A Big Warning to all who play Pservers!

01/16/2010 05:40 lustdemon#16
Quote:
Originally Posted by DarkHuntress View Post
I also got the win32parite virus. It infected all program files and windows files. It has taken me a long time to get it cleaned up. This was not the fault of the Owner of the game. He found out about it and immediately put out a new client. I have downloaded other clients that showed a virus and nothing happened because the antivirus software just thought it was a virus. This time the virus was real and came from a patch. Everything is fine now and the new download is clean. lustdemon this was a one time incident since I have downloaded and played many pservers. Do not generalize since I am not aware of any other pserver having this issue. Owners would not intentionally give their players a computer virus. That would not make any sense at all.
What did you use to get rid of it pm me this info please :)
01/16/2010 15:37 DarkHuntress#17
I sent you the information you requested. Please let me know if I can be of further assistance.
01/17/2010 07:55 PowerChaos#18
i like to give a nice response on this here

why does every1 complain about this ??

they sended a link a few posts back before my post ( other page) with a link to the explanation

do some1 read it ?? i guess not

let me quote the best part of that text and when you are sure you got a virus (its harmless it just incrase your hd usage ... it doesnt even change your files -.- )

Quote:
Originally Posted by bitdefender win32/parite
If in your exe files the last section name is .jbd or .xgt or something like that, then it’s probably a file infected with Parite.

The virus does not damage the file it infects.
as long that is not in your file then it is mostly a false positive

now , wanna know some other funny part
the reason why it give it is because of the client , it is not a original size (ey , same as keygens and cracks of games o.O , most of the time it are win32 parites to :D)

and it doesnt match the original checksum of the file , so it says that it is infected when it is just a edited file

well , thats what a virus does basicly , editing your file but doesnt generate a fresh cecksum

well , i forgot to thell you the funny part

go to a only webscanner
the 1 that got 15 scanners online for a single file

scan your exe file called soul.exe from your private server
and do the same with the original (yea , 1.2GB download to test it :D)
now , exept a few differend things and a few other virus warnings will you notice 1 thing in common

guess what , they both contain that virus and only 6 virus scanners says that warning

size difference = 1 mb
virus warning difference = 2 virus scanners doesnt report it with the original client when it does with the private version (chinese version) ,

and to safe you time for scanning
take a look at this table , special for you is it a already done virus scan of eo

[Only registered and activated users can see links. Click Here To Register...]

and if you find a difference betwean those 2 , let me know

enjoy the list
Greets From PowerChaos
01/17/2010 15:59 DarkHuntress#19
I really did not understand what you were saying except the part about it being a false positive. That would be incorrect. It infected my whole computer. I could not open programs for it infected my program files. It whiped my icons along with my taskbar from my monitor so I could do nothing. It infected my windows files. I do not consider this a false positive. I have experienced viruses before that were nothing. It was because of the packing. This one is different. You have to reinstall windows to get rid of it completely. So what are you saying?
01/17/2010 16:24 PowerChaos#20
well, that you are 1 of the persones with bad luck
and that it isnt the win 32 parite that dit it

the win32 parite is harmless if it infects you
it only change size of your files so your files are taking a lot of space

as example
you got 100GB hd and 50GB files on it
with the virus you use 75GB space instead 50

thats the only thing it does
it makes your files larger but it does not do any harm for the rest

so the virus you got of that delete icons and other stuff is a other virus

the strangest virus i ever got was a virus on xp that keeps changing your password all the time (nice virus) and a irritating copy virus (keeps looping your directory's with copy's of copy's of ... , so you see your c:/ on your c:/ drive , open it and you see it again with same dirs and that on a looping so it never stops )

if you check the last link i sended , the virus scan link
then you see that those 2 files are the same , exept on size
they both got the virus in it , only norton and other virus scanners does not reconise it anymore as a w32/parite on your pc

but like you know to , not every file is the same
some releases contains a virus like the mannequeen version
game runs normal , start up a mannequeen and your computer freeze by a 99% cpu usage

