 19200 16GB 
Hard DriveCoolingOSMonitor
Samsung 850 EVO 500GB SSD BeQuiet! Dark Rock Pro 3 Windows 10 Home 64Bit  Dell S2716DG 2K 144hz G-Sync 
KeyboardPowerCaseMouse
Logitech G910 Orion Spectrum Seasonic Flagship PRIME TITANIUM 650W Fractal Design Define R5 W/ 3 Phanteks PH-F140S... Logitech G Pro 
Mouse PadAudioAudio
PC Gaming Master Race Glorious XXXL Pad & Razer... Creative Sound Blaster Z & Schiit M&M 2 Uber/Mu... HifiMan HE400i & Antlion ModMic 4.0 
  hide details  
Reply
post #4 of 11
No. I've used HUD.Vision with no issue. Norton and Windows Security verify it as clean.

On top of that, Customize.org is not a sham site. They have quality control, and offending skins are removed as soon as they're discovered. If you got it from them, it's safe.
post #5 of 11
haha virustotal.com ftw
●๑۩۩๑●
(14 items)
 
  
CPUMotherboardGraphicsRAM
i5 2500K @ 4.4GHz (1.34v) Gigabyte P67A-UD4-B3 Gigabyte GTX 470 SOC @ 825MHz 4GB Corsair Vengeance DDR3 1600MHz (CL8) 
Hard DriveCoolingOSMonitor
Samsung Spinpoint F3 1TB Cooler Master Hyper N520 Windows 7 Ultimate x64 SP1 ASUS VH236H 23" 1080p | 2ms 
PowerCaseAudio
Corsair TX650w (V1) Xigmatek Utgard X-Fi Titanium Fatal1ty 
  hide details  
Reply
●๑۩۩๑●
(14 items)
 
  
CPUMotherboardGraphicsRAM
i5 2500K @ 4.4GHz (1.34v) Gigabyte P67A-UD4-B3 Gigabyte GTX 470 SOC @ 825MHz 4GB Corsair Vengeance DDR3 1600MHz (CL8) 
Hard DriveCoolingOSMonitor
Samsung Spinpoint F3 1TB Cooler Master Hyper N520 Windows 7 Ultimate x64 SP1 ASUS VH236H 23" 1080p | 2ms 
PowerCaseAudio
Corsair TX650w (V1) Xigmatek Utgard X-Fi Titanium Fatal1ty 
  hide details  
Reply
post #6 of 11
Thread Starter 
Quote:
Originally Posted by Dopamin3;13328084 
Do a scan of the file in question online at http://virustotal.com

I don't believe rainmeter is malware, but that skin you downloaded may possibly be.
Quote:
Originally Posted by killeraxemannic;13328085 
http://www.virustotal.com/

nao

report back!

EDIT: ninja'd lol

Some antivirus software detected it as malware frown.gif

http://www.virustotal.com/file-scan/report.html?id=7c6d65ef136f545399f48318e55ea4c7daa80f0b2674706709b19822852625cb-1304154091
Old One
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon 64 3000+ Gigabyte GA-K8N51 Sapphire Radeon HD5670 1.85GB 
Hard DriveOptical DriveCoolingCooling
Western Digital WD5000AADS Samsung Super WriteMaster DVD Stock heatsink 2x Arctic F12, 1x Papst 120mm @ 5V 
OSMonitorKeyboardPower
Windows Vista Viewsonic 19" 1680x1050 Generic EnLight 350W 
CaseMouseMouse PadAudio
Cooler Master Elite 335 Microsoft SideWinder X5 Cloth Pad Creative Soundblaster VX 5.1 
  hide details  
Reply
Old One
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon 64 3000+ Gigabyte GA-K8N51 Sapphire Radeon HD5670 1.85GB 
Hard DriveOptical DriveCoolingCooling
Western Digital WD5000AADS Samsung Super WriteMaster DVD Stock heatsink 2x Arctic F12, 1x Papst 120mm @ 5V 
OSMonitorKeyboardPower
Windows Vista Viewsonic 19" 1680x1050 Generic EnLight 350W 
CaseMouseMouse PadAudio
Cooler Master Elite 335 Microsoft SideWinder X5 Cloth Pad Creative Soundblaster VX 5.1 
  hide details  
Reply
post #7 of 11
Thread Starter 
Quote:
Originally Posted by AdmiralThrawn;13328088 
No. I've used HUD.Vision with no issue. Norton and Windows Security verify it as clean.

