Possible Virus

GEC: Discuss gaming, computers and electronics and venture into the bizarre world of STGODs.

Moderator: Thanas

Locked
User avatar
Ace Pace
Hardware Lover
Posts: 8456
Joined: 2002-07-07 03:04am
Location: Wasting time instead of money
Contact:

Possible Virus

Post by Ace Pace »

I've got a file here that dosn't want to go away, dosn't list as Spyware, nor viruses acording to differant scans, just sits there, I can delete it, but it comes back in a few days.

I've uploaded it *zipped* to the net, if any of our specalist's can figure it out.

http://alpha.frozenflame.org/me/spider.zip

file name is spider.sav :?
Last edited by Ace Pace on 2004-10-12 01:32am, edited 2 times in total.
Brotherhood of the Bear | HAB | Mess | SDnet archivist |
User avatar
Spanky The Dolphin
Mammy Two-Shoes
Posts: 30776
Joined: 2002-07-05 05:45pm
Location: Reykjavík, Iceland (not really)

Post by Spanky The Dolphin »

Not helpful to your problem, but a tip so that in the future you don't look like an ass:

The plural form for virus is viruses. It is not virii because even though virus comes from a Latin original, it is considered an English word, hence viruses.
Image
I believe in a sign of Zeta.

[BOTM|WG|JL|Mecha Maniacs|Pax Cybertronia|Veteran of the Psychic Wars|Eva Expert]

"And besides, who cares if a monster destroys Australia?"
User avatar
MKSheppard
Ruthless Genocidal Warmonger
Ruthless Genocidal Warmonger
Posts: 29842
Joined: 2002-07-06 06:34pm

Post by MKSheppard »

Spanky The Dolphin wrote:Not helpful to your problem, but a tip so that in the future you don't look like an ass:
How about removing that stick from your ass first? He spells reasonably
well unlike ZOR.
"If scientists and inventors who develop disease cures and useful technologies don't get lifetime royalties, I'd like to know what fucking rationale you have for some guy getting lifetime royalties for writing an episode of Full House." - Mike Wong

"The present air situation in the Pacific is entirely the result of fighting a fifth rate air power." - U.S. Navy Memo - 24 July 1944
User avatar
Sokartawi
Crazy Karma Chameleon
Posts: 805
Joined: 2004-01-08 09:17pm
Contact:

Post by Sokartawi »

Files usually don't come back from the dead by themself, something else is likely to be putting it there.

Judging from the size of this thing, only a handful of bytes, this thing you have there isn't harmful by itself.

In what directory is it hiding?
Stubborn as ever - Let's hope it pays off this time.
User avatar
phongn
Rebel Leader
Posts: 18487
Joined: 2002-07-03 11:11pm

Post by phongn »

MKSheppard wrote:
Spanky The Dolphin wrote:Not helpful to your problem, but a tip so that in the future you don't look like an ass:
How about removing that stick from your ass first? He spells reasonably
well unlike ZOR.
Saying "virii" annoys me as well :P
User avatar
Sokartawi
Crazy Karma Chameleon
Posts: 805
Joined: 2004-01-08 09:17pm
Contact:

Post by Sokartawi »

Looked at it in ASCII, and it doesn't look like code at all, but instead, like it's extension already sais, it's most probably indeed a harmless savegame.
Stubborn as ever - Let's hope it pays off this time.
User avatar
Faram
Bastard Operator from Hell
Posts: 5271
Joined: 2002-07-04 07:39am
Location: Fighting Polarbears

Post by Faram »

TDS-3 don't think anything about that file.
[img=right]http://hem.bredband.net/b217293/warsaban.gif[/img]

"Either God wants to abolish evil, and cannot; or he can, but does not want to. ... If he wants to, but cannot, he is impotent. If he can, but does not want to, he is wicked. ... If, as they say, God can abolish evil, and God really wants to do it, why is there evil in the world?" -Epicurus


Fear is the mother of all gods.

Nature does all things spontaneously, by herself, without the meddling of the gods. -Lucretius
User avatar
Admiral Valdemar
Outside Context Problem
Posts: 31572
Joined: 2002-07-04 07:17pm
Location: UK

Post by Admiral Valdemar »

I third the virii thing. Grammar Nazis and biologists have a duty.
User avatar
Durandal
Bile-Driven Hate Machine
Posts: 17927
Joined: 2002-07-03 06:26pm
Location: Silicon Valley, CA
Contact:

Re: Possible Virii?

