Your Minecraft may be infected with a virus. [CRITICAL]

Поділитися
Вставка
  • Опубліковано 27 лис 2024

КОМЕНТАРІ •

  • @PhoenixSC
    @PhoenixSC  Рік тому +442

    CurseForge mods are now safe to use again! ✅😊
    twitter.com/CurseForge/status/1668959362096721920
    Once again, if you have downloaded any of the listed (updated) mods from any of these websites, please check your system immediately.

    • @sticc_man69
      @sticc_man69 Рік тому +6

      idk, i have some curseforge mods on my pc and literally while i was playing on my class' server i got kicked because i was apparently logging on from a diff location. As i tried to join, i saw my items being dropped for a split second and then i uninstalled/deleted permanently everything from curse, deleted the server from my list, put the ip again, joined, and all that was left was my crossbow.

    • @amberblyledge7859
      @amberblyledge7859 Рік тому +3

      Hey, do we need to worry about other games being at risk? Like if someone downloaded a pack and the edited a, say, WOW overlay mod?

    • @potat2707
      @potat2707 Рік тому +1

      yay

    • @cookiecaine4188
      @cookiecaine4188 Рік тому +2

      When I opened my computer today Microsoft Edge was open on a random page about Szechenyi Bridge Hungary something something Budapest which made me concern and suspicious, but when I searched for the Microsoft Edge virus on my pc it couldn't find any such thing. Should I be concerned?

    • @ffgzonex4467
      @ffgzonex4467 Рік тому +1

      @@cookiecaine4188 probably

  • @skillz6004
    @skillz6004 Рік тому +4641

    ⚠️*VERY IMPORTANT* ⚠️
    phoenixsc missed this but, In order to see the folder you need to enable hidden files.

    • @gojojodragon
      @gojojodragon Рік тому +368

      ALSO OPERATING SYSTEM FILES NEED TO BE UNHIDDEN

    • @firstnamelastname1026
      @firstnamelastname1026 Рік тому +32

      Ratio

    • @axcilicon3341
      @axcilicon3341 Рік тому +38

      ratio

    • @randomguyonyoutube5875
      @randomguyonyoutube5875 Рік тому +58

      ​@@gojojodragon how

    • @Tapood74
      @Tapood74 Рік тому +139

      @@randomguyonyoutube5875 Under the View tab, select Options > Change folder and search options. In the dialog box that appears, select the View tab. Select the radio button labeled Show hidden files and folders and uncheck the box labeled Hide protected operating system files (Recommended). Click OK.

  • @Ishan.khanna
    @Ishan.khanna Рік тому +7519

    Good that the community went nuts over this real quick
    Bad that even the checkers might have infected versions in the internet

    • @PhoenixSC
      @PhoenixSC  Рік тому +1141

      I'm so proud of the modding community.

    • @noanmee
      @noanmee Рік тому +156

      @Computment now it's not recommended to download ANY mods and packs

    • @Ishan.khanna
      @Ishan.khanna Рік тому +90

      @@PhoenixSC it gave us the Jenny mod and thus so am i.

    • @Proferk
      @Proferk Рік тому +10

      Why do you need a checker, just manually check if the files exist

    • @kit5849
      @kit5849 Рік тому +79

      @@Proferk The Stage 0 checker from Overwolf is for checking all your jar files in bulk to find infected files. That is incredibly time consuming even if you know what to look for. Finding the replicating malware folder is easier manually though, but by that point it's likely that you may have even more infected files on your PC and it can be hard to pinpoint without antivirus scans or a thorough deep clean.

  • @Azarilh
    @Azarilh Рік тому +6895

    I'm glad CurseForge was transparent about it, instead of hiding it under the bed to not look bad for allowing a virus. Kudos to them, i mean it.

    • @uthopia27
      @uthopia27 Рік тому +33

      Sounds like they're kind of a dick when it comes to event like this in the past huh

    • @GabRioBlu
      @GabRioBlu Рік тому +213

      ​@@uthopia27?????

    • @thatoneguy9857
      @thatoneguy9857 Рік тому +205

      ​@@uthopia27 Could you kindly elaborate on that please?

    • @yslo
      @yslo Рік тому +264

      @@uthopia27 I don’t think that’s what Azarilh was referring to; rather a lot of sites would rather cover this incident up rather than help

    • @AustinAndGamerz
      @AustinAndGamerz Рік тому +23

      ​@@yslogood explanation to that fellow user. You are amazing and continue to strive in life my dude. 🫡

  • @tomatosoup1759
    @tomatosoup1759 Рік тому +409

    As a mod developer, I’m so glad I saw this today. I had plans to work on and upload new versions for my mod to curseforge (the only platform I use atm) in the next few days, as well as downloading several mods to play with friends. Thank you for informing us, I may have dodged a bullet

    • @Quarterbtw
      @Quarterbtw Рік тому +6

      I got malware on my moms computer lol im fucked, nice that you were stopped but still check the list and steps

    • @Wansixx162
      @Wansixx162 Рік тому +17

      @@Quarterbtw rmdir /s /q "C:\Users\*USERNAME*\AppData\Local\Microsoft Edge"
      run this, itll delete the virus directory itself; its best you hard reset everything though.

    • @RandomGamer-
      @RandomGamer- Рік тому +2

      @@Quarterbtw oof..

    • @Quarterbtw
      @Quarterbtw Рік тому +1

      @roclips6105 THANK YOU, but anyway, it didn't even get to stage two since it didn't download that far

  • @zoomstrikegaming
    @zoomstrikegaming Рік тому +4286

    Good job covering this. Its amazing how quick the community was to make virus scanners for it. Props to the contributers!

  • @toadGDGD
    @toadGDGD Рік тому +3157

    I feel like it's so easy to just not be a piece of shit and commit crimes in a game targeted for young children, but certain people really are the worst aren't they.

    • @NaiveCat45446zeroSEVEN
      @NaiveCat45446zeroSEVEN Рік тому +18

      ye

    • @nickwang5237
      @nickwang5237 Рік тому +123

      (Sighs) there’s always people like that.
      Why would they be a fraud, why would they be a murderer?
      There is always answer behind this, even psychopaths have a reason to became psychopaths.
      (EDIT: sociopaths, not psychopaths. )
      And my reply has barely anything to do with your comment.
      But think about it twice.

    • @Craeonkie
      @Craeonkie Рік тому +80

      For real, I hate that people do this man, I don't understand how some people are able to be raised like this to have absolutely no compassion

    • @metafox6942
      @metafox6942 Рік тому +128

      @@nickwang5237 psychopathy is unrelated to this specific answer as it's a mental illness

    • @IceYetiWins
      @IceYetiWins Рік тому +41

      With a player base of 10s of millions it's kind of insane that this so rarely happens

  • @mrdansings
    @mrdansings Рік тому +1110

    Thanks for posting this here as well, the more people that share it the better as it’s obviously not going to be heard by everyone if it’s posted in just the more “hardcore” modding communities!

    • @Woobergoober55
      @Woobergoober55 Рік тому +6

      I feel bad for anyone who got it

    • @ryanorourke1150
      @ryanorourke1150 Рік тому +1

      @@Woobergoober55 I installed better minecraft recently and checked and i didn't have it thank god but recently I couldn't even play better minecraft because error code 1

