Somebody tried to infect my pc using steam (.scr file)

... were you living under a rock, without internet access for like.. whole last year?
They're bots. Their grammar sucks. The links that they provide you are so obvious that it's a scam, that I can't believe people fall for their shit.
Yes, I have encountered them, I have over 200 of them blocked. There are so many variations of them.

Edit:
They're usually level up to level 3, and mostly with private profiles. Do not bother adding profiles like that, and if you do, if he replies within few first seconds of adding him, linking you to some screenshot or something, block him.
They will lie to you that you've won some item from some giveaway. Block them.
They'll say that their friend tried to add you, but he couldn't. Lie as well.

But they're much more rare now, because Valve made it so you have to spend some money on account, before getting ability to add users. I'm not sure how much is the threshold tho.

So I downloaded it

Why?!

I'm sure it was .scr file (a screensaver), it's been a longtime way to infect those who willy nilly click EVERYTHING!
The extension is supposed to be for screensavers, but any exactuable can be renamed SCR and run. Hell, most actual screensavers (at least this was the case in the 90's/00's are malware (back then there were actual viruses!), and pretty much killed off the idea of custom screensavers altogether.

Usually it's someone's account who's already been hijacked. They've often been set to private though so it's hard to confirm much.

I think the thing that gets a lot of people is that when a friend messages you on Steam with such a link then your first thought is not that they're hijacked. I had someone in my friends list send me one of these, someone who usually sends me various links. This one happened to be a phishing one. Then less than a minute later he sends a message telling me not to click the link because his account is hijacked.

Obviously the ones that fall for a link from a completely random person who they first had to accept an invite from are beyond foolish.

The human element is the weakest link in the defense of an account. The previous trick that used to work well was tempting people with free stuff, like a free Steam game if they entered their account details and password at a phishing site.

Also,. not just never open without looking at it, just never open at all, unless you can verify source. There are so many ways to do so as well, HTTPS certificates, md5 hashes and checksums, etc.

This on my Steam profile main page to spread the words.

Viruses Phishing Link (More Info on [url=http://steamcommunity.com/discussions/forum/0/624075036365334065/]Steam Community[/url] and [url=https://www.reddit.com/r/DotA2/comments/2enzhh/]Reddit[/url])

Never click on random sites or download files from a stranger.

And don't forget to report that user.

this is sooo 2013 :3

These damn scammers really hurt my business of selling custom game-themed screensavers over Steam.

Never download such files as it only purpose is to infect you computer with viruses and or malware and or to take over your computer. Basic computer knowledge 101. Also sometimes they make long filenames in the hope the victim will not notice the extension of the file.

The scum and filth that are trying to infect you are counting on things like: you don't know any better or you are busy with something else and not paying attention or that you're curious.... Don't give that scum and filth the satisfaction to fall for them!

Also update regulary your OS, JAVA, Adobe software (fe flash player) and the definitions of your AV and anti malware software.

WHY WOULD YOU EVEN CLICK THE LINK!?

I get such messages a few times per day. Fuck those scammer fucks.

Ever since Steam has implemented trade offers, I have stopped accepting random invites. Mostly ignored, and those who looks like potential scammer are simply blocked.

I really wonder why is this no-calling-out rule in effect for bots too…

Why do people still click links from a stranger...i suspect these same people would be easy to kidnap in real life..hey look this guy is offering candy i must go see him....wait a minute....ooh crap now i am somebody bitch now ,i think i have been abducted help...

You deserve to get hacked for not using common sense,why do so many throw out common sense when using the net...and driving while we are on the subject

I can edit this not sure if you will notice Dno,i am sorry i did not realize i said you,i meant to say They,as in if they click on stuff like that that they are not sure of the person and from a complete stranger is kinda giving a bit to much trust,if it was someone you knew for a awhile and they did this that would be different,you on the other hand clicked on it from someone you never met,granted you caught it,but sometimes you do not get lucky and catch it.

I did not mean someone deserve to get random hacked either,but my point was if there going to click on links from people they do not know they deserve it,look i do stuff that is not always common sense and i have to pay for those choices,i deserved it for doing them as for every action there is a reaction.

Anyhow my point is simple,if the road is really busy and you need to get to the other side and you can not wait till it safe to cross so you chose to do so when it is not safe and get hit,it is your fault...so maybe i should not say deserve but rather there fault,but in the end i still think people deserve what they get when they make bad choices.

Not deserving would be getting hacked out of no fault of your own not because someone was foolish enough to click on a link.I just do not get why some have complete trust on the internet and throw common sense out the window when it comes to interacting with strangers,makes me wonder if they would be this easy to trick in person.

One more thing this has never been a safe world and never would be,if you let your guard down someone will hit you.Having faith that a lot people are still good is one thing,but to have trust in everyone is a foolish thing.