That post seems to be missing.

fourohfour 105 points 3 years ago

It's even worse apparently. Apparently someone looked at where the coins are going, and the coins are going to the 1337x admins, and the uploader is just getting a cut of those coins. Which explains why the admins are unlikely to really care because they're profiting off their users.

I have severe trust issues with any kind of pirated software so I basically never download it as a result, and shit like this is why. Even private trackers and "trusted" groups aren't enough for me to download most software.

path: 0 2116342, hotness: undefined, score: 105, children: 12

Steeve 28 points 3 years ago

Do you have any evidence of that?

path: 0 2116342 2125452, hotness: undefined, score: 28, children: 1

rmnfxytumavcfdbpce 36 points 3 years ago

path: 0 2116342 2125452 2135571, hotness: undefined, score: 36, children: 0

_comfortablyAverage_ 27 points 3 years ago

can we get some proof? this is really interesting. I'd like to see how they're tracking stuff

path: 0 2116342 2124332, hotness: undefined, score: 27, children: 0

Pulp 12 points 3 years ago

How did they figure that out?

path: 0 2116342 2120338, hotness: undefined, score: 12, children: 8

Shere_Khan 38 points 3 years ago

Crytpo isn't inherently anonymous. you can easily follow coins.

path: 0 2116342 2120338 2120583, hotness: undefined, score: 38, children: 7

Puzzle_Sluts_4Ever 19 points 3 years ago

path: 0 2116342 2120338 2120583 2121167, hotness: undefined, score: 19, children: 5

HelixDab2 4 points 3 years ago

Obligatory plug for Monero.

...Which is a huge fucking hassle to try and use, IMO.

path: 0 2116342 2120338 2120583 2121167 2123351, hotness: undefined, score: 4, children: 4

lemming007 11 points 3 years ago

You can follow the wallet address , but unles you know who the address belongs to, you can't follow it. So we ask again, where the proof that the coins went to site admins?

path: 0 2116342 2120338 2120583 2137367, hotness: undefined, score: 11, children: 0

deluxeparrot 94 points 3 years ago

For gog games you can check the digital signature on the installer to make sure it's legit. It should be signed by GOG.

path: 0 2113854, hotness: undefined, score: 94, children: 0

empireOfLove 72 points 3 years ago

If you aren't scanning every software you download, whether a pirate torrent or normal direct download, that's kinda your own fault

path: 0 2110918, hotness: undefined, score: 72, children: 13

teft 69 points 3 years ago

Motherfuckers out here rawdogging the internet like it's 1998.

path: 0 2110918 2112882, hotness: undefined, score: 69, children: 1

Piecemakers3Dprints 8 points 3 years ago

Even in '98, that was fucking stupid.

path: 0 2110918 2112882 2126450, hotness: undefined, score: 8, children: 0

kniescherz 65 points 3 years ago

To be fair, I cannot remember a software where no anti virus program turned red. Those cracks always look suspicous to the heuristics.

path: 0 2110918 2110959, hotness: undefined, score: 65, children: 4

empireOfLove 23 points 3 years ago

Of course but it's usually pretty easy to filter out the false positives that always appear as a Trojan (because of the file modification payload) vs a crypto miner

path: 0 2110918 2110959 2111035, hotness: undefined, score: 23, children: 1

Graphy 9 points 3 years ago

Do you have a guide or anything I can checkout? I usually google what flags show up and use big name uploaders but never know for sure.

path: 0 2110918 2110959 2111035 2119996, hotness: undefined, score: 9, children: 0

Pulp 5 points 3 years ago

They usually say something generic like HackTool.

path: 0 2110918 2110959 2120384, hotness: undefined, score: 5, children: 0

boonhet 3 points 3 years ago

Agreed, but if it's a GOG release it doesn't need a crack because it never had DRM in the first place.

path: 0 2110918 2110959 2147983, hotness: undefined, score: 3, children: 0

GeekFTW 18 points 3 years ago

Oh 100%. Was a dumb moment where I didn't expect it and didn't bother, and neither did a lot of other people from the looks of it. Good thing is it was something fixable in less than 5 mins and not a bigger problem.

path: 0 2110918 2111367, hotness: undefined, score: 18, children: 2

AceBonobo 8 points 3 years ago

I would completely reformat all affected machines. AVs are not perfect. Yes it sucks, but imagine the consequences of doing any form of banking on an infected machine.

