{"id":77122,"date":"2014-11-19T14:14:19","date_gmt":"2014-11-19T12:14:19","guid":{"rendered":"http:\/\/onsoftware.en.softonic.com\/?p=77122"},"modified":"2025-07-02T00:20:52","modified_gmt":"2025-07-02T07:20:52","slug":"malware-being-spread-through-steam-chat","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/malware-being-spread-through-steam-chat\/","title":{"rendered":"Malware being spread through Steam chat"},"content":{"rendered":"<p>Right before <strong>Black Friday<\/strong>, traditionally a big day for gaming service <a href=\"http:\/\/steam.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">Steam<\/a>, it&#8217;s suffering from malware being spread through links shared in Steam Chat. The malware is in a .SCR file, which looks like a screensaver.<\/p>\n<p>The file is being shared by chat phishing &#8211; see the image below. A steam user claiming to know you shares a bit.ly link, which leads to a file with an .SCR extension, but installs malware that is able to steal items from your Steam inventory.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-77127\" title=\"Steam Malware\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2014\/11\/steam-malware.png\" alt=\"\" width=\"393\" height=\"348\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2014\/11\/steam-malware.png 393w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2014\/11\/steam-malware-256x226.png 256w\" sizes=\"auto, (max-width: 393px) 100vw, 393px\" \/><\/p>\n<p><a href=\"http:\/\/panda-internet-security.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">Panda Security<\/a> employee Bart Blaze explains on his blog <strong>what to do if you download the malware<\/strong>:<\/p>\n<p>&#8211; Exit Steam immediately<\/p>\n<p>&#8211; Open up Task Manager and find a process called temp.exe, wrrrrrrrrrrrr.exe, vv.exe or a process with a random name, for example 340943.exe<\/p>\n<p>&#8211; Launch a scan with your installed antivirus<\/p>\n<p>&#8211; Launch a scan with another, online antivirus<\/p>\n<p>&#8211; When the malware has been disinfected or deleted, change your Steam password &#8211; if you use the same password for other sites, change those as well<\/p>\n<p>&#8211; Verify none of your Steam items are missing<\/p>\n<p>As the malware is being spread by phishing methods &#8211; essentially users trying to trick you into clicking links, the advice is simple: <strong>do not click on links or accept friend requests from people you don&#8217;t know<\/strong> at all, and certainly don&#8217;t install files from sources you don&#8217;t trust.<\/p>\n<p>Download Steam for <a href=\"http:\/\/steam.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">Windows<\/a> and <a href=\"http:\/\/steam.en.softonic.com\/mac\" target=\"_self\" rel=\"noopener noreferrer\">Mac OS X<\/a><\/p>\n<p><em>Source: <a href=\"http:\/\/www.escapistmagazine.com\/news\/view\/138657-Malware-Disguised-as-SCR-File-Spread-through-Steam\" target=\"_blank\" rel=\"noopener noreferrer\">Escapist Magazine<\/a>, <a href=\"http:\/\/bartblaze.blogspot.ro\/2014\/11\/malware-spreading-via-steam-chat.html\" target=\"_blank\" rel=\"noopener noreferrer\">Blaze&#8217;s Security Blog<\/a><\/em><\/p>\n<h3>Related Stories<\/h3>\n<p><a title=\"Now you can control your music in-game with Steam\" href=\"http:\/\/news.en.softonic.com\/steam-music-player\" target=\"_self\" rel=\"noopener noreferrer\">Now you can control your music in-game with Steam<\/a><\/p>\n<p><a title=\"Steam gets a new personlized Home Page\" href=\"http:\/\/news.en.softonic.com\/steam-gets-a-new-personlized-home-page\" target=\"_self\" rel=\"noopener noreferrer\">Steam gets a new personalized Home Page<\/a><\/p>\n<p><a title=\"Steam beta client now allows simultaneous installations\" href=\"http:\/\/news.en.softonic.com\/steam-beta-client-now-allows-simultaneous-installations\" target=\"_self\" rel=\"noopener noreferrer\">Steam beta client now allows simultaneous installations<\/a><\/p>\n<p style=\"text-align: right\"><em>Follow Jonathan on Twitter: <a href=\"https:\/\/twitter.com\/jonathanriggall\" target=\"_blank\" rel=\"noopener noreferrer\">@jonathanriggall<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Right before Black Friday, traditionally a big day for gaming service Steam, it&#8217;s suffering from malware being spread through links shared in Steam Chat. The malware is in a .SCR file, which looks like a screensaver. The file is being shared by chat phishing &#8211; see the image below. A steam user claiming to know &hellip; <a href=\"https:\/\/cms-articles.softonic.io\/en\/malware-being-spread-through-steam-chat\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Malware being spread through Steam chat&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2019,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-77122","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/77122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/2019"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=77122"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/77122\/revisions"}],"predecessor-version":[{"id":329814,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/77122\/revisions\/329814"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=77122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=77122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=77122"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=77122"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=77122"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=77122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}