On top of that, Customize.org is not a sham site. They have quality control, and offending skins are removed as soon as they're discovered. If you got it from them, it's safe.

Yeah customize.org is a nice site but I'm still a little bit worried because the file was detected by some antivirus software frown.gif
Old One
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon 64 3000+ Gigabyte GA-K8N51 Sapphire Radeon HD5670 1.85GB 
Hard DriveOptical DriveCoolingCooling
Western Digital WD5000AADS Samsung Super WriteMaster DVD Stock heatsink 2x Arctic F12, 1x Papst 120mm @ 5V 
OSMonitorKeyboardPower
Windows Vista Viewsonic 19" 1680x1050 Generic EnLight 350W 
CaseMouseMouse PadAudio
Cooler Master Elite 335 Microsoft SideWinder X5 Cloth Pad Creative Soundblaster VX 5.1 
  hide details  
Reply
Old One
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon 64 3000+ Gigabyte GA-K8N51 Sapphire Radeon HD5670 1.85GB 
Hard DriveOptical DriveCoolingCooling
Western Digital WD5000AADS Samsung Super WriteMaster DVD Stock heatsink 2x Arctic F12, 1x Papst 120mm @ 5V 
OSMonitorKeyboardPower
Windows Vista Viewsonic 19" 1680x1050 Generic EnLight 350W 
CaseMouseMouse PadAudio
Cooler Master Elite 335 Microsoft SideWinder X5 Cloth Pad Creative Soundblaster VX 5.1 
  hide details  
Reply
post #8 of 11
Quote:
Originally Posted by CiX;13328102 
Yeah customize.org is a nice site but I'm still a little bit worried because the file was detected by some antivirus software frown.gif

It seems like they're false positives. See how the majority of them include "generic" in the result? That means it's not something specifically, the AV just is suspicious of it's code. I wouldn't worry about it. If you really want you could post a hijackthis log, then you/I/we can spot out any irregularities.
FreeNAS
(9 items)
 
Beast
(14 items)
 
Alura :)
(11 items)
 
CPUMotherboardGraphicsRAM
Intel Xeon E3-1245 v5 SuperMicro X11SSM-F-O C236 Integrated 2 x 16GB Kingston ValueRAM ECC KVR21E15D8/16 
Hard DriveCoolingOSPower
5 x 8TB Seagate IronWolf Pro in ZF2 Array CoolerMaster Hyper 212 Evo FreeNAS 11 EVGA SuperNOVA G2 550W Gold 
Case
Fractal Design Node 804 
CPUMotherboardGraphicsRAM
i7 4790k Asus Z97 Pro WIFI-AC Sapphire Nitro Radeon R9 Fury Tri-X OC+  G.Skill 4 x 8GB F3-2133C9D-16GXH 
Hard DriveOptical DriveCoolingOS
2 x Intel 730 480GB SSD in RAID 0 Asus DRW-24B1ST/BLK/B/AS Noctua NH-D15 Winblows 10 Pro x64 
MonitorKeyboardPowerCase
Pixio PX277 Logitech G510 Seasonic SS-660XP2 Fractal Design R4 Blackout 
MouseMouse Pad
Logitech G500 Xtrac Ripper 
CPUMotherboardGraphicsRAM
i5 2500k Asus P8Z68-V Pro MSI R7970 Lightning BE 2 x 4GB G.Skill Ripjaws 2133mhz 
Hard DriveOptical DriveCoolingOS
Mushkin Enhanced Chronos 240GB and WD Black 1TB Asus DRW-24B1ST Cooler Master Hyper 212 EVO Windows 7 Ultimate x64 
MonitorPowerCase
Hannspree 24 inch Thermaltake Tough Power TP-750P 750W Gold Cooler Master HAF 932 
  hide details  
Reply
FreeNAS
(9 items)
 