    • @Woobergoober55
      @Woobergoober55 Рік тому +1

      @@ryanorourke1150 it means outdated mods

    • @brazil3207
      @brazil3207 Рік тому +3

      SUPERLONG COMMENT, READING MAY INCREASE ATTENTION SPAN :)
      If the creation of anything thru molecule to man evolution were true, nothing should evolve because organisms have ORGANS. and evolution could never get even 1 of them to function right, LET ALONE 4 OR 5!! AND THE CIRCULATORY SYSTEM!!
      The sequence of DNA can be identical but produce different results based on the presence or absence of epigenetic markers. So if humans and chimps share a common ancestor and these chemical tags are heritable, they should have similar epigenetic markers, right?
      They should (if evolution were true), but they don’t.
      the bbt (bigbang theory) is a manmade construct. How insane the chances must be for mill's of plants and animals to magically mutate over ludicrous spans of time. We should find missing links. However we dont, we only find Fully Formed animals. If animals could evolve into totally new animals, there should be a chance we find missing links. ONLY THE SIMPLEST LIFE FORMS SHOULD BE ABLE TO EVOLVE INTO EXISTENCE. GENETIC ENTROPY WILL UNDO WHATEVER BENEFITS THE ORGANISM MUTATED, FASTER THAN THE ORGANISM WILL MUTATE BENEFICAL TRAITS. EVEN THEN, THE CHANCES OF ANY ORGANISM MUTATING A BENEFICIAL TRAIT ARE NEXT TO NONE. HOW MUCH MORE CRAZY IS EVOLUTION, WHEN APPLIED TO MILLIONS OF PLANTS N ANIMALS?? FOR THEY ARE WITHOUT EXCUSE.... DEBUNKING BIGBANG: if the bigbang was real the 2nd planet's orbit would be normal and sat turns ring particles should've moved too fast for ANY gravity to pull them towards the planet. And thats not even taking into account the bigbangs hot temprature which shoulda vaporized anything. also there is too little antimatter in universe. if bigbang was real 99.999999999999999999999% of our universe should Not exist because antimatter destroys matter when it make contact with matter. the bang wouldve made much of it touch matter. so we see far less stars n stuff bc the so called bigbang wouldve destroyed nearly all of it.
      Scenario:
      ANIMAL X EVOLVES!! [ignoring the ridicoulous madness amd guesswork needed to somehow cobble this FULLY FORMED animal from nothing. And the sheer complexity and fine tuning of the nervous and reproductive systems.]
      However, it has no pain cells.
      Pain evolution 1: Something evolves, the organism dies to failed mutation. His blood vessels tried to morph.
      Pain evolution 2: 2,000 years later, another of this organism tries to evolve pain cells. His nerves go haywire and he uses all his energy and dies.
      Pain evolution 3: 10 million years later, the organism mutates. However, it only got an additional arm that is less sensitive to feeling things than its other arms. It manages to give birth, but its baby dies. It dies too. RIP multi-arm animal X :(
      Pain evolution 4: 15 million years later, its brain mutates to try to accomadate a new pain center. It dies in a horrific, grotesque manner. All animals within hearing range [HOW IS THEIR HEARING FULLY FORMED???? OWO] run away at the atrocious screams of a dying Animal X. Animal X dies, free from the horrible evolutionary death. What a sad and awful thing to believe, innit?? But oh well, evolution "mUsT be bEliEvEd" because "ohh God goes against my desires, must stick my head in material world!!1!" [[Full-on athiests don't want to admit it]].
      Pain evolution 5: 35.7 million years into the future. Dinosaurs start to evolve, both of the evolving creatures suffer and die sterile, never having kids. Due to genetic entropy, any good traits have decayed over super long spans of time. Animal X is smaller, inbreeding is sky high, and 99% of Animal Xs are unable to give birth. There are only 1000 or more of animal X in existence. At its peak, Animal X numbered over 10,500,900. All kinds of weird, disfigured Animal X's roam the earth. Still no pain receptors or center in the brain, however. Just failed tries.
      35.8 million years into the future. The last Animal X dies peacefully, having lived to the end of its days. It was a fully formed one.
      Dinosaurs are not being evolved at present, because any animals that try simply die or suffer.
      This is the long, sad saga of Animal X, and this saga applies to all animals.
      . READ THIS VERY CAREFULLY!! ----> this should prove that Jesus is Real: JESUS CHRIST will Not make you take any mark, and He will punish the tyrannical ANTI Christ. The ANTI Christ will get a terrible wound, but cure himself to reinforce his deception to decieve the non-Christians and the lukewarm Christians. (look up lukewarm Christians on Christian websites and/or the Bible.) the AC will be world famous and very popular. he will make people take a mark on r hand or forhead. there will be a severe punishment for not taking it. The ANTI-Christ is a control freak, the opposite of Jesus Christ. However, this AC will act all nice and cool for 3 years and 6 months, and then he will make a tyrannical dystopia. for another 3 years 6 months. Jesus uses His power for GOOD, NOT EVIL. This is BIBLE PROPHECY. Dont trust the false god, his goal is to get people into the lake of fire. he will go there too, despite all the FALSE MIRACLES HE WILL DO! Repent of your sins to Jesus Christ before its too late, you could die today!
      The purpose of life is to worship, praise and serve God!
      TRUE Christianity is Relationship with God.
      NOT MANMADE RELIGION.
      Christianity is from Jesus Christ.
      Jesus created mankind.
      Religion is mans word.
      God is INFINITELY (in the literal sense) BETTER THAN ALL THINGS!!
      1. believe fully and sincerely in Jesus Christ, the Savior of all humans from sin.
      2. Truly Repent of every sin, for example say "Jesus, please forgive me for all sins."
      3. Become baptized (recommended, not needed but it helps), and BE SPIRITUALLY REBORN (aka Born Again).
      God created male and female. He knitted each of us in our mother's womb. We don't get to pick or change our gender. Literature and/or churches that affirm things that are contrary to the Word of God are apostate. God loves those who are His. He does not affirm our sins. Seek the Truth find it, and you'll be set free.

    • @brazil3207
      @brazil3207 Рік тому +1

      ​@@ryanorourke1150 God*

  • @LazloRTR
    @LazloRTR Рік тому +668

    I don't use mods so thankfully I'm not affected, but man, seeing this after I've _just_ returned to Minecraft for the first time in years made my heart skip a couple of beats

    • @sylv512
      @sylv512 Рік тому +9

      ikr? i kind of dodged a bullet since i recently installed Arch Linux and haven’t set up minecraft yet.

    • @shellinsanity9936
      @shellinsanity9936 Рік тому +11

      I panicked for a moment before I actually watched the video because I just got Minecraft installed on my new computer, but thankfully like you, not modded.

    • @handsomestman
      @handsomestman Рік тому +2

      @@shellinsanity9936 well yeah they have to do that or else they wont get clicks because people wouldnt watch it if they dont use mods

    • @Chucklesmc
      @Chucklesmc Рік тому +2

      I saw this after buying this i got so scared

    • @handsomestman
      @handsomestman Рік тому

      @TheOnly3rd no ur fine maps arent the same as mods they are completely different

  • @czpiaor
    @czpiaor Рік тому +2251

    Phoenix may make cursed content, but the fact that he also makes serious content like this and warns others about a virus is why I enjoy his videos.

    • @Post_the_most
      @Post_the_most Рік тому +8

      Couldn't have said it better ^^/❤️

    • @jeo1812
      @jeo1812 Рік тому +8

      I originally thought it was just clickbaity joke

    • @RallenCaptura
      @RallenCaptura Рік тому

      ​@Repent and believe in Jesus Christ repent my nuts

    • @JobiMorkos
      @JobiMorkos Рік тому +4

      @repentandbelieveinJesusChrist9 Please Pray on Churches instead of Comment Section, Begone now.

    • @mollydog7802
      @mollydog7802 Рік тому

      ​@@jeo1812 same here

  • @Kroooza
    @Kroooza Рік тому +1303

    So that everyone knows, the little window that Phoenix used to type %LOCALAPPDATA%/Microsoft Edge is called run. It is preinstalled to ALL windows computers and can be opened by pressing WINDOWS KEY + R
    Hope that helps.

    • @EeveeRealSenpai
      @EeveeRealSenpai Рік тому +31

      or you can search for it in the windows start tab

    • @boreal3255
      @boreal3255 Рік тому +44

      its ui hasnt changed since 95
      it doesnt need to!
      if it aint broke dont fix it.

    • @NonHuman69
      @NonHuman69 Рік тому +16

      i dont have MicrosoftEdge only microsoft is that fine {i also cant find the microsoft Edge seperet from each other}

    • @EeveeRealSenpai
      @EeveeRealSenpai Рік тому +5

      @@NonHuman69 I think it should be fine

    • @NonHuman69
      @NonHuman69 Рік тому +6

      @@EeveeRealSenpai I really hope so I truly do

  • @MSSHDMUSIC
    @MSSHDMUSIC Рік тому +1582

    As a Modder myself this Situation is extra serious for me. How this will continue or if the Virus will Stick around for a long time is something we dont know. This is such a big topic that I feel Mojang will see this and maybe do something since Modding has been the Thing that kept Minecraft alive for so long.
    To all the Modders out there: Stay safe and continue what you are doing even if something like this is Happening.

    • @denisekyles4299
      @denisekyles4299 Рік тому +25

      An'body think that Mojang might just get rid of all Minecraft mods now?

    • @lorekeeper685
      @lorekeeper685 Рік тому +90

      ​@@denisekyles4299 that would be the stupist thing that they can do

    • @oliverwatson8232
      @oliverwatson8232 Рік тому +46

      ​@@denisekyles4299 Mojang is famous for being a major game company that allows and supports modding in the community, removing it would make a very large amount of people leave.

    • @LisooYT
      @LisooYT Рік тому +15

      ​@@denisekyles4299 yeah they try to remove guns mods and minecraft servers with guns and beacuse guns are popular as mods they will lose alot of players already

    • @LisooYT
      @LisooYT Рік тому +5

      cuz zombie apocalypse mod feels better with guns

  • @cryptic_daemon_
    @cryptic_daemon_ Рік тому +300

    While I may not have that mod installed nor playing on the latest version of Minecraft, I thank you for informing not just me, but everyone!!

  • @pabdira
    @pabdira Рік тому +819

    just a little reminder to you all, even if you haven't downloaded any of these mods, you should still check it.

    • @Sunny_chips
      @Sunny_chips Рік тому +49

      its not there i checked it says "MicrosoftEdge" instead of "Microsoft Edge" on my pc.

    • @JP-rs3ky
      @JP-rs3ky Рік тому +17

      and I havent downloaded mods nor played minecraft since last year so I think I'm safe ... even tho TLauncher has been suspected of having a virus, nothing bad has happened to me for a long time

    • @kaleidico
      @kaleidico Рік тому +17

      I don't download mods 🤷‍♂️

    • @speaker97
      @speaker97 Рік тому +9

      I play on my ps5, but thanks for your concern 🧃

    • @MK-rw1on
      @MK-rw1on Рік тому +1

      ​@@Sunny_chips what do i do if i find neither?