then the other point i mean

the best example i can give is navicat , it is the most used program for our developers
some use the light version , others use the premium Cracked version

if you scan the cracked version then you get differend virus warnings (trojan generic)
and even the win32/parite is sometimes found on it

but they are harmless to

and now the best example
if you got norton virus scanner
try to download a crack of norton and you will see that norton starts to flame at you with a realy big virus warning
scan the same file with a other virus scanner and it says that it is a trojan generic , and scan it with a other virus scanner and it doesnt say a thing

the point i mean with all this is that there are a lot of files that got false positive because they does not match the original file (edited) like a virus does
or it got register changes into the exe file , same as a virus does

but they are just harmless , most of them
not all of them

if you got some spare time and realy want to test it then do it this way

1) install 2X a clean windows on 2 differend computers
2) install the client with the win32/parite virus on 1 of the computers
3) start benchmarking and 1 week later , see the results

result : no change , they are both the same

a virus will be noticed instand , it does not wait 1 week to become active
exept the jowood virus (not sure of the name , prevent you from booting up after XX restarts) but that doesnt even get reconised as a virus because it is a small registry change on windows xp (like windows activation)


to explain the eo file
just check the link and check then the file info on it
you see that nothing match original , so it is modified
[Only registered and activated users can see links. Click Here To Register...]

ps: i dont know how i can explain it the good way that it does not harm :s and that only a few files are positive and 95% are false positive

Greets From The Crasher
01/22/2010 00:30 Crazy123456#21
Quote:
Originally Posted by hio77 View Post
well what did you download from here that did that?
i bileive it was a server db and client forget wich one tho
01/23/2010 02:15 DarkHuntress#22
I was not one of the few unlucky ones. Numerous people got the same virus. It attacks your main systems not just the game. Program files and Windows system. Each time I tried to do anything it through up an error saying the file did not exist. Some were simple programs others were OS systems. A false positvie non-virus does not whipe out your icons and taskbar. The problem with this virus is that your anti virus puts it in a vault but it is a file needed to run your OS. Which is why you have to restore the infected files then clean them with the tool specified for the virus. Finally you have to just reinstall windows. Like everyone else, I also have seen false/positives due to the packing of files from a download of a game. Sadly this was not the case this time. Thankfully the owner realized what had happened and immediately uploaded a new client. So this would not happen again. However I have never recieved a virus of any kind from this forum.
01/23/2010 04:33 PowerChaos#23
well , i got 1 time a virus and not the false positive

its explained in my post i made with the solution what it exactly infects and its easy to get rid of it (only takes hours if you got more then 1TB of files)

the win32/pariteB virus (the 1 found on this forum , and mostly false positive :P)

it infects all your exe files ,
what does it do and how to know that you have it

well , it prevents the programs from running , or you need to re install it
it adds a small part to the file so the file isnt normal anymore and cant be run anymore
and takes up some space

for the rest it doesnt do damage , easy to remove with the right tool but just anoying that no files will run (ddl and exe files) because the program crash because of it

even more fun , some files still keeps working , and other files like msn refuse to work , to deinstall or whaterver that a exe file need to do

but basicly it doesnt harm so mutch and you notice it when you got the real 1 (you will figure it out fast enouf if nothing is working anymore after reboot or after first launche)

only downside of that virus is that it stays in your memory , but easy to heal

after i dit the scan on my computer , and 99% is healed
only the files on my removable hard disk are deleted , tehy coulnd be healed because it was inside exe files (some false positive to :'( ) so i lost a few files
but my windows is still fine and working like always

well , if you ever got a virus from this forum then it can be the win32/pariteB , then just download this tool and it should be fine (worked for me :D)

[Only registered and activated users can see links. Click Here To Register...]

