View previous topic :: View next topic |
Author |
Message |
Ysoft_Entertainment VB Programmer

Joined: 23 Sep 2003 Posts: 810 Location: Wherever There is a good game.
|
Posted: Fri May 25, 2007 3:37 pm Post subject: Virus in a nightly??? |
|
|
OK guys, I downloaded the latest nightly(25/5/2007, native) and it seems that there is some kind of virus in it. I ran game.exe and my computer crashed, and started running a program called dl.exe, which is a form of a virus. So be careful out there. I had to reinstall XP because of it.
The virus itself blocks out the internet connection, and rewrites any exe program it finds. _________________ Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals. |
|
Back to top |
|
 |
Blue Pixel SPY SAPPIN MAH FISH SANDWICH

Joined: 22 Apr 2005 Posts: 621
|
Posted: Fri May 25, 2007 3:39 pm Post subject: |
|
|
if the virus blocks out the internet how are you posting this? _________________
 |
|
Back to top |
|
 |
Ysoft_Entertainment VB Programmer

Joined: 23 Sep 2003 Posts: 810 Location: Wherever There is a good game.
|
Posted: Fri May 25, 2007 3:48 pm Post subject: Re: Virus in a nightly??? |
|
|
Umm...
Ysoft_Entertainment wrote: | I had to reinstall XP because of it.
|
yea _________________ Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals. |
|
Back to top |
|
 |
Blue Pixel SPY SAPPIN MAH FISH SANDWICH

Joined: 22 Apr 2005 Posts: 621
|
Posted: Fri May 25, 2007 3:51 pm Post subject: |
|
|
o sorry didnt read that part. _________________
 |
|
Back to top |
|
 |
Rinku

Joined: 02 Feb 2003 Posts: 690
|
Posted: Fri May 25, 2007 8:20 pm Post subject: |
|
|
This sounds exactly like the virus Harlock got from SoJ -- that virus too overwrote every single exe on the computer and required a re-installation of the operating system. This is getting dangerous. _________________ Tower Defense Game |
|
Back to top |
|
 |
Kizul Emeraldfire Type: Cyber Dragoon

Joined: 26 Mar 2004 Posts: 229
|
Posted: Fri May 25, 2007 10:31 pm Post subject: |
|
|
D:
Man, I hope it's not possible to get this virus from downloading the revision via Subversion and building it myself. 'Cause that's what I do. >.> |
|
Back to top |
|
 |
Onlyoneinall Bug finder
Joined: 16 Jul 2005 Posts: 746
|
|
Back to top |
|
 |
Inferior Minion Metric Ruler

Joined: 03 Jan 2003 Posts: 741 Location: Santa Barbara, CA
|
Posted: Sat May 26, 2007 12:38 pm Post subject: Re: Virus in a nightly??? |
|
|
Ysoft_Entertainment wrote: | OK guys, I downloaded the latest nightly(25/5/2007, native) and it seems that there is some kind of virus in it. I ran game.exe and my computer crashed, and started running a program called dl.exe, which is a form of a virus. So be careful out there. I had to reinstall XP because of it.
The virus itself blocks out the internet connection, and rewrites any exe program it finds. |
Bash Terminal wrote: |
castleparadox [13:09:49] ~/temp
>wget http://hamsterrepublic.com/ohrrpgce/nightly/ohrrpgce-wip-default.zip
--13:09:55-- http://hamsterrepublic.com/ohrrpgce/nightly/ohrrpgce-wip-default.zip
=> `ohrrpgce-wip-default.zip'
Resolving hamsterrepublic.com... 208.113.136.12
Connecting to hamsterrepublic.com|208.113.136.12|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 814,684 (796K) [application/zip]
100%[==========================================>] 814,684 133.78K/s ETA 00:00
13:10:02 (122.94 KB/s) - `ohrrpgce-wip-default.zip' saved [814684/814684]
castleparadox [13:10:02] ~/temp
>clamscan ohrrpgce-wip-default.zip
ohrrpgce-wip-default.zip: OK
----------- SCAN SUMMARY -----------
Known viruses: 118786
Engine version: 0.90.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 2.88 MB
Time: 31.771 sec (0 m 31 s)
|
_________________
|
|
Back to top |
|
 |
Fenrir-Lunaris WUT

Joined: 03 Feb 2003 Posts: 1747
|
Posted: Sat May 26, 2007 12:41 pm Post subject: |
|
|
Which basically means that the nightly, although ridden with bugs, does NOT have a virus in it. You probably picked up the virus from somewhere else. Coincidentally, I've never seen this virus, even after grabbing SoJ. |
|
Back to top |
|
 |
Ysoft_Entertainment VB Programmer

Joined: 23 Sep 2003 Posts: 810 Location: Wherever There is a good game.
|
Posted: Sat May 26, 2007 1:01 pm Post subject: |
|
|
Well, I guess it reacted when I played pliptamer with the latest nightly. Oh well, perhaps the virus was hiding in my folder and activated when I ran game.exe
The program opened when I opened game.exe was dl.exe in the background of game.exe.
Oh well, I will try downloading nightly again and play it. _________________ Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals. |
|
Back to top |
|
 |
Rinku

Joined: 02 Feb 2003 Posts: 690
|
Posted: Sat May 26, 2007 1:19 pm Post subject: |
|
|
That's sorta how the SoJ one activated -- it waited until Harlock got near the end of the game, then BAM. _________________ Tower Defense Game |
|
Back to top |
|
 |
Ysoft_Entertainment VB Programmer

Joined: 23 Sep 2003 Posts: 810 Location: Wherever There is a good game.
|
Posted: Sat May 26, 2007 3:21 pm Post subject: |
|
|
Alright, I just tested the latest and its virus free, so in the end it was my computer's fault.
Sorry if this scared you guys, but I just wanted everyone to be safe(and not have to reinstall OS, its a pain in the butt), and my crash really happened due to me running OHR, oh well. _________________ Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals. |
|
Back to top |
|
 |
TMC On the Verge of Insanity
Joined: 05 Apr 2003 Posts: 3240 Location: Matakana
|
Posted: Sat May 26, 2007 7:27 pm Post subject: |
|
|
The virus you described (dl.exe, losing internet connectivity) appears to be W32/Bagz-mm, which isn't a virus but an email worm. Hopefully you didn't lose anything (I assume reinstalling doesn't imply formatting)
And FL, the SoJ virus was only in a nightly copy Fyre hosted separately from the main download. (If I remember correctly that it actually was infected?) _________________ "It is so great it is insanely great." |
|
Back to top |
|
 |
FyreWulff Still Jaded

Joined: 02 Apr 2005 Posts: 406 Location: The Internet
|
Posted: Sat May 26, 2007 8:10 pm Post subject: |
|
|
the first Jade virus was in the installer, and that might have been me - the virus attached to it wasn't ID'd until a few months after the game came out, so it's possible it made it by all my scanners.
the most recent Jade virus was infected on the nightly .exes hosted on CP, and they ended up in the nightly because the nightly script just copied the .exes to the .zip |
|
Back to top |
|
 |
Ysoft_Entertainment VB Programmer

Joined: 23 Sep 2003 Posts: 810 Location: Wherever There is a good game.
|
Posted: Sat May 26, 2007 8:59 pm Post subject: |
|
|
The Mad Cacti wrote: |
reinstalling doesn't imply formatting
|
Actually I did format the harddrive, but I didn't loose anything important, just the script from super trivia and such. _________________ Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals. |
|
Back to top |
|
 |
|