Search the archive:
YaBB - Yet another Bulletin Board
 
   
 
Pages: 1 
Send Topic Print
Virus discovered in file (Read 1756 times)
Oct 9th, 2003 at 12:01am

bonerre   Offline
Colonel

Gender: male
Posts: 10
*****
 
Hey, I had just downloaded the FS2004  AI installer (part 2) from page 1 of the FS2004 misc page. A file contained in the A313AFLv2.zip contains the W32/Parite.B virus. I have Panda anti-virus which detected and disinfected it on my computer, but someone is loading some of the files with viruses, so be careful. I have notified the webmaster, and be sure you have an up-to-date antivirus before you download anything.
 
IP Logged
 
Reply #1 - Oct 9th, 2003 at 12:11am

Joe_D   Offline
Colonel
"Takeoffs are optional,
landings are mandatory!"
NY state

Gender: male
Posts: 839
*****
 
Yes, it can happen through no real fault/intenton of the software author.
Even a virus in commercial software has been known to occure on rare occasions.

It just illustrates how important anti virus software can be.

 

Home airports are KMGJ and KSWF in Orange County, NY&&Stop by and say hello. Smiley
IP Logged
 
Reply #2 - Oct 9th, 2003 at 12:55am

deadnight   Offline
Colonel
Georgia, USA

Gender: male
Posts: 166
*****
 
I belive I may have gotten a virus from the same file a while back. I downloaded a bunch of files that day and that one was one of them. Then about a half hour later norton reported that exact same virus.
 

ASUS P4C800 Deluxe &&Geforce FX5900 Ultra(256 MB)&&1 gig DDR PC3200 RAM&&Pentium 4, 3.0 GHZ, 800 mhz FSB&&Coolermaster 550 watt power supply&&----------------------------&&<-3dmark03 =
6535
->
IP Logged
 
Reply #3 - Oct 9th, 2003 at 4:04am

pete   Offline
Admin
'That would be a network
issue'
Cloud Cuckoo Land

Posts: 8500
*****
 
The file isn't infected guys.
No files on our system are infected.

1. All files are scanned with AVG 2 times on our servers - during initial upload & then again when they are either uploaded again or transfered to their respective folders. + both servers are scanned daily - the whole machines.

2. All files are scanned daily on my system - with Mcafee & then on my backup PC using Norton.


I have again scanned the file in question - just to be sure -but it is clean.

Unless you are saying that McAfee, Norton & AVG are all missing an important virus? Not likely.

What happens sometimes is that certain anti virus software is a little too sensitive & will think certain programs are virus's when they are not.

 

Think Global. It's the world we live in.
IP Logged
 
Reply #4 - Oct 9th, 2003 at 4:24am

deadnight   Offline
Colonel
Georgia, USA

Gender: male
Posts: 166
*****
 
I wasn't saying that it was necessarily that file.. it's just quite a coincidence that both of us seemed to have been affected by what seemed to me the same file. I can't say for sure that that was the cause but it was the first file that Norton detected a virus on. And it was a virus. It spread and infected over 200 files in my computer. It also disabled my Norton antivirus which was a pain to fix. This was quite a while ago.. at least a month I'm thinking. That day I went on a rampage and downloaded probably at least a hundred addons from different websites. So I couldn't say for sure that that was the cause. I never said anything about it because I figured this website was clean of viruses.

I'm not blaming simviation about it. I'm just really tired and rambling.  Grin
 

ASUS P4C800 Deluxe &&Geforce FX5900 Ultra(256 MB)&&1 gig DDR PC3200 RAM&&Pentium 4, 3.0 GHZ, 800 mhz FSB&&Coolermaster 550 watt power supply&&----------------------------&&<-3dmark03 =
6535
->
IP Logged
 
Reply #5 - Oct 9th, 2003 at 5:37am

pete   Offline
Admin
'That would be a network
issue'
Cloud Cuckoo Land

Posts: 8500
*****
 
Apologies:

I installed that file & yes a virus was detected. It got past the file scan because the virus was embedded in a file within the self extracting file (I hate self extracting files) . Neither Norton, McAfee nor AVG could detect the virus until it was acually being extracted.