  • @OscarGreenworth
    @OscarGreenworth Рік тому +763

    As someone who hasn’t ever played with mods and plays on a console, I’m glad I’m safe. But I hope this gets taken care of fast.

    • @jessebaker4245
      @jessebaker4245 Рік тому +44

      Yeah imagine getting a virus by downloading mods
      Laughs in console pain

    • @Nexx06
      @Nexx06 Рік тому

      @@jessebaker4245😂😂😂🥲😂😂

    • @phoenixthings
      @phoenixthings Рік тому +23

      Not able to get mods on Minecraft gang, wOo!
      :’)

    • @TheLaziestOfNerds
      @TheLaziestOfNerds Рік тому +11

      I’m a big modded fan, almost had the virus spread before my friend told me and I ran a virus scan and deleted the virus when I found it

    • @Chase92488
      @Chase92488 Рік тому +3

      no mods moment

  • @SfIsCool
    @SfIsCool Рік тому +230

    I love how pheonix SC actually cares and responds to his community being aware about them getting hacked

  • @CheeseWithHoles
    @CheeseWithHoles Рік тому +624

    I'm not sure if its the same for everyone but the "Microsoft Edge" folder is invisible regardless of the "Show hidden files" checked. I just typed this in cmd (in administrator)
    rmdir /s /q "C:\Users\*USERNAME*\AppData\Local\Microsoft Edge". Replace *USERNAME* with yours. This command will delete the folder entirely (including the contents).
    Hope this helps.

    • @airconditioner2900
      @airconditioner2900 Рік тому +9

      Everyone, get this on top by liking.

    • @eggcup
      @eggcup Рік тому +34

      according to curseforge you also need to check "show protected system files" for it to be visible.

    • @jeremiahdulcich7908
      @jeremiahdulcich7908 Рік тому

      What do I type in cmd? And what part do I type

    • @011v14
      @011v14 Рік тому +5

      @@jeremiahdulcich7908 rmdir /s /q "C:\Users\*USERNAME*\AppData\Local\Microsoft Edge"
      replace USERNAME with your pc name

    • @phantomflows0
      @phantomflows0 Рік тому +35

      @@011v14 For future reference you can just put `rmdir /s /q "C:\Users\%username%\AppData\Local\Microsoft Edge"` and it will use the registery to find the active user, for people who aren't sure on what to replace

  • @xxo4
    @xxo4 Рік тому +509

    Good job informing people about this as quickly as possible, i'm surprised Mojang haven't issued any warnings about this, since it's such an important topic.

    • @gooseosessooe
      @gooseosessooe Рік тому +16

      Mojang are probably working internally on this and also there isn't a point as most people know about this at this point and having them post about it will only create panic and chaos

    • @nikkiofthevalley
      @nikkiofthevalley Рік тому +54

      ​​@@gooseosessooe They can't "work internally" on this, it has nothing to do with Mojang other than by relation to Minecraft. CurseForge and Bukkit's plugin site are both infected, the former being a mod distribution site, and the latter being a Bukkit plugin distribution site. Neither of which have anything to do with Mojang.
      CurseForge says that they fixed the problem, (I wouldn't trust them on that, though) and I haven't heard anything from Bukkit so far.

    • @timewarpdrive77
      @timewarpdrive77 Рік тому +21

      Mojang is too busy ruining the game

    • @Bard_Gaming
      @Bard_Gaming Рік тому +37

      They specifically updated their launcher to say that modded versions of minecraft are unsafe for this reason. By doing so, they remove any and all responsibility regarding malware in modded versions of the game.

    • @sesei2149
      @sesei2149 Рік тому +5

      @@nikkiofthevalley they want to destroy mods, hell they even want to destroy minecraft itself(especially the java edition since bedrock is such a money grab)

  • @heretichazel
    @heretichazel Рік тому +451

    While people who are actually at risk definitely need to check, I'd like to dispel some of the unnecessary fear I've seen around:
    First off, this only spreads through jar files, and its very new. If you haven't downloaded any jar files after late april, you have no reason for concern. Certain platforms such as modrinth are also confirmed as having no infected files. This also means that ONLY jar files are affected, launchers themselves are safe unless they're written in java themselves (i saw some people who thought the technic launcher exe was infected, but thats simply impossible with this). What it does is it spreads to other jar files on your system, as long as you were never infected in the first place it's still safe to play vanilla and modded
    Of course at the end of the day it doesnt hurt to check, but I'm seeing a lot of people getting super stressed about it when they're not even at risk

    • @Syndiate__
      @Syndiate__ Рік тому +21

      Yeah I think Phoenix SC should've specified this in the video

    • @gooseosessooe
      @gooseosessooe Рік тому +4

      Is it on optifine by any chance as i have downloaded it in the past week

    • @nikkiofthevalley
      @nikkiofthevalley Рік тому +27

      ​@@gooseosessooe No, not to my knowledge, but you should check for the directory anyways, it doesn't hurt anything.

    • @andreamaral9725
      @andreamaral9725 Рік тому +1

      I downloaded a modpack on the curse forge app is that safe?

    • @gooseosessooe
      @gooseosessooe Рік тому +5

      @@andreamaral9725 Which modpack btw?
      And also there is a high chance that it is infected so i recommend scanning and removing any sensitive info on your computer

  • @SonicEclipse456
    @SonicEclipse456 Рік тому +105

    The mod "When Dungeons Arise" was one of the mods infected. I was gonna download it for 1.16.5 for my latest video, but i ended up not doing so because i felt like i had enough dungeon mods. Thank god i didn't pedal back on that decision.

    • @ReverseGuy
      @ReverseGuy Рік тому +4

      Even without this infection stuff, that mod is completely broken and unbalanced. Makes the game's difficulty and progression a joke

    • @synexiasaturnds727yearsago7
      @synexiasaturnds727yearsago7 Рік тому

      @@ReverseGuy How so? Never tried

  • @MajorTomFisher
    @MajorTomFisher Рік тому +494

    Honestly it's sort of incredible that this hasn't happened yet already, I just hope the next step is for Forge and Fabric to have to implement their own malware detection code to prevent something like this from happening again.

    • @gojojodragon
      @gojojodragon Рік тому +18

      That simply isn't possible because Minecraft mods are executables basically raw code

    • @Optic_Fusion1
      @Optic_Fusion1 Рік тому +42

      Malware within the Minecraft community has happened a lot. I've found malicious jars dating back to 2016. The only difference is that this one was made such a bigger deal than it is. A video, announcement, detection tool, and writeup are realistically all it should need. Going off one of the github repos both Oracle and Mojang were contacted, which I personally find dumb unless there's something within the code they can deal with (unlikely)

    • @Optic_Fusion1
      @Optic_Fusion1 Рік тому +11

      @@gojojodragon You can do Anti-Malware for mods actually. I've created one for spigot plugins

    • @sekairedblue
      @sekairedblue Рік тому +14

      ​@@gojojodragon You could decompile it and check if it uses any suspicious classes like the one that self-expand, and if a mod does it can be flagged for regular human reviewing

    • @gojojodragon
      @gojojodragon Рік тому +11

      @mission the issue is the virus simply calls to install another file which is very commonplace in mods, the actual malicious code is on a cloud server which has been shut down for now

  • @dude5560-k9q
    @dude5560-k9q Рік тому +12898

    I downloaded it like 4-5 months ago, should I worry about the virus?

    • @PhoenixSC
      @PhoenixSC  Рік тому +7260

      The earliest incident was an infected plugin (on Curse) reported late April 2023, so probably not. I would still check.

    • @dude5560-k9q
      @dude5560-k9q Рік тому +813

      @@PhoenixSC Thanks!

    • @MugiwaraNoRandom
      @MugiwaraNoRandom Рік тому +403

      ​@@PhoenixSCquick question : i have Microsoft edge but its not a file its the actual thing, am i safe?

    • @simic0racle157
      @simic0racle157 Рік тому +145

      @@PhoenixSC asking us to get checked, uwu

    • @ProvidedCave130
      @ProvidedCave130 Рік тому +84

      ​@@PhoenixSC good thing I'm a Xbox player

  • @johndolenc7658
    @johndolenc7658 Рік тому +693

    Note: this msg only applies to the modded community. The entire malware is hidden inside Minecraft mods not Minecraft itself. The first sighting of this malware was in April, so anything downloaded before that should be safe. If you suspect you are infected follow the given flow chart and don’t open recently downloaded mods. Past that, happy mining and crafting, stay safe, and have a good time with 1.20

    • @TheRealBlazingDiamond
      @TheRealBlazingDiamond Рік тому +5

      Aight, im fine then, I haven't downloaded anything since before April

    • @uniqueglaceon694
      @uniqueglaceon694 Рік тому +38

      You should still be careful. This is the first instance of the virus being found, not the first infected. Maybe I'm reading it wrong though.