path: 0 2110918 2111367 2119714, hotness: undefined, score: 8, children: 1

GeekFTW 1 point 3 years ago

Amazingly enough this all happened on 2 machines with 2-week-old OS installs so, honestly not a huge hassle to do so lmao.`

path: 0 2110918 2111367 2119714 2138936, hotness: undefined, score: 1, children: 0

realherald 3 points 3 years ago

No downloading much anyways, but if I were to start, how would I go about scanning the files properly? Could you recommend something to read up on the topic?

path: 0 2110918 2118653, hotness: undefined, score: 3, children: 2

Pulp 4 points 3 years ago

For small files virustotal is great

path: 0 2110918 2118653 2120359, hotness: undefined, score: 4, children: 1

realherald 3 points 3 years ago

Thanks, will check out! :-)

path: 0 2110918 2118653 2120359 2138768, hotness: undefined, score: 3, children: 0

eagleeyedtiger 60 points 3 years ago

You shouldn't trust anything uploaded there by IGGGames. They've been caught before adding miners to their files. I downloaded the rune release somewhere else seeing as they were the uploader on 1337x. I only really use 1337x for fitgirl repacks.

path: 0 2113553, hotness: undefined, score: 60, children: 2

Haveanicedayman 16 points 3 years ago

Why not from fitgirl page directly?

path: 0 2113553 2121609, hotness: undefined, score: 16, children: 1

eagleeyedtiger 6 points 3 years ago

I mean I do grab the torrent link from the fitgirl site, but I find the torrent faster to download than the direct download links.

path: 0 2113553 2121609 2123340, hotness: undefined, score: 6, children: 0

HatchetHaro 52 points 3 years ago

Just popping in to say that if you enjoy the game and if you are financially able to, buy the game properly to support the developers, especially Larian Studios.

path: 0 2114789, hotness: undefined, score: 52, children: 1

posedexposed 17 points 3 years ago

If a dev studio should be financially incentivized to keep doing what they're doing, it's this one

path: 0 2114789 2130184, hotness: undefined, score: 17, children: 0

Hextic 48 points 3 years ago

LOL idiots BG3 is DRM Free just get the GOG installer, surely people mirror that shit, I've seent it before.

path: 0 2119282, hotness: undefined, score: 48, children: 1

SolOrion 4 points 3 years ago

There's a whole ass site for exactly that in the megathread.

path: 0 2119282 2137159, hotness: undefined, score: 4, children: 0

AndrewZen 35 points 3 years ago

path: 0 2123380, hotness: undefined, score: 35, children: 9

MonkCanatella 20 points 3 years ago

Yeah the thing is it installs programs that then give themselves access. You can block install.exe all you like, they're way more advanced than that.

path: 0 2123380 2124730, hotness: undefined, score: 20, children: 2

src 7 points 3 years ago

If you have a firewall like Tinywall, you can set it to block all apps from accessing the Internet unless they're explicitly allowed to. Problem solved?

path: 0 2123380 2124730 2146503, hotness: undefined, score: 7, children: 0

AndrewZen 1 point 3 years ago

path: 0 2123380 2124730 2173275, hotness: undefined, score: 1, children: 0

mlg 20 points 3 years ago

I mean

He said it installed separately

So blocking the network for the game or the installer wouldn't achieve anything lol

path: 0 2123380 2125961, hotness: undefined, score: 20, children: 5

AndrewZen 2 points 3 years ago

path: 0 2123380 2125961 2173281, hotness: undefined, score: 2, children: 4

mlg 2 points 3 years ago

I don't run a whole ass DPS firewall for my home network lmao.

Firewall won't do anything if the mining software was made decently well and just hides every connection through outgoing HTTPS.

path: 0 2123380 2125961 2173281 2187697, hotness: undefined, score: 2, children: 3

AndrewZen 1 point 3 years ago

path: 0 2123380 2125961 2173281 2187697 2207791, hotness: undefined, score: 1, children: 2

Madiator2011 34 points 3 years ago

Dont be mad at me but I bought the game from GOG :)

path: 0 2141679, hotness: undefined, score: 34, children: 2

hypna 40 points 3 years ago

I mean, it's an mtx-free, drm-free, full feature game. If BG3 isn't worth paying for, I don't know what is.

path: 0 2141679 2141775, hotness: undefined, score: 40, children: 1

TheMadnessKing 6 points 3 years ago

Yes. If such developers are not awarded then they will also switch to the dark side.