This file has been removed & a lesson learned. Apologies to anyone effected by this.

I am now off to contact the author  Wink

P.S. As always ::: Anyone using a PC without up to date anti virus is driving blindly down the road.
 

Think Global. It's the world we live in.
IP Logged
 
Reply #6 - Oct 9th, 2003 at 9:07am

Jared   Offline
Colonel
I'd rather be flying...
Uniontown, Ohio

Gender: male
Posts: 12621
*****
 
So that's why I had to reformat my hard drive last weekend...  Grin

Jared
 
IP Logged
 
Reply #7 - Oct 9th, 2003 at 10:07am

bonerre   Offline
Colonel

Gender: male
Posts: 10
*****
 
Regarding Joe_D's reply about commercial software containing viruses, while they may contain viruses, they are planted there by someone in the company or organization that put out the cd. Viruses don't "just happen", they are developed by humans. And Pete, a peice of advice, get rid of the anti-virus you are using. It should have stopped the virus from being loaded here, but it obviously didn't. Maybe give Panda a try. Instead of "once a week updates" on virus definitions like Norton or McAfee give, Panda automatically updates daily. Usually 12-15 updates per day. And unlike McAfee or Norton, Panda helps get rid of viruses free. The others charge you for the failure of their AV-- makes sense, huh?
 
IP Logged
 
Reply #8 - Oct 10th, 2003 at 1:08am

KDSM   Offline
Colonel
SimV Forum Flyer

Gender: male
Posts: 1340
*****
 
Reformatting is fun!
 

...
IP Logged
 
Reply #9 - Oct 10th, 2003 at 10:40am

fido   Offline
Colonel
Oklahoma

Gender: male
Posts: 419
*****
 
Pete  I also got infected, but I in no way, blame you.  I have downloaded too many trouble free files to let one bad one bother me, keep up the good work, $hit happens, no fault, no foul.

            Fido
 

A day at the office for my Dad (Ie Shima 1945)&&&&http://simviation.com/yabbuploads/CopyofDRAGONANDHISTAIL1SIMV.jpg&&&&May the sun be always at your six o'clock.
IP Logged
 
Reply #10 - Oct 10th, 2003 at 3:25pm

pete   Offline
Admin
'That would be a network
issue'
Cloud Cuckoo Land

Posts: 8500
*****
 
If a young girl walks around - say along venice beach, LA - looking a bit drunk, at 3.00 am - dressed in a seriously short skirt, chewing gum & moving to the beat coming through her walkman... what's going to happen to her?  Roll Eyes ... (if she met me she'd be OK - but she wouldn't meet me because I wouldn't be there ..  8) )

ANYONE using the net without an up to date anti virus is seriously asking for trouble. YOU WILL GET INFECTED - not may - will.  Smiley

Period.
Get protected - not wreckted (as someone might say.. Grin )
 

Think Global. It's the world we live in.
IP Logged
 
Reply #11 - Oct 22nd, 2003 at 10:50pm

michaelb15   Offline
Colonel
Whos that?
Lindsay, Ontario, Canada

Gender: male
Posts: 946
*****
 
Will any ainti-virous do? I have PC-cillon (came with my asus motherboard)
 

I am somwhere I don't know where I am!!!&&
IP Logged
 
Reply #12 - Oct 22nd, 2003 at 11:54pm

bonerre   Offline
Colonel

Gender: male
Posts: 10
*****
 
Well, I have never personally tried PC-Cillin, so I don't know how much support they provide if any. That is the key. You can update all you want, but if you get infected anyway, what will you do? Norton and McAfee both charge you for contacting their support if you need help getting rid of a virus. I don't know about PC-Cillin. I was just at their website looking around, and found they have an e-mail address to contact them for virus support, but they don't mention one way or the other whether they charge. Another thing to consider is the frequency of their updates. Both Norton and McAfee update their virus definitions once a week. That's not good enough for me. My college A+/N+ instructor told us one day about Panda, and that's how I found out about them. They have updates every single day (19 today, 6 yesterday, 13 the day before, etc). That means Norton and McAfee users are unprotected against new viruses for a week. It just depends, do you feel lucky?
 
