Originally posted over on /r/piracy (https://www.reddit.com/r/Piracy/comments/15itrip/1337x_admins_allowing_bg3_torrent_with_bitcoin/)

It looks like a bitcoin miner was included in the installer, and the admins on 1337x may or may not give a shit apparently. Scanned my pc and my wifes and found the same stuff the others mentioned.

According to the other comments, don’t feel the need to uninstall as the miner was installed separate to the game, just give a Malwarebytes scan to get rid of the junk.

  • Deluxeparrot@feddit.uk
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 year ago

    For gog games you can check the digital signature on the installer to make sure it’s legit. It should be signed by GOG.

  • HatchetHaro@lemmy.blahaj.zone
    link
    fedilink
    arrow-up
    2
    ·
    1 year ago

    Just popping in to say that if you enjoy the game and if you are financially able to, buy the game properly to support the developers, especially Larian Studios.

  • empireOfLove@lemmy.one
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    If you aren’t scanning every software you download, whether a pirate torrent or normal direct download, that’s kinda your own fault

    • kniescherz@feddit.de
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      To be fair, I cannot remember a software where no anti virus program turned red. Those cracks always look suspicous to the heuristics.

      • empireOfLove@lemmy.one
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Of course but it’s usually pretty easy to filter out the false positives that always appear as a Trojan (because of the file modification payload) vs a crypto miner

      • boonhet@lemm.ee
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        Agreed, but if it’s a GOG release it doesn’t need a crack because it never had DRM in the first place.

    • GeekFTW@kbin.socialOP
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      Oh 100%. Was a dumb moment where I didn’t expect it and didn’t bother, and neither did a lot of other people from the looks of it. Good thing is it was something fixable in less than 5 mins and not a bigger problem.

  • fourohfour@lemmy.fmhy.net
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    It’s even worse apparently. Apparently someone looked at where the coins are going, and the coins are going to the 1337x admins, and the uploader is just getting a cut of those coins. Which explains why the admins are unlikely to really care because they’re profiting off their users.

    I have severe trust issues with any kind of pirated software so I basically never download it as a result, and shit like this is why. Even private trackers and “trusted” groups aren’t enough for me to download most software.

    • MonkCanatella@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      Yeah the thing is it installs programs that then give themselves access. You can block install.exe all you like, they’re way more advanced than that.

  • eagleeyedtiger@lemmy.nz
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    You shouldn’t trust anything uploaded there by IGGGames. They’ve been caught before adding miners to their files. I downloaded the rune release somewhere else seeing as they were the uploader on 1337x. I only really use 1337x for fitgirl repacks.

  • Hextic@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    LOL idiots BG3 is DRM Free just get the GOG installer, surely people mirror that shit, I’ve seent it before.

    • harmonea@kbin.social
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      The DODI repack is based on the RUNE release which I believe is clean. Another commenter claims a found Trojan but there are others who found nothing, and imo it’s probably just the usual crack shenanigans.

      Edit: See replies! It seems there are tainted versions of the repack out there, but there are clean ones too. Remember to keep a critical eye on your sites and uploaders in addition to your release groups. There’s a useful link in a reply to me below showing what you might see if you’ve downloaded a bad one.

      • shottymcb@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        There’s no need for a crack on this game, it’s available on GOG which is always DRM free.

  • UntouchedWagons@lemmy.ca
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    I downloaded the RUNE release from TorrentLeech and Windows Defender found a trojan so yeah I’ll believe it. I guess I’ll wait for a FitGirls repack.