This FAKE Fortnite Skin Changer Virus installed itself into System32?
Вставка
- Опубліковано 26 вер 2024
- This FAKE Fortnite Skin Changer Virus installed itself into System32? Today I look at Galaxy Swapper, a fake fortnite skin swapper that claims to be able to give you free skins in fortnite, but is a total scam that steals your session cookies and hijacks a UA-cam channel if you have one.
Follow me on Twitter - / atericparker
Fortnite skin swapper's / changers are inherently dangerous because they require administrator access to your computer, and are made by questionable third parties. This file is clearly a virus that is quite persistent, hiding itself on your computer in the C:\windows\system32 folder.
System32 is a folder containing essential windows libraries and executables, not a virus despite what some trolls on sites like 4chan try to claim. However in this case a virus has installed itself into system32, which shocked me.
This video was created to educate and inform about the risks of malware. I strongly discourage anyone from running any type of game hacks or cracks, or installing a skin changer. These files are very high risk, and can lead to malware infections. Stealer malware such as this one can also compromise banking and other important access on your computer.
More Malware Investigation Videos:
→ Cyberpunk 2077 Highly Compressed: • Video
→ The latest "NORD" Malware - Nordsecured: • The latest 'NORD' Malw...
→🧧VIRUS WARNING🧧 NEW Optifine for Minecraft 1.16 SCAM: • 🧧VIRUS WARNING🧧 NEW Op...
→ The wilkreate UA-cam stealer virus that started this whole trend: • Fake sponsor DESTROYS ...
Much of the music in my videos comes from the UA-cam audio library, especially this amazing music creator: / @patrikiospatrick .
(C) Eric Parker 2021
I feel like these scams would be more convincing if they hadn't all used the same exact video style. All of them have this "professional looking but obviously fake" vibe to them. Flashy thumbnails, emojis and tags in description, password protected archives, videos with annoying music that show downloading and opening the supposed program, etc. Sadly, people still fall for these scams, so we still need to continue bringing awareness to them. Great video!
Agree.
Please stop believing these, I work with galaxy swapper and these fake versions/videos are ruining it. Galaxy swapper is a open source program and if you have any questions just ask.
Bro don’t give me any ideas 😂
@@EricParker It said to turn off windows protection off thats sus
@@victorc7265 it's actually not, there are lots of nonvirused cheats that require you to turn off windows defender, not even only cheats but games need that, it's a false positive,
A note about the virustotal part, a common technique I've found is for the downloaded exe to assemble another exe with the payload with random name and metadata
dwmblurglass v3 was so fire it made my account say the n word
@@Pizzatac discord acc?
There used to be an actual skin changer but epic games pretty much patched them so now people just upload fake videos with viruses.
yes
@@nacereddinehoumadi3845 no
@@nacereddinehoumadi3845 Nah, now there are new ones.
yes
yes
For something with Fortnite in it's name, this seems like a pretty smart piece of malware haha.
If it were smart, it wouldn't run on a virtual machine
@@w4rp3d71 what do you mean???
@@cherrycolareal if it were a well crafted virus, it would detect if it was running on a virtual machine and behave differently as a consequence, perhaps not running at all.
@@w4rp3d71 tbh the dude who made it probably knows the people who use vms are smart enough to realize the videos are faked so he didnt bother
@@dex1522 That doesn't mean that the malware sample couldn't have implemented better measures to prevent dynamic analysis
The first channel you selected seems to be hijacked, since the first two videos are entirely in another language than the last two videos
when you go to one of the skin changer tutorials and go to the comment section you will see that so many youtube accounts posting the same comment at the same time which means that that accounts are probably hacked by scamers who posting that type of videos
Yeah, 10:56 looks like malware indeed. Malware often will block you from deleting entries.
some of these videos dont even try to be fake, sometimes theres like 80 files in the video inside of the folder they're in, but when you download it, theres just some setup that will blow up your router
all of youtube "fortnite skin changer" or "cheat" are viruses
yeah one time I opened a "Roblox Cheat" from youtube and I had my anti-virus on I don't know how it bypassed it but then I had to reinstall windows. Never trusting these youtube videos again
@@RealNoobPlayz mhm roblox cheats are viruses on here unless your actually know what your doing the ones with popular channels and have "roblox cheats" or other that mean the channel got hjacked or token logged in a different term.
