Castle Paradox Forum Index Castle Paradox

 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 Gamelist   Review List   Song List   All Journals   Site Stats   Search Gamelist   IRC Chat Room

Virus in a nightly???
Goto page 1, 2  Next
 
Post new topic   Reply to topic    Castle Paradox Forum Index -> The Soapbox
View previous topic :: View next topic  
Author Message
Ysoft_Entertainment
VB Programmer




Joined: 23 Sep 2003
Posts: 810
Location: Wherever There is a good game.

PostPosted: Fri May 25, 2007 3:37 pm    Post subject: Virus in a nightly??? Reply with quote

OK guys, I downloaded the latest nightly(25/5/2007, native) and it seems that there is some kind of virus in it. I ran game.exe and my computer crashed, and started running a program called dl.exe, which is a form of a virus. So be careful out there. I had to reinstall XP because of it.


The virus itself blocks out the internet connection, and rewrites any exe program it finds.
_________________
Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Blue Pixel
SPY SAPPIN MAH FISH SANDWICH




Joined: 22 Apr 2005
Posts: 621

PostPosted: Fri May 25, 2007 3:39 pm    Post subject: Reply with quote

if the virus blocks out the internet how are you posting this?
_________________
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger
Ysoft_Entertainment
VB Programmer




Joined: 23 Sep 2003
Posts: 810
Location: Wherever There is a good game.

PostPosted: Fri May 25, 2007 3:48 pm    Post subject: Re: Virus in a nightly??? Reply with quote

Umm...
Ysoft_Entertainment wrote:
I had to reinstall XP because of it.

yea
_________________
Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Blue Pixel
SPY SAPPIN MAH FISH SANDWICH




Joined: 22 Apr 2005
Posts: 621

PostPosted: Fri May 25, 2007 3:51 pm    Post subject: Reply with quote

o sorry didnt read that part.
_________________
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger
Rinku




Joined: 02 Feb 2003
Posts: 690

PostPosted: Fri May 25, 2007 8:20 pm    Post subject: Reply with quote

This sounds exactly like the virus Harlock got from SoJ -- that virus too overwrote every single exe on the computer and required a re-installation of the operating system. This is getting dangerous.
_________________
Tower Defense Game
Back to top
View user's profile Send private message Send e-mail Visit poster's website AIM Address MSN Messenger
Kizul Emeraldfire
Type: Cyber Dragoon




Joined: 26 Mar 2004
Posts: 229

PostPosted: Fri May 25, 2007 10:31 pm    Post subject: Reply with quote

D:

Man, I hope it's not possible to get this virus from downloading the revision via Subversion and building it myself. 'Cause that's what I do. >.>
Back to top
View user's profile Send private message Yahoo Messenger
Onlyoneinall
Bug finder




Joined: 16 Jul 2005
Posts: 746

PostPosted: Fri May 25, 2007 11:31 pm    Post subject: Reply with quote

O_O Yikes

I almost began using that nightly, I'm glad I didn't. Thanks for the warning.
_________________
http://www.castleparadox.com/gamelist-display.php?game=750 Bloodlust Demo 1.00

Back to top
View user's profile Send private message Send e-mail
Inferior Minion
Metric Ruler



Joined: 03 Jan 2003
Posts: 741
Location: Santa Barbara, CA

PostPosted: Sat May 26, 2007 12:38 pm    Post subject: Re: Virus in a nightly??? Reply with quote

Ysoft_Entertainment wrote:
OK guys, I downloaded the latest nightly(25/5/2007, native) and it seems that there is some kind of virus in it. I ran game.exe and my computer crashed, and started running a program called dl.exe, which is a form of a virus. So be careful out there. I had to reinstall XP because of it.


The virus itself blocks out the internet connection, and rewrites any exe program it finds.


