⚠️⚠️⚠️ATTENTION❗❗❗ The new virus in the cracked version of Project Manager (3Ds Max)

Vasyl Lukianenko
3D Artist and Technical Author

Date: September 10, 2021 Updated on: April 4, 2023 Reading time: 4 min Views: 505

Project Manager by K-Studio is a great plugin for organizing your local library. But have you ever thought that by downloading the free version from Torrent or Chinese sites, you can become a victim of cybercriminals?

Locker is a typical ransomware virus that encrypts files and paralyzes your work.

Hackers from China have bypassed the license protection, added the Locker virus and are distributing the free version of Project Manager on various resources on the network.

By installing such a modified plugin, all recently opened 3Ds Max scenes and models (* .max) will be encrypted and you will not be able to open
them via File → Open, File → Merge or by double click. You can open files only through the fake Project Manager, for which you have to pay!

Chronology

On September 8, 2021, there were complaints from several users about problematic 3Ds Max files that cannot be opened.
Later it turned out that the files are encrypted and can only be opened through the Project Manager downloaded from one Chinese resource.

Analysis of the encrypted file showed that it contains Persistent Global variables, which indicates the possible presence of a script virus.
The size of the encrypted * .max file is several megabytes larger.
When trying to open an encrypted file using any of the standard methods, we we see the error:

The exact extent and regions that were threatened have not yet been clarified.
The malicious code was sent for study by our friends from ESET.
Therefore, the full report will only be available after analyzing the code.

At the moment, the developer of the Project Manager, Oleksandr Kramer, was notified of this incident and is actively helping in solving this problem.

Attention!
If you do not want your work to be paralyzed, do not install Project Manager from unknown sources or Torrent!
Install only licensed software from the official K-Studio website: https: / /3d-kstudio.com/

To avoid getting infected, follow the instructions below.

Protection

At the moment, there is no protection at the Antivirus or Prune Scene level.
But nevertheless, there are a number of characteristics by which you can determine or you have downloaded a malicious Project Manager installation file.

Sign 1:

The file name contains Chinese characters.

Sign 2:

If you rename the installation file and specify the file extension instead of * .mzp to * .zip, you can open it with the archiver and see the list of files.

Open this file with WinRar. If the file PM3StartRun.ms is in the list, then your version of Project Manager has been changed by hackers!

Sign 3:

If you already have Project Manager installed and you are infected, then * .max files will not be opened via File → Open.

Summary

Fake Project Manager Locker is a rather dangerous modification of the original K-Studio Project Manager plugin. Ignoring simple security rules and unwillingness to buy licensed software can lead to the loss of your data, scenes, models and stop the workflow.
Important! Download Project Manager only from the official site.

For those who have been infected, unfortunately, there is still no solution to eliminate the consequences. But we are actively working on this with ESET and the developers from K-Studio.

This article will be updated as various information becomes available. Stay tuned!

FAQ

1. What is this article about?

This article warns users about a new virus discovered in a cracked version of the popular Project Manager plugin for 3ds Max.

2. Why is this topic important for 3ds Max users?

Many professionals work with valuable client projects and business data, so a malware infection can result in lost files, downtime, and financial damage.

3. Which version of Project Manager is affected?

The article refers to unofficial, cracked versions of the software distributed through unauthorized sources.

4. Can the official Project Manager contain this virus?

No. The article specifically addresses modified pirated versions and does not refer to the official release of the software.

5. What are the risks of using cracked software?

Users may be exposed to viruses, trojans, data theft, system instability, security vulnerabilities, and other serious risks.

6. How can the virus get onto a computer?

It is typically distributed through untrusted downloads, torrent websites, file-sharing services, and unofficial software repositories.

7. What consequences can an infection have?

Possible consequences include file corruption, loss of access to important data, information leaks, and reduced system performance.

8. Why are 3D artists particularly vulnerable?

They often work with large collections of models, scripts, plugins, and third-party tools obtained from various online sources.

9. How can users reduce the risk of infection?

By using official software, keeping systems updated, and scanning downloaded files with reliable security tools.

10. Should third-party scripts and plugins be checked before use?

Yes. Any files obtained from unknown or untrusted sources should be carefully verified before being installed or executed.

11. Can malware spread through project files?

Some malicious scripts and infected assets may be distributed alongside project-related files and resources.

12. Why is it important to keep software updated?

Updates often include security fixes that help protect users from newly discovered threats and vulnerabilities.

13. Can antivirus software help prevent such infections?

Yes. Modern antivirus solutions can detect many known threats and identify suspicious behavior before it causes damage.

14. What should users do if they suspect an infection?

They should immediately scan the system, isolate suspicious files, update security software, and perform a full malware check.

15. Why is licensed software generally safer?

Official software is distributed through trusted channels, receives regular updates, and is maintained by the original developers.

16. Who is this article useful for?

This article is useful for 3ds Max users, studio owners, technical artists, freelancers, IT administrators, and anyone who uses third-party plugins, scripts, or tools in their workflow.

Vasyl Lukianenko
3D Artist and Technical Author

Vasyl Lukianenko is a 3D artist and technical author focused on practical workflows, optimization, and production-ready techniques. He publishes tutorials, courses, and tools to help artists work faster and get cleaner results.

Latest articles

This can be interesting for you!

Comments ({{comments.length}})

No one has posted a comment yet

{{comment.text}}

Delete

Top

Chronology

Protection

Summary

FAQ

Latest articles

{{r.name}}