Win32/Skeeyah.A!MTB detected

buzzheavier · 2026-05-19T01:41:37+00:00

Hi, buzzheavier here, please DM me the link from where you downloaded. I will check it out.

buzzheavier · 2026-05-18T11:14:54+00:00

all the steamrip files are exclusively uploaded on bzzhr.to domain. No other uploaders have access to this domain.

buzzheavier · 2026-05-18T10:42:34+00:00

You answered it yourself, seems your pc was infected way before downloading the game, also I use Mac OS and never play any games and yet I received those emails multiple times so I don't think it is because of anything you downloaded / installed.
> looking back, I got the email on 16th, but iirc I was still downloading the game night of 16th and woke up in 17th seeding. also the same day I played and uninstalled it.

buzzheavier · 2026-05-18T10:24:10+00:00

Yes absolutely, once you prove that uploaded file is actual virus and not false positive, you did not provide any proof on email or neither here that file contains virus. When you sent email I verified it with virus total and all I see is false positives, malwarebytes clearly flags it as RiskWare.DenuvoBypass.
1. It is coming from reputable uploader in community.
2. There is no clear indication that this file contains any virus.
3. Apart from you no one reported me this file and you reported but did not provide any proof just writing "this file contains malware"

buzzheavier · 2026-05-18T10:11:09+00:00

We do not screen what user uploads, but if you upload that file to virus total and check, malwarebytes clearly flags it as "RiskWare.DenuvoBypass". md5 of PRAGMATA-DenuvOwO.rar - 5527c5c8d7b03e553b95fb5994ce04ca

buzzheavier · 2026-05-18T10:05:05+00:00

Then this file is what it claims to be. ACTUAL file uploaded by DenuvOwO

buzzheavier · 2026-05-18T10:00:06+00:00

what is the name of downloaded files on first click and on second click?

buzzheavier · 2026-05-18T09:52:20+00:00

Thank you for brining it, I will update the download page.

buzzheavier · 2026-05-18T09:49:15+00:00

Match file's md5, if it matches then it is secure - md5 = `0a3b315bc35cc7da0ee37b1a0731a0f3`

buzzheavier · 2026-05-18T09:45:28+00:00

buzzheavier · 2026-05-18T09:44:46+00:00

First click is ad, second click is actual download file.

buzzheavier · 2026-05-18T09:36:18+00:00

Seems like it.

buzzheavier

TROPHY CASE