3:23 That is because a lot of zip files use AES-256 for encryption instead of the weak ZipCrypto that can easily be bypassed because of serious security flaws.
Game cheats are never worth the security risk.
well to be fair, going into an official game made by roblox collabing with a major celebrity and spamming hitler everywhere is kinda funny, fuck roblox and their scummy practices
Fortnite skin swappers are only cosmetics and you also need in-game cosmetics for them to be swapped out for one of your choosing. But it's only visible for you
Danoct, Flytech, Enderman, Olivers Tech
13:17 i suspect it is modifying itself with each upload to youtube so it ends up with a different hash each time. It would be interesting to run this with procmon to see all the files it drops.
actually it does make sense disabling the antivirus bc it injects into the game and antivirus detects it stuff i recommend checking to know if it is a virus is (is the file bigger than 28mb?, virustotal, or just using anyrun or a vmvirtual thingy and test everything there)
Hi I installed that shit because to sum up I'm just a dumb piece of shit but basically it stole my epic games account and I guess it had also acess to my mail account as it just used a2f immediatly and even deleted all the mails about epic games on my gmail account. I changed passwords on google and ran malwarebytes and trojan remover because it seems to only control the pc on which I have installed it as gmail and google didn't find any other computer on my account. So I was wondering if it is still on my computer and what would I have to do to fully remove it without a reset. I really feel ashamed of myself.
Next time be smart
I have downloaded Galaxy Swapper forgetting to use VMware and got hacked on Reddit UA-cam and some others and my pc was boot destroyed it would Load FOREVER. Luckily it’s an NZXT pc so it has a Built in setting to Revert back to when windows was first installed.
yeah not long ago from the same website as the galaxy skin changer v2 there was also a "OG" Fortnite multiplayer so i downloaded it since it looked trusted because of all the fake discords/reddits that they had and it loaded me into a old version that didnt work and then it made my computer not be able to use the internet i fixed it anyway they blocked my wifi through the setting ands manually changed the IPv4 To random numbers that didnt work and ig blocked everything using firewall
project reboot rift era eon and nova are all real og fortnite servers that are not virus's nova and era are both multiplayer hope this helps
Nova is sketchy af ngl @@Clippzz21
Hey, can you do a video about Project Nova? Supposedly, it's a launcher that makes we play the old version of the game in the video, but it says we need to disable antivirus, is it a virus?
Not clear if it's a false positive, NEVER EVER disable antivirus unless running a VM. I might take a look at the project.
its legit, never disabled my anti virus for it, works, no account has been token logged or stolen, my pc doesnt perform worse either so no miner.
@@EricParker can you check the official galaxy swapper, if it has malware can you remove it and send a non malware version to me?
Its because it puts many servers into the OG fortnite files and windows thinks it's sus so it flags the file
A guy said he'd help me in nova. Sen t me the "Installer that is in the server" I believed him so I turned of antivirus. Next day I wake up and I'm doxxed.
Great and Interesting video buddy...As always👍👌😀
I've talked to wstl on a call before, he was asking for suggestions and showed up the coding and everything that goes into it. super cool guy and I haven't had a problem with galaxy swapper.
The ones uploaded on UA-cam are absolutely malware. There may be a real "galxy swapper" somewhere in the wild, but these are impersonating it.
I don't recommend such software unless you very much trust the author (and know you're getting it from them). The way these hacks work triggers A/V false positives.
do you have a link
Hes a pedo, what are you on?
Wslt is considered a pedo and also put malware on his swapper
hes a pedophile, there is solid proof he also skidded saturn swapper's code, dont use it, if you have reset ur pc :)
Hi, I fell into the same trap, I changed my Epic password but I managed to restore it and I also changed my email password. there is a way to remove the virus
Amazing video! I think more people should be aware of this.
I asked the owner of a website where you can download it and apparently this is a fake one
Btw there are legitimate apps that show up as a virus and you need to disable your antivirus to make them work
That is true, but they are generally what would be considered riskware. I wouldn't recommend doing that unless the app is widely known to be safe and a fp.