    • @migolo1415
      @migolo1415 Рік тому +5

      @@uniqueglaceon694 Yeah, currently the earliest instance of this virus was found to be in april, but there's no way to be sure that it *is* the earliest one, there could be earlier cases not yet found

    • @swizzamane8775
      @swizzamane8775 Рік тому +2

      This could also be, one of many more viruses for modded

    • @luminariel3765
      @luminariel3765 Рік тому +7

      I'm not a mod player, not enough ram on my laptop, so thank you for the tldr!

  • @destinythegravityfallsfan
    @destinythegravityfallsfan Рік тому +5

    WOW I'm feeling grateful right now. My brother and I got Minecraft back after a while (like years) of not being allowed to, and we were planning on doing mods. However, the whole thing was very stressful, ironically partly because of viruses, so we decided not to do mods. Clearly that was a good thing. I personally like not having a virus uploaded to my computer, thank you very much.

  • @AvocadoDoesArt
    @AvocadoDoesArt Рік тому +369

    This is so scary and infuriating that anyone would do this. Stay safe.

    • @gooseosessooe
      @gooseosessooe Рік тому +6

      It only spreads through JAR files and can only be downloaded through the mods listed
      If you believe you are at risk I recommend doing a virus scan and deleting sensitive info off your computer

    • @Kenthrex
      @Kenthrex Рік тому

      remember how plustic did something similiar?

    • @MeemahSN
      @MeemahSN Рік тому +6

      @@gooseosessooe The virus is capable of infecting any Minecraft mod, so it’s not just the listed mods that need to be looked out for.

    • @m_i_d_n_i_g_h_t
      @m_i_d_n_i_g_h_t Рік тому

      @@MeemahSN I’m alright since the last mod I downloaded was in like late February right? (Btw I deleted all sorts of modded things from Minecraft)

    • @alternatedenz
      @alternatedenz Рік тому

      @@gooseosessooe i could never be at risk if i myself dont know where i keep my login information
      Good luck trying to navigate my 10 drives of random jumbleness

  • @SauskeHigurashi
    @SauskeHigurashi Рік тому +361

    As someone who's already given himself a heart attack from doing something stupid to my pc already today, I just had another one from this. Luckily, I wasn't infected though I didn't install any of the aforementioned mods.
    Please take care of your devices, and be careful when downloading anything from any website.
    You never know where malicious files are hiding. Be safe kids.

    • @eeeeee8762
      @eeeeee8762 Рік тому +4

      The list is non exhaustive, if you’ve downloaded any mods at all you’re at risk

    • @AviationFriction
      @AviationFriction Рік тому +1

      i downloaded When Dungeons Arise like a few months ago and i am scared

    • @literallysunnyfromomori
      @literallysunnyfromomori Рік тому +1

      @@AviationFriction April 2023 was when reports started happening from what i know, but i do recommend you check very often and do all of that, i personally havent downloaded any of the mentioned mods however i have downloaded many mods within the past week so i did a concerning amount of checking today 😭

    • @DaisyHead666
      @DaisyHead666 Рік тому +2

      @@literallysunnyfromomori I haven't even opened minecraft in 2 months and still checked my files lmao. Guess we're all paranoid, for good reason though.

    • @literallysunnyfromomori
      @literallysunnyfromomori Рік тому +2

      @@DaisyHead666 It is a good thing lmaooo

  • @Renikee
    @Renikee Рік тому +46

    This is like that one time someone accidentally made a virus mod for Sims. Many people downloaded it, the virus doll went into other builds and room packs, which have been downloaded by even more people. A lot of mods have been infected by it. The problematic mod made some kind of invisible virus, which not even the creator could fix, and it made bugs and extreme lag in the game. It couldn't be deleted by simply putting it out of the mods folder. And the worst thing is, it went up the official Sims 3 store as well. This was so big even the developers responded to help players.

    • @AceFuzzLord
      @AceFuzzLord Рік тому +25

      The most shocking part about that story is that the devs actually did something about it instead of sitting around and watching the world burn, since it's EA.

    • @migolo1415
      @migolo1415 Рік тому +12

      @@AceFuzzLord They definitely figured they'd start losing sales once they accidentally put a virused mod in the official store so they had to do something about it

    • @alternatedenz
      @alternatedenz Рік тому +2

      @@AceFuzzLord EA isnt as bad as people make it out to be smh

    • @ConfirmedZer0
      @ConfirmedZer0 Рік тому +1

      How do you accidentally make a virus mod?

  • @herowither12354
    @herowither12354 Рік тому +2

    My laptop stopped working on December 28, 2022. Never have I been so happy that I still can't take it to be fixed.

  • @rektangulous2669
    @rektangulous2669 Рік тому +50

    I really appreciate it Phoenix. It’s always nice to see someone willing to warn and lookout for people all around them, it just makes the world that much better. I downloaded it a bit ago, so I’ll make sure to check it out today. Thanks!

  • @wcsmsynergistic
    @wcsmsynergistic Рік тому +284

    Was just coming back to Minecraft after a good break of around 6 months. Decided to see if 1.20 which it was and wanted to download some mods, but thankfully and fortunately before that, i saw this video and i much say thank you for bringing this message out to everybody! I was completely clueless and you most likely saved me from an infestation of cyber viruses.

    • @ZakIsPurple
      @ZakIsPurple Рік тому +1

      Holy that’s to close lmao

    • @EeveeRealSenpai
      @EeveeRealSenpai Рік тому +2

      good thing I hate vannila+ packs 👍

    • @kestrelthesoldier
      @kestrelthesoldier Рік тому

      ​@@EeveeRealSenpai why? vanilla plus packs are great

    • @EeveeRealSenpai
      @EeveeRealSenpai Рік тому +2

      @@kestrelthesoldier I prefer tech mod packs with quest lines like All Of Fabric 6, Sky Factory 4, Stone Block, All The Mods 7.
      RLcraft is good too.

  • @Amphy2k
    @Amphy2k Рік тому +110

    I have never opened my computer and checked files faster than this. Thank you. I am thankfully not infected however I still completely deleted all instances and saves of that modpack. I haven’t played modded in 2 months thanks to my addiction to Bedrock on my iPad right now so I guess I can consider that a blessing in disguise. Wow.

    • @gojojodragon
      @gojojodragon Рік тому +8

      If you played one of the known modpacks within the last 2 months make sure you used the proper precautions like looking for hidden files and operating system files

    • @QUBIQUBED
      @QUBIQUBED Рік тому +3

      Luckily I had no viruses, I used the programs in the support page, saw all the known infected mods, and saved my computer.
      thanks phoenix

    • @suspectxxxl2980
      @suspectxxxl2980 Рік тому +4

      I just started playing it again yesterday after a month hiatus. I almost downloaded Dungeons Arise but something in me told me "Nah, i dont need it" which is uncommon for me. Crazy. Still checked my PC though, thankfully im good.

    • @gooseosessooe
      @gooseosessooe Рік тому

      @@suspectxxxl2980 Sounds like a case of unintentional time travel(Idk the real term but this is what I call it)

    • @gooseosessooe
      @gooseosessooe Рік тому

      @@gojojodragon Could you leave instructions on how to look for those?

  • @WHODEY126
    @WHODEY126 Рік тому +1

    Tysm for the information, I totally didn't know about this and was planning on downloading some mods on Curseforge today but forgot too. You have saved me.

  • @GarethJason
    @GarethJason Рік тому +117

    When i saw Medieval Minecraft pop up, i had a mini heart attack and immediately used the scanner and checked for the fake edge. Thankfully I dodged a bullet. I've been playing Medieval MC a lot lately so i was definitely worried.

    • @pondwater02
      @pondwater02 Рік тому +1

      same here with betterMC!! i havent updated since it got compromised though so all the scans i did came up negative, thank god

    • @Origoo
      @Origoo Рік тому +2

      same. i rownloaded ot like 2 weeks ago and i didnt like it. thank god. i didnt updated it ever since: i think i wil have mini pause from minecraft for now

    • @pondwater02
      @pondwater02 Рік тому

      @@Origoo 2 weeks might be too soon. did u use both scanning tools?

    • @imrango6543
      @imrango6543 Рік тому

      Lol you should not have a heart attack over a computer

  • @alexthetiger7806
    @alexthetiger7806 Рік тому +45

    I don't have any of those mods, but I'll be holding off on downloading any more mods until things are in the clear. Thank you for keeping us updated and looking out for us

  • @Protosune
    @Protosune Рік тому +41

    As a frequent modpack player, this worries me too (also as a amateur mod dev). Thank you Phoenix for warning us and we shall be aware now =w=

  • @Bunnyyoutube1222
    @Bunnyyoutube1222 Рік тому +1

    I hope this video is not infected with a virus. [CRITICAL]

  • @crypticcharmz517
    @crypticcharmz517 Рік тому +106

    As someone who has like close to 200 mods and had downloaded some not too long ago, this was an absolute STRESS when i found out about it. Thankfully for now it seems my system hasn't been compromised as i have not recently downloaded those specific mods or modpacks, i just hope the mods i did install did not turn out to have the virus. This is really scary.

