PDA

View Full Version : Virus on EQEmu?


Omniscene
06-28-2003, 05:39 AM
Just thought you all might want to know that the last 3 times (on 2 diff computers not networked together or connected in anyway) that I tried to install the EQEmu patcher, I was infected with the ever annoying W32.PINFI virus. To confirm this I asked a few of my friends who I knew had used your program to check in their registry for the following:

PINF value in
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer

if you think that I am wrong you can check it out for yourselves. It is quit an annoying little virus... It attacks all of your .exe and .scr files.... GRRRRRRRRRR..........

For some info on the virus (if you have it) check out.

http://securityresponse.symantec.com/avcenter/venc/data/w32.pinfi.html

God Bless Symantec!!!

That being said I hope it is just a fluke... And that there is nothing wrong with EQEmu in any way shape or form.

Memener
06-28-2003, 06:05 AM
do you and your friends use outlook or kazaa?

Shawn319
06-28-2003, 06:17 AM
Well you should know that the virus appends itself to all .exe and scr files. maybe you already had the virus and when you tried to install the EQEmu patcher, it infected the patcher making you think the patcher had the virus..

You did not get the virus from the patcher.

Omniscene
06-28-2003, 07:28 AM
As to Memenerr's reply, no and no.

And as for Shawn319, nope, good try thou. Not only was the virus not previously presant. After compleatly removeing the virus it resurfaced only after trying to install EQEmu patcher once again. And it is a most annoying virus... It slowly but surely corrupts pretty much everything.

Merth
06-28-2003, 07:35 AM
Virus is not present on my system. Are you running the same patcher as everyone else?

Memener
06-28-2003, 10:17 AM
its not on mine ether
so not sure where you got it from i have norton and it runs about 1:30AM and checks for virus

Shawn319
06-28-2003, 11:22 AM
Well *IF* you downloaded the patcher and it already had the virus in it, then you got it from somewhere elce and not the official patcher.

/me can imagine "Hey kid, i have a patcher that works and it downloads all the files!! accept this download!"

DeletedUser
06-28-2003, 01:31 PM
Supply us the URL where you got the patcher (really, not going and looking at our site for it), and give us the md5sum of the file please. Im not infected either.

DeletedUser
06-28-2003, 05:08 PM
I had this virus.. I don't know how I got it. I do know that i've trusted eqemu and its developers since the beginning when we all hanged out in dreadlands and crashed after 5 people.

Omniscene, thanks for the fix.. but instead of blaming it on the first thing you can think of.. try redoing everything you did prior to getting the virus.

.. bleh it is an annoying virus though, fucked up my EverQuest, NWN, and half-life.

glad I got it though, gave me a reason to delete all the shit and go outside. :P ahhh the sun.

:( now I can't use EQEMu, cause I had to get eqgame.exe and EverQuest.exe which was corrupted, patched.. but noo the patcher is gone. :P

*hogie*
For the patcher, you should make it so people can host the files themselves, have an .ini file that it asks for you to imput all the ftp info, that way people can waste their own bandwidth, make changes for their server, and get sue'd by sony.. and you don't have to care. :D

Mortamer
06-29-2003, 03:40 AM
I'm clean...

Lasiel
06-29-2003, 05:19 AM
Actually there's a hoaxed MS security email bouncing around right now that has a supposed patch attached to fix security issues with IE and it contains this exact virus. I recieved it, checked headers on the email, did a whois on the address it was sent from (originates in Australia or Taiwan since I've recieved 2 now) and scanned the file. And lo and behold it's exactly the virus you describe/name.

Shawn319
06-29-2003, 05:26 AM
Actually there's a hoaxed MS security email bouncing around right now that has a supposed patch attached to fix security issues with IE and it contains this exact virus. I recieved it, checked headers on the email, did a whois on the address it was sent from (originates in Australia or Taiwan since I've recieved 2 now) and scanned the file. And lo and behold it's exactly the virus you describe/name.

And i bet 1/2 of the people that get it dont have all the updated security patches and such, screwing them the second the e-mail is recieved.

Lasiel
06-29-2003, 06:26 AM
Or have the grey matter to realise that MS doesn't send out browser patches attached to emails ;)