In most cases whitelisting the program works better than disabling A/V.
@@EricParkerback when I posted that comment I was the type of person who would disable AV if needed for an app
Now though... Hell no
I'm deleting that app instead
@@Xnoob545 What app was it?
I downloaded that skin changer and I don't have that virus but I sure have one because even tho I uninstalled it and cleaned all the viruses my pc still bluescreens and my Fortnite crashes :(
Rip get antivirus
Just reinstall Windows at this point bro
I got a new ram and it’s all fixed
great work you got here!
a good thing to know the real "Galaxy Swapper" did just now make an update calling itself "Galaxy Swapper V2" which is actually insane and now helps hackers to say they leaked it early 😿
I’ve used this swapper before and got my UA-cam, epic, google, steam account all hacked. Had to restart everything.
yeah same luckily i got all of it back tho
also sorry man it really does suck i don’t even trust my pc anymore and i didn’t even run the skin swapper i just downloaded it’s files. I’ve already reset my pc but i’m scared. do you have any tips when i do virus scans nothing comes up as a threat.
@@dahmirx you download it from discord?
the real youtuber guy was just using a glitch in the game with "skin changing booths" :D
How do u not get a virus when u do it? I got like 20 viruses when I tried to do it
dont do it. thats the point ov thr video
The reason, why you only buy from trusted sellers/resellers and providers
Hello I’m very late but yesterday I did install a skin swapper virus but my windows defender and malwarebytes anti virus were still on, when I downloaded it I reset my pc and the file was gone. Was it cause it hid in my pc or because the antivirus deleted it? (I let the virus run as administrator)
Can't say for certain. I strongly recommend changing all your passwords and checking startup files.
@@EricParker alright thank you so much
@@EricParker hello is there any way you can go through my pc and help me find out if it’s infected because I’m very worried and need to find out through a professional
@@youssefkk7454Holy crap don't ever let a stranger go through your pc. just reinstall windows
look at my account, i downloaded something for valorant when i was high and they uploaded the skin thing for fortnite on my acc😭
Strongly recommend deleting those videos, UA-cam might terminate your account.
@@EricParker i was waiting for someone to say that
the dumbass i am when i tried to download skin swapper i never like clicked the link in the download folder but when i was trying to delete it then it said that it has been detected 2 apps that i cant see. but then i got kicked out of the download folder and when i came in again then its said the link is gone but when i was scanning for viruses then no viruses was found. soo what do you think i can do???? do yall think im ok???????
Basically yes because windows block the virus so the virus is not downloaded to you pc
"My little workshop tour"
Windows defender can be annoying when trying to keep demos downloaded off of pouet…
i know this was 2 years ago but, GS is not a virus(the official one) if u download it from a youtuber then yes most likely it is but the official one from the discord is completely safe and iv been using it for years with no problems on my pc
Same thing happened to me, got hacked by the malware lol
Same
twinnin my epic games account is currently compromised 😮
I downloaded it and deleted it luckily and it has been 1 week so im chilling 😅
Underrated video and channel!
I have a thing when I download smth like an virus it says there’s a virus on it with out virus defender off my pc is so nice😊😊😊😊
9:09 This is how i downloaded go to assist to my host while running a VM and proceeded to have a scammer connect so i could scam bait him, little did i know he could see everything, and probably copied files too lol.
It's five years on anyways and nothings happened but damn what a careless kid i was :p
2:24 - so, how can you do this without getting a strike? And I see a lot of people doing this, but the video doesn’t get taken down or anything.. How?
you can get it from the official discord server or the legit guy from yt his name is WSLT he is the creatoer of the thing
for the first skinn changer u can install it without any viruses and without disabeling ur windows protector
Hi, I was silly and fell into this trap, but as soon after downloading it i realised and downloaded tronscript and ran it. However I still lost all my accounts, I checked rn and there was no file im so confused
It mean that window deleted for you
Hi man fell into this trap aswell will this get my parents info? I am really scared for the past month
@@youssefkk7454 no
@@Rex_gt thanks 🙏
what is tcd and chrome bits i have the 2 installed help???
Bro I downloaded one and I got a email saying that if I don’t send them 10 bitcoin they will share all my passwords
They will likely share all your passwords anyway, just change them. 10 BTC is over $200k.
