Anti-Fractureiser

Just in case you don't want to (or don't know how to) manually run the scripts to detect infection from here: https://prismlauncher.org/news/cf-compromised-alert/#manual-check

Makes use heavily of shared scripts and data from here: https://github.com/fractureiser-investigation/fractureiser

Usage

Download and run the exe file as an Administrator.
Click "Run Check" to check for existing malware payloads on your system.
Click "Create Defender Rules" to block access from the known malicious IP addresses and URLs as listed below
Head over here and run the detector to find any compromised .jar files on your system. At present you will have to compile this yourself but I'm sure the dev will release an executable progam soon.

Malicious Entries that are searched for and deleted:

%LocalAppdata%\Microsoft Edge
- \.ref
- \.client.jar (the big one)
- \.lib.dll
- \.libWebGL64.jar
- \run.bat
%AppData%\Microsoft\Windows\Start Menu\Programs\Startup\run.bat
Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Run\t

Malicious IP Addresses blocked in Windows Firewall:

85.217.144.130
107.189.3.101
95.214.27.172
171.22.30.117

Malicious URLs blocked in Hosts

files-8ie.pages.dev
connect.skyrage.de
t23e7v6uz8idz87ehugwq.skyrage.de
files.skyrage.de
file.skyrage.de
qw3e1ee12e9hzheu9h1912hew1sh12uw9.skyrage.de