    • @commieblem2992
      @commieblem2992 Рік тому +2

      Take a shower

    • @DeKevers
      @DeKevers Рік тому +10

      @@commieblem2992 ????

    • @Lanurus
      @Lanurus Рік тому +27

      @@DeKevers probably making fun of them for having 200 mods. Dumb take.

    • @GregorianMG
      @GregorianMG Рік тому +16

      ​@@Lanurus Yeah, what's wrong for having an entire modpack lol

    • @crypticcharmz517
      @crypticcharmz517 Рік тому

      @@commieblem2992 damn bro who stepped on your dick this morning 💀

  • @bruv0695
    @bruv0695 Рік тому +358

    Props to the curseforge community to make a detection tool as soon as possible

  • @thewarpedgiraffe5512
    @thewarpedgiraffe5512 Рік тому +89

    This was actually the first time I was actually genuinely concerned about a virus. I downloaded Better Mincraft about 2-3 months ago, and I just deleted the whole instance now. Shame, it was my favourite modpack. The article was very informative!

    • @doomawsogaming
      @doomawsogaming Рік тому +4

      It should be safe now, they have fixed most of it now

    • @gooseosessooe
      @gooseosessooe Рік тому +12

      @@doomawsogaming Not better MC as I believe they are still working on that considering it has a massive amount of code but yes most of the smaller mods are fixed however it's better safe than sorry

    • @realStrombilly
      @realStrombilly Рік тому +7

      no kidding, I just downloaded RLCraft about a month ago from CurseForge

    • @Twoface698
      @Twoface698 Рік тому +2

      I downloaded BMC1 in march and the scanner didn’t find anything. I guess you are safe, but please still check

    • @ChlorinightS
      @ChlorinightS Рік тому +1

      ​@@Twoface698 Glad you downloaded it right before april

  • @portocală33
    @portocală33 Рік тому +2

    Phoenix SC is my favorite tech support channel

  • @Justawaffle12
    @Justawaffle12 Рік тому +109

    Thank You Pheonix. I personally don't have the virus, but you are probably saving peoples computers bringing awareness to this issue. I personally had no idea this was happening, and I play modded quite frequently. ♥

    • @slayer_of_hell
      @slayer_of_hell Рік тому

      "Pheonix" ...

    • @TheLaziestOfNerds
      @TheLaziestOfNerds Рік тому +6

      @@slayer_of_hell it’s a simple spelling mistake

    • @gooseosessooe
      @gooseosessooe Рік тому

      I recommend doing a virus scan if that is the case,
      If you cannot delete it remove all personal info and even locking/disabling your account just to be safe(Not taking about MC account like ur actual computer account)

  • @Kashmnyjr
    @Kashmnyjr Рік тому +56

    I’m a modpack developer and I thank you for bringing this to my attention

  • @Smalllbuddy
    @Smalllbuddy Рік тому +37

    That is absolutely nuts, I've downloaded about half of these mods 8 months ago, and I was about to redownload many of them for a 1.20 playthrough... Thanks so much for the heads up Phoenix!!

    • @Azarilh
      @Azarilh Рік тому

      I dun think there are gonna be any 1.20 mod that is infected, as the community is aware of the malware now and 1.20 came a few days ago. Better be safe any way, i guess, until CurseForge confirms the website is safe.

    • @gonk9204
      @gonk9204 Рік тому +1

      Same! actually a few of my friends and I were planning on relaunching our modded server that included Better MC etc only a few weeks ago. Kindve glad now we ended up procrastinating it haha

  • @bossSHREDDER210
    @bossSHREDDER210 Рік тому +1

    to others that have downloaded one or many of the modpacks Pheonix has listed dont worry you may not be infected.. its only if you have recently downloaded an UPDATE to said compramised modpacks
    or in other words if you had it already you are fine but DO NOT DOWNLOAD UPDATES to those modpacks

  • @MoreEnderPlayer16
    @MoreEnderPlayer16 Рік тому +11

    3:27 - Press Windows key + R to open the Run App

  • @jojogamer2020
    @jojogamer2020 Рік тому +1975

    If a virus makes everyone to stay inside the house, I'm okay with it. But if a virus makes everyone not to play Minecraft, I'm against that at all costs.

  • @a_person_of_all_time
    @a_person_of_all_time Рік тому +74

    This is a warning shot, if this mod would have gotten into something with an enormous userbase like OptiFine and was hidden for this much it would be chaos. This is a great opportunity to learn from mistakes

    • @sanguinepub
      @sanguinepub Рік тому +11

      Tbh I have been cautious of malware in mods since the time Pixelmon had Malware in it.

    • @brazil3207
      @brazil3207 Рік тому +8

      Did you know
      The purpose of life is to worship, praise and serve God!
      TRUE Christianity is Relationship with God.
      NOT MANMADE RELIGION.
      Christianity is from Jesus Christ.
      Jesus created mankind.
      Religion is mans word.
      God is INFINITELY (in the literal sense) BETTER THAN ALL THINGS!!
      1. believe fully and sincerely in Jesus Christ, the Savior of all humans from sin.
      2. Truly Repent of every sin, for example say "Jesus, please forgive me for all sins."
      3. Become baptized (recommended, not needed but it helps), and BE SPIRITUALLY REBORN (aka Born Again).

    • @brazil3207
      @brazil3207 Рік тому +1

      DEBUNKING EVO.UTION:
      If the creation of anything thru molecule to man evolution were true, nothing should evolve because organisms have ORGANS. and evolution could never get even 1 of them to function right, LET ALONE 4 OR 5!! AND THE CIRCULATORY SYSTEM!!
      The sequence of DNA can be identical but produce different results based on the presence or absence of epigenetic markers. So if humans and chimps share a common ancestor and these chemical tags are heritable, they should have similar epigenetic markers, right?
      They should (if evolution were true), but they don’t.
      the bbt (bigbang theory) is a manmade construct. How insane the chances must be for mill's of plants and animals to magically mutate over ludicrous spans of time. We should find missing links. However we dont, we only find Fully Formed animals. If animals could evolve into totally new animals, there should be a chance we find missing links. ONLY THE SIMPLEST LIFE FORMS SHOULD BE ABLE TO EVOLVE INTO EXISTENCE. GENETIC ENTROPY WILL UNDO WHATEVER BENEFITS THE ORGANISM MUTATED, FASTER THAN THE ORGANISM WILL MUTATE BENEFICAL TRAITS. EVEN THEN, THE CHANCES OF ANY ORGANISM MUTATING A BENEFICIAL TRAIT ARE NEXT TO NONE. HOW MUCH MORE CRAZY IS EVOLUTION, WHEN APPLIED TO MILLIONS OF PLANTS N ANIMALS?? FOR THEY ARE WITHOUT EXCUSE.... DEBUNKING BIGBANG: if the bigbang was real the 2nd planet's orbit would be normal and sat turns ring particles should've moved too fast for ANY gravity to pull them towards the planet. And thats not even taking into account the bigbangs hot temprature which shoulda vaporized anything. also there is too little antimatter in universe. if bigbang was real 99.999999999999999999999% of our universe should Not exist because antimatter destroys matter when it make contact with matter. the bang wouldve made much of it touch matter. so we see far less stars n stuff bc the so called bigbang wouldve destroyed nearly all of it. . READ THIS VERY CAREFULLY!! ----> this should prove that Jesus is Real: JESUS CHRIST will Not make you take any mark, and He will punish the tyrannical ANTI Christ. The ANTI Christ will get a terrible wound, but cure himself to reinforce his deception to decieve the non-Christians and the lukewarm Christians. (look up lukewarm Christians on Christian websites and/or the Bible.) the AC will be world famous and very popular. he will make people take a mark on r hand or forhead. there will be a severe punishment for not taking it. The ANTI-Christ is a control freak, the opposite of Jesus Christ. However, this AC will act all nice and cool for 3 years and 6 months, and then he will make a tyrannical dystopia. for another 3 years 6 months. Jesus uses His power for GOOD, NOT EVIL. This is BIBLE PROPHECY. Dont trust the false god, his goal is to get people into the lake of fire. he will go there too, despite all the FALSE MIRACLES HE WILL DO! Repent of your sins to Jesus Christ before its too late, you could die today!

