It looks like the software is not running, however both processes run in the background after that: This item was encoded in a form that’s not supported The next steps of the installation process are looking normal.Īfter installation, a file from the installation folder is run This file contains the malware.Īfter starting, an error message appears and your system is most likely infected.Ī similar message appears when we run the scr files from the media bank. The Krita installer is not signed, which the original installer is.

I do not recommend doing that on your real system, of course. I use a virtual machine with Windows to run the software. The scr files have a different result, more scanner flag those as malicious:īut still, I lot of scanner still do not find the files suspicious yet. scr files, scr files are Windows screensaver files, which are basically. The malware is hidden in the video and promotion folder. The media bank contains several folders and files. The “Krita installer” results are currently quite alarming, only one antivirus software detects the virus at the moment. The first check with reveals that the installer is not the official installer. OK, let us look the first download, the Krita “Installer”. Your system gets infected when you run one of the executable files from the downloads. Since the question came up when the computer system is in danger, the download and unzipping is usually safe. In general, I do not recommend clicking on the links or download anything. The mail contains the download links, currently from “” but before that “krita.io” and “krita.app”. How much does 30-45 seconds of video on your YT channel cost? (Instagram Story, Facebook post) Briefly, we are considering the following promotion option: 30-45 second mention on your YouTube video, Facebook post, Instagram Story. Thank you for your interest in promoting Krita, we appreciate your support. Sometimes there is a download link to some sort of media base in the email, which contains the malware, but often you have to reply. Krita team wants to promote their product in your media space. Hey, take a moment of your time with my message, thank you.

The basic structure behind the scam is still the same, you get an email offering a promotion for a YouTube campaign. Krita.io scam keeps on going, time for an update.

Krita update checker