Did he say task **shejular** lol btw good video
Hey so i fell for the same trap and it changed both my epic email and password and support will not work and every time it does it auto deletes the epic emails anybody find a solution? there has been someone in my account for two days now.
Reinstall windows or be clear to remove the malware, then change email passwords.
i was infected by one of these once
What is the amazing song? I noticed it at 7:18 and was grooving.
Know myself by pacurka
I installed it it was a virus 😢 and now they have my info
Oh noo… i had a virus too on my phone 😢😢
hey is galaxy swapper v2 malware ?
What do you think?
yes it is
Can we just talk about this guys accent I keep hearing American and British everyone word Is different😂
i started downloading it but then i canceled it did i get a virus like i did not open it and i checked a task manager and saw nothing bad so i need help
if you didn't run the file you are safe.
@@EricParker ok thank you
Bro i installed this skin changer and the hacker made a malware on my pc and stole all my accounts like google or epic games what Do I have to do to remove the malware and everything man im frustrating
Delete the files, run Windows defender and change every password.
@@EricParker i deleted the files and did the boot scan but the files reappear after i reboot what do i have to do they dont go away
Hey man quick question will my parents get hacked in anyway I’m panicking a lot
@@youssefkk7454lmao
zip files with too high compression algo do not function with windows native.
The timing of this comment. They just dropped supoort, no?
Could you make a video on how to remove the virus?
Delete the new files. Enabling Windows Defender seemed to work as well.
I am going to make a more broad video on removing hidden malware from auto runs.
@@EricParker hi, yeh I got it removed but unfortunately my fortnite account got hacked and I no longer have access to it
Personally I changed every password and factory reset
Can you do a video about the real galaxy swapper?
I would really really recommend not installing these kinds of things. Where would I find the real one?
they have a discord
@@EricParker
If people were posting normal videos than it’s a bot hacking the account it happened to me
i removed that from windows defender and was the original one but i removed because i think the original one dont have virus but i dont trusted and removed from windows defender
you recommend bitdefender antivirus?
It's one of the better ones. I personally don't use 3rd party antivirus, but bitdefender is one of the good ones.
You know i downloaded a fake skin changer i didn't know it was fake and my pc went off i go to antivirus and removed the virus but my fortnite account got hacked and epic doesn't help me
Happened to me but I was quick to act and changed the passwords and factory reset my pc
all you have to do is email epic and explain that your account got hacked they got my account back within 48 hours.
Please tell me you are using a virtual machine
he is
i know the guy who made galaxy swapper we notified the police of his exact name and location and provided evidence but they didnt do anything at all even after submitting a report on him so hats off to duthc police i guess
Imagine calling the police over an online hack, get a life
@@GodOfAzeroth69 says the furry
@@GodOfAzeroth69Dude, its a password stealer, which can contain bank account information, why wouldn’t he?
@@GodOfAzeroth69You're right. Supposed to call the FBI for hackers
Hello I fell into this trap and I’m wondering is there any way it can hack my wifi and put malware on other devices (it’s been 1 month and a half all it did was hack my gmails)
How u doing now g
there is malware that can do that
Galaxy swapper v2 isn’t a virus and I use it myself
your fucked! :)
Got some bad news bud
Hey i have a question when i install minecraft optifine on a real site why it says it may harm my device?
Chrome says "may harm your device" in reference to any executable file.
@@EricParker oh ty i didnt know tysm
I can now install a optifine without any worries
I have one more question when i install it i drag it in minecraft but it doesnt let me play the game and i gotta restart every time i try bc its gonna say i alr am playing
I downloaded it but i had my windows antivirus on am i safe now?
No
Недохакеры LITE для английской аудитории?
I downloaded that from a random but nothing hapend?
Congratulations you have malware.
but one chanel dont fake it its frost live 😁👍
What about galaxy swapper from discord
If its the Official discord your fine
the only skin changer that is trustable is galaxy swapper v2
it's just a renamed galaxy swapper which is the virus
pachycephlous is a dinosaur which is a strange name for a file 💀
Its 1000 times harder to get accses to the windows apps folder (where the things you download from the microsoft sore are) than to turn off windows defender
i hope you are using a vm
I fell for it and now i have like 5 viruses :(
How could you fall for this?
anyone know if project nova has virus?