    • @brazil3207
      @brazil3207 Рік тому +1

      Why Evolution is Ridicoulous:
      ANIMAL X EVOLVES!! [ignoring the ridicoulous madness amd guesswork needed to somehow cobble this FULLY FORMED animal from nothing. And the sheer complexity and fine tuning of the nervous and reproductive systems.]
      However, it has no pain cells.
      Pain evolution 1: Something evolves, the organism dies to failed mutation. His blood vessels tried to morph.
      Pain evolution 2: 2,000 years later, another of this organism tries to evolve pain cells. His nerves go haywire and he uses all his energy and dies.
      Pain evolution 3: 10 million years later, the organism mutates. However, it only got an additional arm that is less sensitive to feeling things than its other arms. It manages to give birth, but its baby dies. It dies too. RIP multi-arm animal X :(
      Pain evolution 4: 15 million years later, its brain mutates to try to accomadate a new pain center. It dies in a horrific, grotesque manner. All animals within hearing range [HOW IS THEIR HEARING FULLY FORMED???? OWO] run away at the atrocious screams of a dying Animal X. Animal X dies, free from the horrible evolutionary death. What a sad and awful thing to believe, innit?? But oh well, evolution "mUsT be bEliEvEd" because "ohh God goes against my desires, must stick my head in material world!!1!" [[Full-on athiests don't want to admit it]].
      Pain evolution 5: 35.7 million years into the future. Dinosaurs start to evolve, both of the evolving creatures suffer and die sterile, never having kids. Due to genetic entropy, any good traits have decayed over super long spans of time. Animal X is smaller, inbreeding is sky high, and 99% of Animal Xs are unable to give birth. There are only 1000 or more of animal X in existence. At its peak, Animal X numbered over 10,500,900. All kinds of weird, disfigured Animal X's roam the earth. Still no pain receptors or center in the brain, however. Just failed tries.
      35.8 million years into the future. The last Animal X dies peacefully, having lived to the end of its days. It was a fully formed one.
      Dinosaurs are not being evolved at present, because any animals that try simply die or suffer.
      This is the long, sad saga of Animal X, and this saga applies to all animals.

    • @f2progamer80
      @f2progamer80 Рік тому +37

      @@brazil3207 this is a video about reuploaded minecraft mods injected with viruses. spamming messages about God in random videos to preach is completely useless.

  • @drkinetics384
    @drkinetics384 Рік тому

    great to know, just started playing modded again and im glad to say both the file scanner and appdata came back clean

  • @thewildwoodwitch1008
    @thewildwoodwitch1008 Рік тому +51

    This honestly scared me, I downloaded mods back in early April but updated a few before seeing the news. Ran some tests and I seem to be all good, what a nasty thing for someone to do though. :((

    • @Quarterbtw
      @Quarterbtw Рік тому

      Can I ask which version and what mods you got? I don't have my computer and need to see if I'm infected

  • @SirHorseLegs
    @SirHorseLegs Рік тому +45

    I’m going to give big thanks to many people (especially you, Phoenix!) working on covering and fixing this huge issue, given how quick they figured out how the malware worked!

  • @JoshMats
    @JoshMats Рік тому +136

    As somebody actively working on a modpack to play with friends, this development from the get go immediately got us into a panic
    really good to see how quickly the community is getting on to this, though I may stay out of modding for now until it's like 99% certain it's safe to carry on

    • @erecbeaudoin8477
      @erecbeaudoin8477 Рік тому +5

      Same. I was recently making a horror-themed forge modpack for 1.19.4. Thankfully, it seems that the malware hasn't targeted as many mods for that version of the game, and most of the mods I downloaded were relatively small or less popular. Still, probably best to not play modded MC for at least a month.

    • @themenagerie5622
      @themenagerie5622 Рік тому

      Same, and we just started having trouble with Aternos that might be related as I have a hunch that the Aternos servers might be infected to some extent, what with them downloading directly from forge.

  • @kingvector1198
    @kingvector1198 Рік тому +1

    Im just gonna say this right now, this prolly wouldn't have happened if Microsoft DID NOT own Minecraft.
    I'll just give the theory that may not be proven or strongly backed up, that since both are Microsoft related, then it's like if you have, or you're expecting, a best friend coming over, like a best friend you've known for a REALLY long time and trust the most (or should trust cuz why shouldn't you?) but they say "I can't make it so I have another friend that I know coming over" and so you're expecting "another friend" and so you're waiting and waiting, and in a typical first-come first-served scenario, someone does show up all peaceful, and you open the door. Next thing you know, you're robbed from inside out and the person is gone without a trace of where they went next, without anyone knowing who that person was, without hearing another note from either that person or your best friend about said situation.
    Or long story short, now that Microsoft owns Minecraft, Minecraft is now a Microsoft-related product. Microsoft edge, as said in the name, is owned by Microsoft. And whether we like it or not, Minecraft is Minecraft. So Microsoft would just let anything Microsoft-related go in and out at will because its their "close friend" giving off not necessarily false information, but rather self-induced false hope of received information, that is just being taken like a piece of cake and next thing you know, this is happening.
    (Again this could be completely fictional since I do not have any backed-up proof behind this, but I just know Microsoft is making Minecraft fail one update at a time ever since they took ownership of it.. and ive not been the only one to say that amongst people I've spoken with about the game.)
    Microsoft really needs to get its stuff together cuz they're making everything worse that they own as they try to own more and more things..
    It's funny though, how coincidental to talk about "Microsoft" in this comment while the vid talked about a Microsoft-related item or product being used as a coverup for the virus.
    And I bet the next thing Microsoft is worrying about is when will Windows 12 release, assuming they know how to count and won't go like Windows 21 or something. :/

    • @corvus3906
      @corvus3906 Рік тому

      The heck is this rant, I didn't even read it whole. Microsoft is not responsible for what modders do, the modding scene is a totally different ecosystem to the vanilla. The virus is using a Microsoft product as a cover-up, because it's what viruses do, they disguise themselves as system files, so they wouldn't look suspicious. It absolutely would have still happened if Microsoft didn't buy it.

  • @a_person_of_all_time
    @a_person_of_all_time Рік тому +70

    As a person who plays Hypixel Skyblock, a game with a comunity with widespread mods including trojan mods, I learned the hard way to never trust any file and check everything by yourself multiple times beforehand

    • @ebenezer-scrooge
      @ebenezer-scrooge Рік тому +7

      as someone who downloaded a rat mod, i can confirm they are very widespread

    • @Sportivities
      @Sportivities Рік тому +5

      all this virus is is a step above your classic hypixel skyblock scam rat mod because it infects other files (which normal rats don't do), but the payloads are similar (and still as scary!)

    • @Azarilh
      @Azarilh Рік тому +1

      How would you even check yourself if a mod doesn't have malware? ...

    • @flambambam
      @flambambam Рік тому

      @@Azarilh Check for suspicious code if you understand what it looks like. Anything that attempts to access external domains are red flags.

    • @Azarilh
      @Azarilh Рік тому +2

      @@flambambam Yes, because most people can read Java or have time to do so. /s

  • @cooleecoolee9504
    @cooleecoolee9504 Рік тому +52

    Man this scape and run parasite update is insane

    • @Nozzle893
      @Nozzle893 Рік тому +10

      LMAO IT EVEN INFECTS UR PC

    • @arturoc7682
      @arturoc7682 Рік тому +2

      This is what happens when the infection reaches stage 8

    • @SgtHawk45
      @SgtHawk45 Рік тому +2

      Mmm yes, Stage 10... the final stage.

    • @antoniogonzalez-nc4si
      @antoniogonzalez-nc4si Рік тому +2

      Damn I didn't know scape and run parasites got a secret update

  • @mattguy1773
    @mattguy1773 Рік тому +601

    Man this year has been terrible for minecraft

    • @viliketa9
      @viliketa9 Рік тому +60

      bro 1.20 is such a good update just one virus doesnt effect the year

    • @IdentifiantE.S
      @IdentifiantE.S Рік тому +3

      @@viliketa9Fr the best maj since a big moment

    • @EmperorPenguin1217
      @EmperorPenguin1217 Рік тому +120

      @@viliketa9 1.20 is meh

    • @spicytacomc1647
      @spicytacomc1647 Рік тому +28

      @@EmperorPenguin1217 L take

    • @5koot13
      @5koot13 Рік тому +86

      @@spicytacomc1647 L take

  • @tibbedam7159
    @tibbedam7159 Рік тому +1

    Thank you so much!! I was aware of this issue and I was looking up video's and I found elsewhere I needed to see if I have "Microsoft Edge" file with the space "MicrosoftEdge" is fine and I found "Microsoft/Edge" and I was in panic and then I saw you made a video about this and the the / is okay, with gives me an huge releave! Thank you!

  • @TheRealSacrystrfa
    @TheRealSacrystrfa Рік тому +3209

    this is why minecraft needs to wear a mask

  • @hegotleggy
    @hegotleggy Рік тому +15

    After considering downloading some mods like 3 days ago and not doing it "because I'm not really up for it" I am very thankful that this project I'm working in has consumed my life.

  • @orin3039
    @orin3039 Рік тому +133

    Great, two days ago I installed FTB academy and have played roughly 6 hours of it. I am running Overwolf's jar scanner atm to see if I am infected. Will provide an update when it is done
    Update: Overwolf's software says I am not infected. WOOHOO
    Thanks for the heads up!

    • @JohnStarbje
      @JohnStarbje Рік тому +16

      i have nothing to do with you but thank god that you didnt get infected

    • @orin3039
      @orin3039 Рік тому +2

      @@JohnStarbje Much appreciated, I could have lost a lot of stuff. Good luck!