Bash Terminal wrote:

castleparadox [13:09:49] ~/temp
>wget http://hamsterrepublic.com/ohrrpgce/nightly/ohrrpgce-wip-default.zip
--13:09:55-- http://hamsterrepublic.com/ohrrpgce/nightly/ohrrpgce-wip-default.zip
=> `ohrrpgce-wip-default.zip'
Resolving hamsterrepublic.com... 208.113.136.12
Connecting to hamsterrepublic.com|208.113.136.12|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 814,684 (796K) [application/zip]

100%[==========================================>] 814,684 133.78K/s ETA 00:00

13:10:02 (122.94 KB/s) - `ohrrpgce-wip-default.zip' saved [814684/814684]

castleparadox [13:10:02] ~/temp
>clamscan ohrrpgce-wip-default.zip
ohrrpgce-wip-default.zip: OK

----------- SCAN SUMMARY -----------
Known viruses: 118786
Engine version: 0.90.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 2.88 MB
Time: 31.771 sec (0 m 31 s)

_________________
Back to top
View user's profile Send private message Send e-mail Visit poster's website AIM Address MSN Messenger
Fenrir-Lunaris
WUT




Joined: 03 Feb 2003
Posts: 1747

PostPosted: Sat May 26, 2007 12:41 pm    Post subject: Reply with quote

Which basically means that the nightly, although ridden with bugs, does NOT have a virus in it. You probably picked up the virus from somewhere else. Coincidentally, I've never seen this virus, even after grabbing SoJ.
Back to top
View user's profile Send private message
Ysoft_Entertainment
VB Programmer




Joined: 23 Sep 2003
Posts: 810
Location: Wherever There is a good game.

PostPosted: Sat May 26, 2007 1:01 pm    Post subject: Reply with quote

Well, I guess it reacted when I played pliptamer with the latest nightly. Oh well, perhaps the virus was hiding in my folder and activated when I ran game.exe

The program opened when I opened game.exe was dl.exe in the background of game.exe.

Oh well, I will try downloading nightly again and play it.
_________________
Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Rinku




Joined: 02 Feb 2003
Posts: 690

PostPosted: Sat May 26, 2007 1:19 pm    Post subject: Reply with quote

That's sorta how the SoJ one activated -- it waited until Harlock got near the end of the game, then BAM.
_________________
Tower Defense Game
Back to top
View user's profile Send private message Send e-mail Visit poster's website AIM Address MSN Messenger
Ysoft_Entertainment
VB Programmer




Joined: 23 Sep 2003
Posts: 810
Location: Wherever There is a good game.

PostPosted: Sat May 26, 2007 3:21 pm    Post subject: Reply with quote

Alright, I just tested the latest and its virus free, so in the end it was my computer's fault.

Sorry if this scared you guys, but I just wanted everyone to be safe(and not have to reinstall OS, its a pain in the butt), and my crash really happened due to me running OHR, oh well.
_________________
Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
TMC
On the Verge of Insanity




Joined: 05 Apr 2003
Posts: 3240
Location: Matakana

PostPosted: Sat May 26, 2007 7:27 pm    Post subject: Reply with quote

The virus you described (dl.exe, losing internet connectivity) appears to be W32/Bagz-mm, which isn't a virus but an email worm. Hopefully you didn't lose anything (I assume reinstalling doesn't imply formatting)

And FL, the SoJ virus was only in a nightly copy Fyre hosted separately from the main download. (If I remember correctly that it actually was infected?)
_________________
"It is so great it is insanely great."
Back to top
View user's profile Send private message Send e-mail
FyreWulff
Still Jaded




Joined: 02 Apr 2005
Posts: 406
Location: The Internet

PostPosted: Sat May 26, 2007 8:10 pm    Post subject: Reply with quote

the first Jade virus was in the installer, and that might have been me - the virus attached to it wasn't ID'd until a few months after the game came out, so it's possible it made it by all my scanners.


the most recent Jade virus was infected on the nightly .exes hosted on CP, and they ended up in the nightly because the nightly script just copied the .exes to the .zip
Back to top
View user's profile Send private message Visit poster's website AIM Address
Ysoft_Entertainment
VB Programmer




Joined: 23 Sep 2003
Posts: 810
Location: Wherever There is a good game.

PostPosted: Sat May 26, 2007 8:59 pm    Post subject: Reply with quote

The Mad Cacti wrote:

reinstalling doesn't imply formatting



Actually I did format the harddrive, but I didn't loose anything important, just the script from super trivia and such.
_________________
Try my OHR exporter/importer.
OHRGFX
Striving to become better pixel artist then Fenrir Lunaris. Unfortunately the laziness gets in the way of my goals.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Castle Paradox Forum Index -> The Soapbox All times are GMT - 8 Hours
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group