Post by Durandal »

Ace Pace wrote:I've got a file here that dosn't want to go away, dosn't list as Spyware, nor virii acording to differant scans, just sits there, I can delete it, but it comes back in a few days.

I've uploaded it *zipped* to the net, if any of our specalist's can figure it out.

http://alpha.frozenflame.org/me/spider.zip

file name is spider.sav :?
Your scanner is looking for "virii", so of course it won't find anything. "Virii" is not a real word. Reconfigure it to look for "viruses."
Damien Sorresso

"Ever see what them computa bitchez do to numbas? It ain't natural. Numbas ain't supposed to be code, they supposed to quantify shit."
- The Onion
User avatar
Rogue 9
Scrapping TIEs since 1997
Posts: 18683
Joined: 2003-11-12 01:10pm
Location: Classified
Contact:

Post by Rogue 9 »

And grammar Nazism saves the day again! :lol: As to the problem, it just keeps coming back? That is odd. :?
It's Rogue, not Rouge!

HAB | KotL | VRWC/ELC/CDA | TRotR | The Anti-Confederate | Sluggite | Gamer | Blogger | Staff Reporter | Student | Musician
User avatar
phongn
Rebel Leader
Posts: 18487
Joined: 2002-07-03 11:11pm

Post by phongn »

While it doesn't appear to be a trojan, virus or spyware, it could be used to save data for such a program.
User avatar
Ace Pace
Hardware Lover
Posts: 8456
Joined: 2002-07-07 03:04am
Location: Wasting time instead of money
Contact:

Post by Ace Pace »

Fine fine, I fixed the virii, wonderful hijack :lol:

And thanks for the analysis, going to check if it has some connection to registry or temp folder bringing it back. :?
Brotherhood of the Bear | HAB | Mess | SDnet archivist |
User avatar
Sokartawi
Crazy Karma Chameleon
Posts: 805
Joined: 2004-01-08 09:17pm
Contact:

Post by Sokartawi »

Probably a dumb question but...

Aren't there any games/apps on the PC with 'spider' in the name or something?
Stubborn as ever - Let's hope it pays off this time.
User avatar
Vertigo1
Defender of the Night
Posts: 4720
Joined: 2002-08-12 12:47am
Location: Tennessee, USA
Contact:

Post by Vertigo1 »

Run Hijack This! and post the log it generates.

As for virii vs. viruses, who the fuck cares? Stop being damned grammar nazis and actually try troubleshooting the problem instead of hijacking a perfectly good thread. :roll:
"I once asked Rebecca to sing Happy Birthday to me during sex. That was funny, especially since I timed my thrusts to sync up with the words. And yes, it was my birthday." - Darth Wong

Leader of the SD.Net Gargoyle Clan | Spacebattles Firstone | Twitter
User avatar
Ace Pace
Hardware Lover
Posts: 8456
Joined: 2002-07-07 03:04am
Location: Wasting time instead of money
Contact:

Post by Ace Pace »

Sokartawi wrote:Probably a dumb question but...

Aren't there any games/apps on the PC with 'spider' in the name or something?
No, nor do I recall saving any savegame with the name spider :P
Brotherhood of the Bear | HAB | Mess | SDnet archivist |
User avatar
fgalkin
Carvin' Marvin
Posts: 14557
Joined: 2002-07-03 11:51pm
Location: Land of the Mountain Fascists
Contact:

Post by fgalkin »

Spider.sav is a save file for Spider Solitaire. :P

Edit: Spider.sav.something, however, is something nasty, so proceed with caution.

Have a very nice day.
-fgalkin
User avatar
Ace Pace
Hardware Lover
Posts: 8456
Joined: 2002-07-07 03:04am
Location: Wasting time instead of money
Contact:

Post by Ace Pace »

Thanks Fgalkin, so that ends the mystery, problem solved, mod can lock.
Brotherhood of the Bear | HAB | Mess | SDnet archivist |
User avatar
Ghost Rider
Spirit of Vengeance
Posts: 27779
Joined: 2002-09-24 01:48pm
Location: DC...looking up from the gutters to the stars

Post by Ghost Rider »

And lock
MM /CF/WG/BOTM/JL/Original Warsie/ACPATHNTDWATGODW FOREVER!!

Sometimes we can choose the path we follow. Sometimes our choices are made for us. And sometimes we have no choice at all

Saying and doing are chocolate and concrete
Locked