A false page pretending to be sora (scam!)

I fell for it too, usually don’t fall for that type of thing, so embarrassing! :pensive:

I also lost my FB-account along with Messenger which is important in my job. I’m currently trying to convince Meta that I’m not the one who did such horrible things that deemed me unfit for Facebook, and got my account suspended… Not fair…

Anyway, is there any malware-scanner or tool who can detect this sort of thing? I mean there’s probably some evil thing hiding in my computer right now just waiting to eat my sweet sweet personal information or worse. I ran Malwarebytes and Avast (and Windows Defender) but with no results.

Consider this my cry for help🙏🏻

I reported these guys to Hostinger where they are hosted and fell for the fake site as well. I clicked on a link from a Facebook ad, all comments in the ad were hidden. Reported to FB as a scam.

me too got it in facebook , i didn’t execute it cause saw signs, and here i am finding out this, thanks

i´here cause this ; Final Build x86-64_signed.exe, i was just looking to be on the safe side before running it …did a google little research

I am reporting this scam over and over on Facebook and they just don’t seem to care. Saw it already in two or three versions hosted on different domains. And Meta is always responding they don’t see anything wrong in those sponsored posts. I guess money doesn’t stink for them

Hi, there are many fake sites with many different install versions.
For instance with the file setup_build_x64.exe virus total detected a malware.

Antiy-AVL: Trojan/Win32.Agent
Avast: Win64:SpywareX-gen [Trj]
AVG: Win64:SpywareX-gen [Trj]
Bkav Pro: W64.AIDetectMalware
Fortinet: Malicious_Behavior.SB

I suggest installing and running all these antivirus.

Please share your results. Good luck!

My results are knowing there is no Sora release and especially no download, and remaining virus-free without passwords stolen.

If I understand correctly, detection by one antivirus is not enough?
I’m using AVG and it deleted WIn64. SpywareX-gen. but does this mean that other subsystems of this virus still work? Or different antivirus programs detected the same threat under a different name?

You know how fix it? I made the same mistake :frowning: I delete all, include in the trash can, but I need to uninstall something?

I’m sorry by my bad English, help me, the suspend my Facebook account :frowning:

You will most likely have to contact Facebook about that, it’s unfortunately not something we can help you solve here :sweat_smile:

Thank you. I uninstalled and deleted everything from the recycle bin and restored the system, but I’m afraid that it may have accessed other applications on my laptop. At the moment the problem was only with my Facebook account. Do you think a system restore is enough? Do you know how I can check if it affected other applications?

1 Like

A system restoration is always a good idea in situations like these, but you should probably go through and change your other passwords as well. :sweat_smile:

This reminds me that the other day is scammer called me the link me that my credit card was used. He didn’t knew I don’t have a credit card. I tried to make him understand that what he was doing was not honest, but he kept playing the role.

As an economist I scientifically explain this by the need of obtaining a monetary compensation, within the logic of an exchange system.

It is so obvious for everyone, because we where all born in an exchange system, that we are not thinking about it.

Most of the time, when it comes to evaluating the cons of AI, at any level, it is always related to misuses motivated by capitalist motivations…

I acknowledged this is my own personal perspective and I apologize for bringing this political question in this forum, which may the seen out of place.

However when it comes to scamming, we are not just talking about one exception, there are really big mafias behind.

As programmers you ensure that the systems are secured, but the scammers use “social technology” to break the security… They do it because they’re in the obsessed pursuit of money, regardless of ethical considerations.

Anyway… Sorry you got a virus… This will be recurrent within a capitalist system…

1 Like

another false page was found I think a lot of people will get scammed on it
www_sora-open_pro

Hello, some time ago I downloaded a “google bard exe” from a very well made website. I couldn’t find any executable app on my system and ignored it. A month later, a Facebook page I manage was hacked and I saw a new user that I couldn’t delete. Then I googled the issue and found out it was the evil bard :). I started a meta campaign and saw that my credit card was used to pay another fb add. I tried deleting the user but it popped up again. Then I used several antivirus apps, the ONLY app that identified the “google bard virus” was COMBO CLEANER. I deleted the files and was able to delete the user on the meta-add campaign. this looks very related

I found a page advertised on FB today. And I downloaded it and first checked it at totalvirus… all clear, so I ran it. It opened up a shell window for a second and then it closed. Then nothing. At that point I got suspicious and so I fear I installed this monster.

fakeurl

Can someone verify this is a fake address (last time I trust FB)

And can someone tell me how this thing affects my PC. Windows defender did not pick up anything but I’m sure this is not a SORA file (named sora.exe / 33.4 MB). How do I figure out if Im infected and what can I use to even detect / eradicate it ?

Thanks

This is definitely a scam:

  1. It’s not the official openai website (openai.com)
  2. You wouldn’t need to download Sora to use it, it would all be on a website
  3. Sora is not released to the public yet anyway.

Always run ANY .exe file you downloaded through virustotal first. Especially if it’s from Facebook ads, which are notorious for being scams.

Usually, malwares like this one mainly just steal your internet cookies so they can log into all your accounts. Make sure you change all your passwords, back up your data, enable two-factors authentication, and reinstall Windows to be sure. They could potentially install other stuff as well, like a backdoor or a keylogger.

Again, NEVER run a .exe on your PC without scanning it first.

1 Like

I got a facebook ad that linked me to a false sora download, I thought I was immune to scam

I was scammed by a company called A.I Tubo they pretend to be Sora and I didn’t know Sora was unavailable so I registered. Here is their website on google pretending to be Sora. I have contacted Paypal and trying to get refund.

any idea if restoring my PC to an earlier version would help?
will this virus spread to other discs?

1 Like