I’m sharing some executable loot with a less tech savvy friend and while attempting to use reputable sources as per https://fmhy.net/downloading#software-sites . Other than doing that, I also sent them these pointers:
Pointers
Just to reiterate security considerations concerning pirated software:
- Scan the files with your anti virus software. If you only have Windows Defender AND it is updated, that’s mostly enough! Alternatively, upload the files to VirusTotal for a scan, but keep in mind that it sometimes gives false positives: https://www.virustotal.com/gui/home/upload
- Make a backup of your whole system before you install the software, so that in case it contains malware, you can just wipe the whole computer and restore it all. I recommend doing a full system backup to a USB stick or to an external hard drive or the likes. (Search for “backup” in the start menu, if using Windows.) Also, create a so called “bootable medium”, so that in case even the recovery partition of Windows gets infected (which would make you unable to reinstall the system), you can still reinstall. (Search “bootable media/USB” in the start menu.)
- I know it sounds like a lot, but this is the price of “free” software. Unfortunately/fortunately, video and audio files are a lot easier to make sure they are not malware, because they don’t have so called “executable code”.
BONUS
This is not meant to scare you, nor is it exaggeration, just the reality of things:
If I had a Windows PC/laptop, and if I would use pirated software in any serious capacity (work or hobby), I would install the software on a laptop that is NOT connected to the internet (no WiFi, no network cable). I would then use a Microsoft Windows utility called TCPView from Microsoft’s Sysinternals suite ( https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview ) to check what - if any - connections the software is trying to establish. If I see any connections to “weird” or unexpected websites (unrelated to the software, like fishy Chinese websites or such. Also, see: https://cs.rin.ru/forum/viewtopic.php?f=14&t=159345 ) I would BLOCK internet connectivity of the software in my Windows Firewall ( https://windowsforum.com/tutorials/block-specific-apps-network-access-with-windows-defender-firewall-advanced-security-on-windows-10-11.384955/ ).
FINALLY
You are always welcome to ask questions!
What other considerations would you be giving to a near and dear friend whose less tech savvy but for whom you are not - at least at the moment - able to vet the files? Down the line, will start using OS capable containers again, which will make this question obsolete, but until then, please advise. 😊
Honestly, before recommending security practices that go beyond their head I would recommend trustworthy open source as an alternative. There, the only concern is upgrading, like with any software.
I wouldn’t trust most people with being skeptical and thorough enough that it would meet my security baseline/requirements. So I would always make sure they understand risks and consequence risks before sharing concerns and practices - which may very well serve as “that’s too much to consider, I feel unsafe now too” for them. If they end up with “I don’t care”, I at least did my due diligence.
Thanks! 😊 I never thought of that… Great idea! I’ll look around and also maybe post in this community asking for open source CAD (Archicad like) software.
Unfortunately, in 2026 running markedly unsafe code is not for the novice and faint of heart.
Like, my very second recommendation would be to set up and learn to use a virtual machine with KVM, Virtualbox, whatever. Since they’d already intend to run pirate software in the first place, running a whole Windows that you can undo and redo at your leisure provides extra safeties. This also compensates for safeties that running software on Windows directly can’t give you, such as Copilot snitching on you.
It also provides you as the more tech-savy but also less readily available pringao a more even, more deterministic platform and circumstance on which to diagnose issues, even if the end result is “restore the startup snapshot and try from scratch again”.
If I understand you correctly, there is simply no replacement for vetting in a container/VM before handing it over?
It depends on how much you trust the looted content, but overall yeah. And where possible the recipient would also operate the content in a container/VM unless there are important usability/performance reasons not to.
Unfortunately, in 2026 running markedly unsafe code is not for the novice and faint of heart.
Really sums it up then. Thanks! I’ll emphasize the risks to my friend, and the rest will have to be up to them. At least until I can get back up on the VM horse. Too many other projects at the moment. 😅
I reckon ye mean “netlubber” or just “lubber” m8.
I fear if ye can’t careen’m proper hull security, ye might as well own le port.Virus total as a minimum for cracks and keygens. Use a vm too or a specific non networked pc for it. Use multiple scanners and distrust if anything flags. Have backups before doing anything.