path: 0 2141679 2141775 2150386, hotness: undefined, score: 6, children: 0

Flatworm7591 23 points 3 years ago

I reported it on 1337x earlier today, but they aren't very responsive. Fitgirl has it listed as an upcoming repack, so hopefully not long to wait for a clean copy.

path: 0 2112356, hotness: undefined, score: 23, children: 0

moosetwin 20 points 3 years ago

I opened this post all scared that I might've accidentally downloaded malware and my fuckin' AV alerted

yeah yeah I know piracy and AVs don't generally mix

path: 0 2114797, hotness: undefined, score: 20, children: 2

JiminyCricketz 5 points 3 years ago

I get a notification of malware from that address pretty often, could someone explain what it is?

path: 0 2114797 2122955, hotness: undefined, score: 5, children: 1

smpl 2 points 3 years ago

path: 0 2114797 2122955 2132690, hotness: undefined, score: 2, children: 0

tekeous 11 points 3 years ago

path: 0 2130320, hotness: undefined, score: 11, children: 1

stappern 10 points 3 years ago

path: 0 2130320 2130904, hotness: undefined, score: 10, children: 0

DrManhattan 7 points 3 years ago

Has anyone seen anything on the DODI release or is it clean?

path: 0 2112138, hotness: undefined, score: 7, children: 11

harmonea 12 points 3 years ago

The DODI repack is based on the RUNE release which I believe is clean. Another commenter claims a found Trojan but there are others who found nothing, and imo it's probably just the usual crack shenanigans.

Edit: See replies! It seems there are tainted versions of the repack out there, but there are clean ones too. Remember to keep a critical eye on your sites and uploaders in addition to your release groups. There's a useful link in a reply to me below showing what you might see if you've downloaded a bad one.

path: 0 2112138 2112543, hotness: undefined, score: 12, children: 6

shottymcb 6 points 3 years ago

There's no need for a crack on this game, it's available on GOG which is always DRM free.

path: 0 2112138 2112543 2116263, hotness: undefined, score: 6, children: 0

Makeshift 2 points 3 years ago

it seems like half the people I see who downloaded it say they got a tojan, and half didn't. Could it possibly be triggering only for certain people? perhaps if their specs are good enough for bitcoin mining or not? or maybe just at random? just spitballing here

path: 0 2112138 2112543 2114911, hotness: undefined, score: 2, children: 4

harmonea 2 points 3 years ago

For the RUNE release, it probably has more to do with what AV they're using and how sensitive it is. Cracked games flag AVs all the time, you have to pay attention to what it's alerting you about. If you're being careful and clean about the sites, uploaders, and release groups you trust, that "trojan" is usually nothing more than an injected hook to defeat DRM.

path: 0 2112138 2112543 2114911 2116068, hotness: undefined, score: 2, children: 3

Makeshift 10 points 3 years ago

it's not a false positive people are finding. it's a bitcoin miner called integritycheck.exe

https://www.reddit.com/...

path: 0 2112138 2112543 2114911 2116068 2116437, hotness: undefined, score: 10, children: 2

Makeshift 6 points 3 years ago

There are claims from comments on torrent galaxy that dodis release has the same bitcoin miner:

https://www.reddit.com/...

I hope someone can get to the bottom of this

path: 0 2112138 2114555, hotness: undefined, score: 6, children: 0

Leo 1 point 3 years ago

Dodi also has the gog version below, it doesn't even require an installation

path: 0 2112138 2126303, hotness: undefined, score: 1, children: 0

SilentStorms 1 point 3 years ago

I hope DODI is fine. I'm currently in the middle of installing it...

path: 0 2112138 2112548, hotness: undefined, score: 1, children: 1

DrManhattan 2 points 3 years ago

I looked for this integrity check file and ran the power shell script and I don’t see it listed anywhere on my system’s roaming folder nor in the list of applications with cpu usage.

path: 0 2112138 2112548 2124563, hotness: undefined, score: 2, children: 0

daninet 5 points 3 years ago

On the private tracker I'm at I have already seen a clean mirror uploaded

path: 0 2125384, hotness: undefined, score: 5, children: 0

altima_neo 3 points 3 years ago

isnt malwarebytes kinda crap these days?

path: 0 2114366, hotness: undefined, score: 3, children: 10

godless 14 points 3 years ago

Nah they do a good job. They are having intrusive popups asking you to subscribe to their paid tier for scheduled searches and real time protection, but if you know what you want/need, the free version is alright.