I think it’s safe, but I’m not 100%. It’s hosted on their private servers, so it’s allowed.
is it possible to delete the virus?
I very strongly recommend reinstalling Windows (resetting your PC) if affected. A few of these samples have multiple tricks to hide, and it's not usually worth the risk.
You can try using sysinternals autoruns to find any automatically executed software.
imagine searching for cheats to download from youtube, xDD
I have galaxy skin changer but it's a very safe app because I got it from a safe freind
i installed this software and i can't get into get into a public game now:(( do u have any fix for this?
It’s a virus. This video proved how it’s a virus and what it does and how to delete it.
I got tricked, I downloaded it, what do I do now
btw, I already got an email from the hacker asking me to send him money ：（
can u edit the file ? so we can't get virus
the file is nothing but a virus, there is no such thing as a skin changer.
@@EricParker can u remove the virus?
@@02i0 I think he can, but idk why you would want a blank file
galaxy swapper v2 is virus ?
Every single swapper is a virus, or fake.
i actually use galaxy swapper v2 and it doesnt have a virus
i used galaxy like 3 years ago and I got banned bro dont use it
@@riogbr i stopped using it
Fordknight
Pro tip: Maybe download the skin changer from their own website next time? not some random virus from a youtube video🤣
I am aware there is apparently a real version o fit floating around.. It is a best riskware, I made the video so that people searching for it on UA-cam would find this video instead of the fake downloads.
pro tip don't download dumb malware
you obviously spent time looking for this product and have some kind of malware lmao
About the “it should be harder to disable defender” thing; no. Defender is an obnoxious spyware program (automatic sample submission) masquerading as an antivirus. It’s already hard to disable compared to other antiviruses and real time protection, atleast on my version, cannot be disabled permanently; only for a “short time”. Without third party software, you cannot permanently prevent defender from messing with your files. That is malware.
would getting a new boot drive with a new version of windows fix this?
If you just reinstalled windows that would fix it. Don't need to get a new physical drive.
Should i get galaxy swapper or not cause it looks cool
@@roofe5915 dont get any it drops fps and its a virus
@@Synxy21Saturn swapper ain’t I have it and I’m chilling
@@Joshy-e3o but still im not gonna do it + if they find out u will prob get banned
@@Joshy-e3owhere did you download it from
where did you get it from
@@Joshy-e3o
I have a question. Is galaxy swapper v2 from the official discord it’s an open source a virus? Please do a video on that I downloaded it before and it works but idk bro
its a rat, so yes, it is malware. saturn is the only legit swapper (you dont need to disable anything as long as you get it from the server)
@@aquamxrine i dowloaded it from the offcial server
where do you find saturn swapper@@aquamxrine
there is a legit galaxy swapper i actually have it
is it a virtual box if not ur freacked
this guy uses a VM, yes
no bro the guy that deals with viruses for a living ran a stealer on baremetal
The lesson i learned from this video was, DO NOT TRUST ZIPS THAT REQUIRE A 123 PASSWORD TO ACESS
Bro this is not.the official site like you downloaded from hacked yt account
I'm pretty sure I mentioned in the video it was a hacked account. I am currently investigating whether there is a legitimate version of it.
@@EricParkerI think theirs like 50 “official” sites, and theirs no way that you can change remote databases (for cosmetics) unless you’re a insane hacker, finding glitches in a mega corp.
Hey there. I’m a legit hacker for Fortnite and with my cheat it is required to have win defender disabled with dcontrol. Spectre protection must be off. Firewall settings disabled. Exploit protections disabled. This is also the case with my spoofer. Sounds super scary sounding but if you do your knowledge it’s not as scary when the program you are using isn’t a rat/virus
Also gotta point out. 99.9% of the videos you look up for cheats spoofers skin changers are all scams with rats UA-cam isn’t the place to find these things.
I believe you
with 90% of stuff like offical skin swappers need u to turn off ur anti viruses same with other game cheats because it usally has a file named trojan to access the game files
The term is false positive. Anything that injects will upset av.
13:24 😂
Andrew tate v2
lmao
fax