its a file from avast virus scanner , called Virus Removal Tool
its freeware , its small and it does his job , but it isnt a virus scanner and only remove the win32 variants of virusses ( about 300 virusses that starts with win32, like the win32/pariteB)

wel , lets hope that this can solve a lot of problems then :D

Greets From PowerChaos
01/23/2010 11:16 funhacker#24
Quote:
Originally Posted by The Crasher View Post
well , i got 1 time a virus and not the false positive

its explained in my post i made with the solution what it exactly infects and its easy to get rid of it (only takes hours if you got more then 1TB of files)

the win32/pariteB virus (the 1 found on this forum , and mostly false positive :P)

it infects all your exe files ,
what does it do and how to know that you have it

well , it prevents the programs from running , or you need to re install it
it adds a small part to the file so the file isnt normal anymore and cant be run anymore
and takes up some space

for the rest it doesnt do damage , easy to remove with the right tool but just anoying that no files will run (ddl and exe files) because the program crash because of it

even more fun , some files still keeps working , and other files like msn refuse to work , to deinstall or whaterver that a exe file need to do

but basicly it doesnt harm so mutch and you notice it when you got the real 1 (you will figure it out fast enouf if nothing is working anymore after reboot or after first launche)

only downside of that virus is that it stays in your memory , but easy to heal

after i dit the scan on my computer , and 99% is healed
only the files on my removable hard disk are deleted , tehy coulnd be healed because it was inside exe files (some false positive to :'( ) so i lost a few files
but my windows is still fine and working like always

well , if you ever got a virus from this forum then it can be the win32/pariteB , then just download this tool and it should be fine (worked for me :D)

[Only registered and activated users can see links. Click Here To Register...]

its a file from avast virus scanner , called Virus Removal Tool
its freeware , its small and it does his job , but it isnt a virus scanner and only remove the win32 variants of virusses ( about 300 virusses that starts with win32, like the win32/pariteB)

wel , lets hope that this can solve a lot of problems then :D

Greets From PowerChaos

Let's hope that I don't run into that problem then huh....

3,086GB of internal HDDs (don't get me started on externals)
2,491GB used xD
01/23/2010 11:18 rexes13#25
Quote:
Originally Posted by funhacker View Post
Let's hope that I don't run into that problem then huh....

3,086GB of internal HDDs (don't get me started on externals)
2,491GB used xD
dude how the heck do you use all this space?? 2,5 TB is a lot of space..i have 1TB but i cant even use 100 GB of it...
01/23/2010 13:43 DEADP00L#26
roflmao i have about 4TB and i am almost out of space myself. Its rather simple to fill one up.
01/23/2010 13:52 rexes13#27
Quote:
Originally Posted by DEADP00L View Post
roflmao i have about 4TB and i am almost out of space myself. Its rather simple to fill one up.
fill it with??Iam trying to fill it with movies and songs but i cant...maybe because i am a Linux user...so i have hardly any game in my PC...
01/23/2010 15:03 PowerChaos#28
well , i got only 15GB music and i got the same space as funhacker (1TB hd , 750 GB hd 150GB hd , 300 GB hd as C: and 300 GB as D and 110GB as E(backup of windows) and they are kinda all full

few backups of my music (thats 15GB ) and a few movies ( 200GB or so) and all the rest ??
well , just scripts and programs and games and installers and dublicates and 2X a windows on it

so its kinda easy to waste space :D

total free space i got left ?? about 100GB or so
4GB on C: and 25GB on D:

total scan time = 6 hours

witht hat program i scanned only my c:/ and d:/ and takes 2 hours
my rem drives are done with a full scan and tooks 6 hours
and c: with a Quickscan after it tooks 3 hours

so the program is faster :P but it doesnt scan all virusses like explained before ^^

Greets From PowerChaos
01/24/2010 02:45 funhacker#29
I have about 4-5 tb worth of DVDs(Movies and TV Series) and about 2tb of Movies/Tv Series (avi,mkv,mp4 etc) and just over 60gb of music. The rest of the crap is just that crap I barely have any games installed (7 EO Clients...) only game I do have that I play is COD MW2