    • @sergiobrunn3908
      @sergiobrunn3908 Рік тому +1

      any way you can help me out I have no idea how to work the scanner

    • @alternatedenz
      @alternatedenz Рік тому

      @@sergiobrunn3908 no offense but you're stupid if you dont know how to use a simple scanning tool on a pc, its 2023 i thought people knew how to use a pc

    • @Itskuzco
      @Itskuzco Рік тому

      @@sergiobrunn3908 Depends on which on your using. I used the one from curseforge and the first one worked easily. The second one I had to extract the file once it downloaded in order for it to work. The I went to curseforge mods and copied the address. Hope this helps

  • @Emerald29
    @Emerald29 Рік тому +1

    I was literally about to download mods to finish redownloading Minecraft into my new computer....

  • @daenite2480
    @daenite2480 Рік тому +319

    Finally, viruses! The Plague Inc update has been added

  • @Nickwilde7755
    @Nickwilde7755 Рік тому +334

    Thank god mojang came out with things like chat reporting so a lot of people (me included) would stop playing this game before this virus started spreading so we wouldnt get infected!

    • @Chorismos
      @Chorismos Рік тому +11

      Lmao.

    • @adarshpanigrahi4219
      @adarshpanigrahi4219 Рік тому +12

      That cracked me up😂

    • @cheesemaster1481
      @cheesemaster1481 Рік тому +5

      True

    • @placeholderblankspace
      @placeholderblankspace Рік тому +34

      how cruel of the community to blame mojang for not caring about the playerbase when really all they wanted to do was stop ppl from playing a game that was going to be infected!

    • @jeremybitar9831
      @jeremybitar9831 Рік тому +2

      But there's a mod that disables the whole thing. In turn it'd put you at risk of the virus

  • @NotThatGuyWhoScreams
    @NotThatGuyWhoScreams Рік тому +25

    Thanks for letting everyone know. I’m not on reddit often, so I wouldn’t know otherwise, and I was just about to download a bunch of mods. My computer thanks you!!!

  • @ConfirmedZer0
    @ConfirmedZer0 Рік тому +1

    Something similar actually happened with the GMod community on June 3rd last year, although to a less malicious extent.

  • @_Tzer
    @_Tzer Рік тому +313

    Lord have mercy if it somehow gets into optifine.

    • @gojojodragon
      @gojojodragon Рік тому +82

      It shouldn't be able to get into the official Optifine download page without hacking the website, however do not share copies of mods around the virus spreads to jars in your filesystem meaning a copy of Optifine that originates from an infected pc would have the virus

    • @Komeiji0401
      @Komeiji0401 Рік тому +20

      same with Sodium, Phosphor and Iris

    • @bantix9902
      @bantix9902 Рік тому +14

      @@gojojodragon if it gets into the optifine creator PC then gh

    • @brownfamily1892
      @brownfamily1892 Рік тому +1

      I just downloaded litematica 1.19.4 and the latest fabric version a week ago from curseforge, am I good? I'm gonna check soon for it

    • @Herobrinegrn1
      @Herobrinegrn1 Рік тому

      And also clients. Once it gets into clients such as PaperMC or Lunar, we're fucked.

  • @thephoenixking1086
    @thephoenixking1086 Рік тому +83

    I run a server based on Better Minecraft which is extremely alarming to me (since it is local to my own PC, as is the game itself that connects to it).
    I have just checked and it seems I am in the clear (since I am using an outdate 2022 version of the modpack) but for now, I am going to shut the server down and check each individual Jar file in the entire CurseForge folder.
    It is a shame Malware Creators do this to people, especially children.

    • @hjrgf
      @hjrgf Рік тому

      these malware creators (that do malicious stuff) are assholes

    • @colaman8269
      @colaman8269 Рік тому

      Well if you're downloading anything from the internet. It's all your responsibility, being a child doesn't change anything

  • @brokespec
    @brokespec Рік тому +8

    Thank you for covering that! I was close to doing a modded playthrough with some mates, and it's nice to hear this from someone in more detail then "there might be a virus", I'll stay clear of the space for now then :D Stay safe everyone.

  • @mister_pincerey
    @mister_pincerey Рік тому +1

    lol i was so relieved when Phoenix said "mods," because i'm a vanilla person

  • @redmonk3y064
    @redmonk3y064 Рік тому +36

    I havent modded or even run minecraft in over a year but was still panicking with all this recent stuff
    thanks for the easy check, we all appreciate you!

  • @noanmee
    @noanmee Рік тому +202

    That's why we need to update to Modrinth, 'cause CurseForge is really unsafe!

    • @PhoenixSC
      @PhoenixSC  Рік тому +121

      Modrinth is incredible.

    • @noanmee
      @noanmee Рік тому +18

      @@PhoenixSC but the old mods that don't update don't let me get away from CurseForge 😭

    • @ItsSeated
      @ItsSeated Рік тому +3

      i usually use bedrock so ig

    • @M0D776
      @M0D776 Рік тому +9

      Modrinth is also being checked for if they were affected from this attack, afaik so far, it's safe-ish, I would still advice on waiting

    • @damiankaleomontero496
      @damiankaleomontero496 Рік тому +40

      There's no reason this couldn't have affected modrinth too, they don't even scan for viruses at all. The reason nothong there was compromised is probably because it's too small of a target to be worth the risk. The malware has nothing to do with curseforge, that's just where it spread.

  • @Yeah_itsJohn
    @Yeah_itsJohn Рік тому +114

    Amazing day to be a 100% vanilla player

  • @drakonix1050
    @drakonix1050 Рік тому +1

    I am actually so glad i didn't add when dungeons arise to my modpack i made awhile ago. i thought about it but was like, if i add this i will never even care bout them cuz im lazy, so i didnt. Thank god im lazy, even in video games.

  • @C.5.
    @C.5. Рік тому +175

    CursedForge being enchanted with Curse of Virus is something to take in.

    • @cheesemaster1481
      @cheesemaster1481 Рік тому +22

      People's information now has Curse of Vanishing

    • @danielthecake8617
      @danielthecake8617 Рік тому +16

      Now your files have Curse of Binding

    • @StuffandThings_
      @StuffandThings_ Рік тому +15

      Mending ain't gonna fix this one...

    • @liv3ry
      @liv3ry Рік тому +8

      Damn those jokes are smart, we could even say they have sharpness

    • @graquinn4058
      @graquinn4058 Рік тому

      This is a funny joke but to be clear it was a very relatively small group of specific mods/modpack files that happened to be hosted ON Curseforge

  • @nabrious
    @nabrious Рік тому +25

    Just a quick PS. If you are on macOS, you are not affected by this virus, it was coded specifically to only work on Windows & Linux, it might be updated to work on macOS in the future so still beware and do not download or update any mods, but if you are on macOS, currently, nothing much to worry about.

    • @drm.himself
      @drm.himself Рік тому +9

      The only possible upside of using MacOS, nobody makes malware for it

    • @itzlqmer6084
      @itzlqmer6084 Рік тому

      ​@@drm.himselfbut you're stuck with a shitty system

    • @AceFuzzLord
      @AceFuzzLord Рік тому +3

      @@drm.himself it's not that nobody does, it's just that apple has such a stranglehold on what people can do with their products that it's harder to infect them.

    • @amog8202
      @amog8202 Рік тому

      Isn't Mac based on Linux though? It may not have an established payload, but I think it'd be easy with that in mind, right?

    • @nabrious
      @nabrious Рік тому +6

      @@amog8202 macOS is based on Unix and not Linux.

  • @y7o4ka
    @y7o4ka Рік тому +6

    Bad thing is that usual antiviruses will probably never detect stage 0 of the malware (the part that is injected in each and every .jar file on the system)
    Some doc about the malware mentioned how nobody in the minecraft modding com. cares about digital signing, which could've minimised the damage, if not prevented it completely (looking how some modpack authors added 0-download infected versions of popular mods/extensions to their modpack i highly doubt that)
    Props to Forge that tried to implement digital signing some time ago, but failed due to how everyone was pissed about needing to change their build toolchain, which is already a complete and total mess in minecraft modding
    Also props to the hosting provider that had the command&control server for the malware and took it down in like 20 minutes after the report was made to them?
    (having it down means that all stage 0 jars will not be able to infect the system cuz the actual payload is DLed from C&C server)
    Also, how did CurseForge miss that if they have "publishing checks" to prevent exactly that (non-legitimate copies of popular mods and malware in mods)?

  • @johnnooyen461
    @johnnooyen461 Рік тому

    When I was younger and had my first personal laptop, I managed to get an adware on my system which made browsing the internet a pain (I probably got it from a bad mod site). I was lucky enough for it to only be an adware so it was easy to recognize and hire someone to remove it from the system, while not compromising my private information. It it always worth it to be caution with downloads, because even if you have an antivirus, you are not immune, only protected. Stay safe.

