I was trying to download the patch for the video game "Prey" and was linked to fileplanet (I did not realize the "legit" version of fileplanet shut down years ago).
When clicking on the download link, I get sent to a "If the download does not start automatically, click here" page. The file wasn't downloading automatically, so I clicked on the link and downloaded the file.
I've only now just learned this page is a trap and the link leads to advertisement downloads and not the legit file.
The link downloaded a file that was named Prey-v1.4-Patch.exe, but was actually an InstallCore bundler. I ran the file believing it to be a patch; it asked me if I wanted to install ByteFence. I figured it was some kind of bundleware, so I hit "decline" and ran the install for the patch. It spent several minutes installing "something" onto my computer, but it sure wasn't the patch for the game because when I tried running the game it hadn't been patched at all.
Anyway, I became suspicious and ran Malwarebytes, it immediately identified the Prey-v1.4-Patch.exe "patch" file as an InstallCore PUP. I deleted the file and ran a system restore.
I've since gotten the real patch file direct from 3D Realm's FTP server. It looks nothing like the file I got from fileplanet and installs in just a few seconds.
I checked the fileplanet link using an old computer with no valuable data. Turns out it's a complete fake that links to advertisements; sometimes it downloads fake patch files (that aren't even the right size), and sometimes it just sends me to an advertisement site for junk software.
I feel like a complete idiot right now falling for this.
I've since run Malwarebytes, Malwarebytes anti-rootkit, and MSERT.exe. All come up clean, but I'm still worried I may have messed up my computer.
Anyone familiar with this scam? Is it just trying to hard-sell programs like ByteFence, or is it something more malicious like a trojan or something like that? Any help would be greatly appreciated. Thanks.