Beast
(14 items)
 
Alura :)
(11 items)
 
CPUMotherboardGraphicsRAM
Intel Xeon E3-1245 v5 SuperMicro X11SSM-F-O C236 Integrated 2 x 16GB Kingston ValueRAM ECC KVR21E15D8/16 
Hard DriveCoolingOSPower
5 x 8TB Seagate IronWolf Pro in ZF2 Array CoolerMaster Hyper 212 Evo FreeNAS 11 EVGA SuperNOVA G2 550W Gold 
Case
Fractal Design Node 804 
CPUMotherboardGraphicsRAM
i7 4790k Asus Z97 Pro WIFI-AC Sapphire Nitro Radeon R9 Fury Tri-X OC+  G.Skill 4 x 8GB F3-2133C9D-16GXH 
Hard DriveOptical DriveCoolingOS
2 x Intel 730 480GB SSD in RAID 0 Asus DRW-24B1ST/BLK/B/AS Noctua NH-D15 Winblows 10 Pro x64 
MonitorKeyboardPowerCase
Pixio PX277 Logitech G510 Seasonic SS-660XP2 Fractal Design R4 Blackout 
MouseMouse Pad
Logitech G500 Xtrac Ripper 
CPUMotherboardGraphicsRAM
i5 2500k Asus P8Z68-V Pro MSI R7970 Lightning BE 2 x 4GB G.Skill Ripjaws 2133mhz 
Hard DriveOptical DriveCoolingOS
Mushkin Enhanced Chronos 240GB and WD Black 1TB Asus DRW-24B1ST Cooler Master Hyper 212 EVO Windows 7 Ultimate x64 
MonitorPowerCase
Hannspree 24 inch Thermaltake Tough Power TP-750P 750W Gold Cooler Master HAF 932 
  hide details  
Reply
post #9 of 11
Thread Starter 
Quote:
Originally Posted by Dopamin3;13328151 
It seems like they're false positives. See how the majority of them include "generic" in the result? That means it's not something specifically, the AV just is suspicious of it's code. I wouldn't worry about it. If you really want you could post a hijackthis log, then you/I/we can spot out any irregularities.

OK, I think I don't have to worry about it anymore smile.gif

Thanks
Old One
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon 64 3000+ Gigabyte GA-K8N51 Sapphire Radeon HD5670 1.85GB 
Hard DriveOptical DriveCoolingCooling
Western Digital WD5000AADS Samsung Super WriteMaster DVD Stock heatsink 2x Arctic F12, 1x Papst 120mm @ 5V 
OSMonitorKeyboardPower
Windows Vista Viewsonic 19" 1680x1050 Generic EnLight 350W 
CaseMouseMouse PadAudio
Cooler Master Elite 335 Microsoft SideWinder X5 Cloth Pad Creative Soundblaster VX 5.1 
  hide details  
Reply
Old One
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD Athlon 64 3000+ Gigabyte GA-K8N51 Sapphire Radeon HD5670 1.85GB 
Hard DriveOptical DriveCoolingCooling
Western Digital WD5000AADS Samsung Super WriteMaster DVD Stock heatsink 2x Arctic F12, 1x Papst 120mm @ 5V 
OSMonitorKeyboardPower
Windows Vista Viewsonic 19" 1680x1050 Generic EnLight 350W 
CaseMouseMouse PadAudio
Cooler Master Elite 335 Microsoft SideWinder X5 Cloth Pad Creative Soundblaster VX 5.1 
  hide details  
Reply
post #10 of 11
Run hijack this and post its log so we can see if it mad any changes to your system its not suppose to make
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › Rainmeter .exe skin virus?