FPS Booster - If you tried to run this "mod", change your passwords

[piotrulos]

If you download and run that file, change your passwords. It was chrome password stealer. You just got fake message about corrupted files.
At least 50 people downloaded it before it was deleted.

Decrypted and decompiled java code from virtual machine as a proof:

You should always be careful when running exe files that has "shield" on the icon (it means that it requires admin privileges). None of the mods needs that privileges.

 

[MrZedx]

Do that, the guy who uploaded the FpsBooster "mod" is an asshole. Why would he even do that?

 

[iwin212]

Exactly why you should NEVER save passwords. They WILL get hacked. Don't think antivirus will always save you from this. It got passed mine so the only thing that saved me from this was because I don't save passwords.
If you have the file on your computer, delete it.
You should also change your windows password because it uploads your SAM. (the thing that controls windows passwords)

 

[iwin212]

AND AND AND …… On discord, we took turns hacking the **** out of his dropbox. All of his online files are deleted. This is what happens when you pull **** like this.

 

[MrZedx]

Yeah that happens. Some people are idiots.

 

[piotrulos]

Mr teflon (or whatever his name is) got a nice meme gift spam at the end and revoked dropbox key. So his fake mods (MSC wasn't only the target) will now fail to send data (unless there is second place it sends data that we missed during analyzing)
But everything he got, he probably still has. If affected people changes their password quicker, then it's better.