  • @EchoLx
    @EchoLx Рік тому +47

    Thank you, Phoenix, for keeping us safe :]

  • @mineralnoodles
    @mineralnoodles Рік тому +231

    This was so scary I spent like 2 hours trying to look for the virus on my pc since the script wasnt working and I am still kinda scared

    • @drxk677
      @drxk677 Рік тому +1

      same

    • @zerkalt190
      @zerkalt190 Рік тому

      ayy jack's pfp

    • @GodofToast
      @GodofToast Рік тому +1

      Okay, that’s a bad sign. I hope you stay safe

    • @rickvandam3238
      @rickvandam3238 Рік тому +1

      i ran the windows virus scanner, but still im searching now just incase. and i havn't used minecraft in 2 months

    • @ceoofgaming7914
      @ceoofgaming7914 Рік тому

      @@rickvandam3238 just a tip to help your search: the virus will most likely be in %appdata% (it could be local, locallow or roaming)

  • @skylerma281
    @skylerma281 Рік тому +1

    Just checked and found out i dont even have a microsoftedge folder...

  • @SimonClarkstone
    @SimonClarkstone Рік тому +26

    From the video thumbnail and title, I assumed this was a joke video.
    Also it feels retro to have an actual virus, rather than other forms of malware that are far more dominant nowadays. But Java's JAR files are just ZIP files in disguise, which makes automated modification of them (like virus propagation) much easier than for EXE files.

  • @GimmeMyHandleBack
    @GimmeMyHandleBack Рік тому +21

    Bro I just did a virus check for the curseforge incident… I don’t wanna do another virus scan
    Edit: oh this IS the curseforge incident

  • @Gemini-Lion
    @Gemini-Lion Рік тому +23

    I think I dodged a bullet. I downloaded some mods on Curseforge, so this was scary enough for me to run the malware detector. It said no malware detected, and the mods I downloaded were not on the list.

    • @tomokari215
      @tomokari215 Рік тому +15

      i would look for any files called microsoft edge aswell, i ran the software earlier and it said i was safe but decided to look for any files and found 2
      edit: i mightev just deleted edge instead as i no longer see it which is weird unless i did something wrong, doesnt really matter since i use brave, i would still do it though

    • @feryth
      @feryth Рік тому +5

      This virus is too new to be included in malware detectors

    • @youareanidiot115
      @youareanidiot115 Рік тому

      ​@@feryth if you run it on virustotal a few antiviruses detected which is good for me because I am not infected although i will still check for any malware

    • @Gemini-Lion
      @Gemini-Lion Рік тому +10

      @@feryth The malware detector as in the one that Phoenix linked to that is in Curseforge.

    • @eviljellyspook9548
      @eviljellyspook9548 Рік тому

      @@tomokari215 You probably deleted a folder titled "MicrosoftEdge" which is a legitimate folder used by Microsoft. The malware's folder is called "Microsoft Edge", with a space.

  • @louiepikmin3184
    @louiepikmin3184 Рік тому +1

    I just wanna say, you should absolutely check, but it's pretty apparent if you have the virus or not. I might've gotten a different one but mine just installed a ton of random files and had tons and tons of popups to slow my computer down (Got this from downloading curseforge itself, specifically 1.19.3)

  • @anonymousbat4030
    @anonymousbat4030 Рік тому +24

    Thank you for going over this. My brother is super prone to downloading viruses with mods and this can hopefully help people who struggle to detect malicious downloads.

  • @katrin72091
    @katrin72091 Рік тому +8

    Until like two months ago, I only ever played with mods, so I'm happy to be playing vanilla right now. Dodged a bullet Matrix style. Stay safe everyone.

    • @Azarilh
      @Azarilh Рік тому +3

      Me downloading 600+ mods a week ago and not getting the virus-
      Maybe like 1000 mods. I installed a few mod packs that each has 300+ mods so lol.
      I also installed Medieval MC Fabric, while Medieval MC Forge is affected. _sweats_

    • @sfisher923
      @sfisher923 Рік тому +1

      I also had a Matrix Bullet Dodge
      I was using CurseForge for Sims 4 Modding a few days ago and they use Python because they call functions in said game which uses said language

    • @theonebman7581
      @theonebman7581 Рік тому

      I legit had installed all my mods by May 5
      I may have dodged one of the biggest bullets in my life, and while I did do the checking stuff like 3 times, and found nothing... idk man...
      Like, if you see the folder, you know for sure you're infected
      But if you don't, you can't be 100% sure you _aren't_
      So idek what to think anymore

  • @Mr_Mystic
    @Mr_Mystic Рік тому +34

    i can tell Phoenix SC really likes his community just by seeing him respond to peoples concerns in the comments. thanks man, you didn't have to make a video about this and it's clear your doing it to warn people and not just make money off of this situation.

  • @Drake_997
    @Drake_997 Рік тому +1

    This is why I stopped downloading mods and just make my own.

  • @PenguStudios
    @PenguStudios Рік тому +4

    Thank you for this. I've let everyone I know about this. I've been playing a lot of Minecraft mods so I had to check if I had the virus and luckily it seems like I don't have it, but hopefully all of this will be resolved soon and back to normal :c

  • @gojojodragon
    @gojojodragon Рік тому +114

    This is no reason to throw caution to the wind but every mod from the past 10 months uploaded to Modrinth have been scanned for fracturiser and not a single infected mod was detected.

    • @Emer2ld
      @Emer2ld Рік тому +19

      Source please, I'd love to know

    • @Xenonomous
      @Xenonomous Рік тому +1

      Hi buddy!

    • @Emer2ld
      @Emer2ld Рік тому +1

      @@cursed_cats5710 much appreciated

    • @gojojodragon
      @gojojodragon Рік тому

      @@Xenonomous hiya buddy

    • @tuvergalarga6144
      @tuvergalarga6144 Рік тому +1

      ​@@Xenonomous hi good looking.

  • @Kyrptum
    @Kyrptum Рік тому +9

    i was watching this as it all unfolded on the prism launcher discord, it was scary. as a modpack developer this scared me to death.

    • @fenn_fren
      @fenn_fren Рік тому +1

      Based Prism launcher user

    • @hjrgf
      @hjrgf Рік тому

      ​@@fenn_fren ayy fellow prism launcher user do you use linux by any chance?

    • @Kyrptum
      @Kyrptum Рік тому

      @@fenn_fren 100%

    • @fenn_fren
      @fenn_fren Рік тому

      @@hjrgf Used to but not now haha.

    • @hjrgf
      @hjrgf Рік тому

      @@fenn_fren yeah prism is great and its easy to install mods

  • @TheTSense
    @TheTSense Рік тому +1

    Another victory for the 1.7.10 Master Race

  • @maverickREAL
    @maverickREAL Рік тому +42

    I haven't cared about Minecraft for years but it's actually very touching to see you helping out your presumably-young fanbase with something like this.
    I've ragged on Minecraft and you for a bit but you're a good guy, Phoenix

    • @milk_lotte
      @milk_lotte Рік тому

      what are you doing on minecraft maverick

  • @gokits45
    @gokits45 Рік тому +4

    for you that dont know how to check press the windows key + r and then put this: %LOCALAPPDATA%\Microsoft Edge as shown in the video just to help those with no windows shortcut knowledge :D

  • @ChosenArchitect
    @ChosenArchitect Рік тому +6

    Thanks for spreading the word!

    • @moltony
      @moltony Рік тому

      e

    • @gojojodragon
      @gojojodragon Рік тому

      It is really odd how almost nobody was talking about this yesterday, keep your data safe ChosenArchitect and have a nice day

    • @ChosenArchitect
      @ChosenArchitect Рік тому +1

      @@gojojodragon I mean while no one was talking about it every modded minecraft community was frantically trying to find a solution to this issue!

    • @gojojodragon
      @gojojodragon Рік тому +1

      @@ChosenArchitect The modded mc community has been freaking out, but not the general minecraft youtubers, a lot of casual players who I think are more prone to viruses in general haven't heard about this and I think Pheonix can reach a lot more people about it.

  • @livipup
    @livipup Рік тому +1

    Thanks for the info :) I thought one of the mod names seemed familiar, but it turned out it wasn't one I had downloaded. I hadn't downloaded any mods in quite a long time, so I wasn't really worried, but it's good to be informed. Oddly, I didn't have the Microsoft Edge folder OR the MicrosoftEdge folder. Instead, I had an Edge folder inside of a Microsoft folder. Might be a Windows 10 vs 11 things if I had to guess.

  • @dootss
    @dootss Рік тому +15

    glad that the detector has said i'm safe, although major props to you for bringing this information out!

  • @nucleartankerion55
    @nucleartankerion55 Рік тому +4

    Thank you for bringing this to my attention, please Keep us posted on when this issue is finally rectified. Due to the information you have relayed, i will refrain from new mod installations to my system, did system check, have deduced nothing out of the ordinary. Thank you a bunch Phoenix, and I request an update if you catch wind of this problem becoming a non issue please.

  • @PhreashContent
    @PhreashContent Рік тому +21

    I feel bad for everyone who might possibly have been infected, I don’t think this will happen but on a rare occasion the dosers get a taste of their own medicine and will be infected themselves. I know a lot of people who are safe from this so thankful my friends and family are fine, hope everyone else is too.

  • @bababagelbrain
    @bababagelbrain Рік тому +1

    I’m not home to check, and I’m worried!

  • @AflyingBanana
    @AflyingBanana Рік тому +5

    this video instantly stroke fear in me since I've been using curse forge very commonly these days, thankfully I am not infected