path: 0 2114366 2116942, hotness: undefined, score: 14, children: 0

FeelzGoodMan420 1 point 3 years ago

path: 0 2114366 2119516, hotness: undefined, score: 1, children: 1

altima_neo 1 point 3 years ago

What joke? I didnt make one.

path: 0 2114366 2119516 2122505, hotness: undefined, score: 1, children: 0

pewgar_seemsimandroid -9 points 3 years ago

linux.exe

path: 0 2114366 2114941, hotness: undefined, score: -9, children: 6

Puzzle_Sluts_4Ever 4 points 3 years ago

path: 0 2114366 2114941 2121260, hotness: undefined, score: 4, children: 5

banjoman05 3 points 3 years ago

Works on my system.

path: 0 2114366 2114941 2121260 2123052, hotness: undefined, score: 3, children: 1

Puzzle_Sluts_4Ever 3 points 3 years ago

path: 0 2114366 2114941 2121260 2123052 2123662, hotness: undefined, score: 3, children: 0

smpl 2 points 3 years ago

path: 0 2114366 2114941 2121260 2132841, hotness: undefined, score: 2, children: 0

Mininux 2 points 3 years ago

It doesn't matter, inux does not rely on extensions, so you can name a Linux executable .exe .bin or anything. When I was learning ocaml that's what our teacher was naming his executables.

but plz don't do it it's cursed and I hate it, thank you

path: 0 2114366 2114941 2121260 2126886, hotness: undefined, score: 2, children: 1

pewgar_seemsimandroid 2 points 3 years ago

linux.nuke

path: 0 2114366 2114941 2121260 2126886 2135907, hotness: undefined, score: 2, children: 0

Alextheacceptable 2 points 3 years ago

Is DODI's repack safe?

path: 0 2119217, hotness: undefined, score: 2, children: 0

UntouchedWagons 2 points 3 years ago

I downloaded the RUNE release from TorrentLeech and Windows Defender found a trojan so yeah I'll believe it. I guess I'll wait for a FitGirls repack.

path: 0 2111313, hotness: undefined, score: 2, children: 9

Elegast 5 points 3 years ago

Torrent galaxy rune release. However not seeing any issues? Malwarebytes scans coming up clean. No integritycheck folder in app data. No hidden process running when game running. 🤷‍♂️?

path: 0 2111313 2111769, hotness: undefined, score: 5, children: 0

KitsuneHaiku 5 points 3 years ago

I've had false positives from cracks on TL before, several times. I respect your carefulness with a known problem with another release, though.

path: 0 2111313 2115090, hotness: undefined, score: 5, children: 0

5redie8 1 point 3 years ago

More than likely a false positive- they often show up as Trojans due to the payload. I saw a similar issue from the rune release off of my private tracker.

path: 0 2111313 2140203, hotness: undefined, score: 1, children: 0

hogart 1 point 3 years ago

From TL? Really? That's a surprise I didn't wanna hear! :/

path: 0 2111313 2111465, hotness: undefined, score: 1, children: 2

JelloBrains 2 points 3 years ago

Sadly even with private sites a lot of things are taken from a public source and you occasionally run into this problem. Like some people up their ratios on these sites by using their VPN to get the public torrent and then seeding it back to the private one.

path: 0 2111313 2111465 2113590, hotness: undefined, score: 2, children: 1

Pulp 1 point 3 years ago

As long as the first uploader didn't do it, then that won't cause other downloaders any issues. Torrents always verify the hash is correct and will discard bad data. And TorrentLeech has uploading torrents limited.

path: 0 2111313 2111465 2113590 2120553, hotness: undefined, score: 1, children: 0

nimmo -2 points 3 years ago

Now that's not something I'd have expected. I've never encountered anything like that in the nearly 15-20 years I've been using TL.

path: 0 2111313 2111570, hotness: undefined, score: -2, children: 2

Pulp 1 point 3 years ago

20? Interesting.

path: 0 2111313 2111570 2120567, hotness: undefined, score: 1, children: 1

nimmo 1 point 3 years ago

Just took a look at my profile, registered on 27 June 2006. So it's in my 15-20 year window that I mentioned

path: 0 2111313 2111570 2120567 2145661, hotness: undefined, score: 1, children: 0

ABCDE 2 points 3 years ago

Will we get a Mac version?

path: 0 2132747, hotness: undefined, score: 2, children: 0

thanks for using Leebra!

go to feed...

thanks for using Leebra!

go to feed...