IP Logged
 
Reply #13 - Oct 23rd, 2003 at 12:05am

bonerre   Offline
Colonel

Gender: male
Posts: 10
*****
 
I wanted to add something else, too. Pete, I don't want it to sound like I blamed you for anything. You can't control what other people do, and they will almost always find ways to "beat the system". I just wanted to be sure someone was notified before it began infecting too many people. You have an almost impossible task, due to the fact that you must allow uploads onto the site. Atleast in a network, if we want to avoid users from installing viruses, we just set their permissions to "read only". That way, we don't have to worry about them deleting or installing unwanted material. You don't have that option, and that makes it harder on you.
 
IP Logged
 
Reply #14 - Oct 23rd, 2003 at 6:51am

pete   Offline
Admin
'That would be a network
issue'
Cloud Cuckoo Land

Posts: 8500
*****
 
Quote:
Both Norton and McAfee update their virus definitions once a week.


Not true actually : Here is a quote from McAfee Settings:

Quote:
McAfee SecurityCenter automatically checks for updates every four hours


I have Norton on my 2 other machines & Norton says the same
Quote:
...by default, Automatic Update checks for updates to Norton Anti Vius every 4 hours


There are several other highly credited FREE anti virus programs out there - AVG is one well known & highly credited version:
http://www.grisoft.com/
 

Think Global. It's the world we live in.
IP Logged
 
Reply #15 - Oct 23rd, 2003 at 8:38am

bonerre   Offline
Colonel

Gender: male
Posts: 10
*****
 
I hate to burst your bubble, but McAfee doesn't update their virus definitions every four hours. We used them on our network for two years, and watched the packets. There weren't any virus definitions coming from them but once a week. They can put anything on their website they want. Doing it is another thing.
 
IP Logged
 
Reply #16 - Oct 23rd, 2003 at 10:05am

bonerre   Offline
Colonel

Gender: male
Posts: 10
*****
 
Pete,
     Don't just take my word for it, check it out yourself.
Norton's website at
http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2002021908382713?OpenD...
tells how they do updates on Wednesdays. I have researched this, you evidently haven't.
   Also, the free AVG comes with NO support whatsoever. It says that on their site. Thus, if your computer crashes after installation, you get a virus, or anything else, YOU ARE ON YOUR OWN. They will not offer ANY assistance to you. So, unless you can fix your system, or are willing to pay someone like me to fix your system, you better think twice before using their products.
  The "four hour" updates you refer to only update their virus engines, GUI, etc, not the definitions themselves. They do that to make you think you're getting a good service out ot them. They lie to you. Norton and McAfee aren't half as good as people think. I will not advise anyone to do something I wouldn't be willing to do myself. I will not entrust my systems to once a week updates. I will not tell anyone else they should either.
   Michaelb 15, once again I ask, DO YOU FEEL LUCKY? If not, you'd better get the best you can find. But don't assume just because you THINK it MIGHT be good just because it's popular that it is good. You can be safe, or you can be foolish. Take your pick.
 
IP Logged
 
Reply #17 - Oct 23rd, 2003 at 12:15pm

michaelb15   Offline
Colonel
Whos that?
Lindsay, Ontario, Canada

Gender: male
Posts: 946
*****
 
My PC cillin, it looks for updates every 10 minutes


Hmmmm   is that good, or bad?
 

I am somwhere I don't know where I am!!!&&
IP Logged
 
Reply #18 - Oct 23rd, 2003 at 12:21pm

bonerre   Offline
Colonel

Gender: male
Posts: 10
*****
 
It depends. Is it updating the virus definitions, or just the engine and interface like Norton and McAfee does? A good rule of thumb, don't expect to get something good for nothing. It's like the free firewall Zonealarm has. It's free, but there are know holes they will not patch unless you buy the pro version.
 
IP Logged
 
Reply #19 - Oct 23rd, 2003 at 12:39pm

Hagar   Offline
Colonel
My Spitfire Girl
Costa Geriatrica

Posts: 33159
*****
 
I've been following this topic with interest. I checked out Panda that Bonerre recommends & it looks very interesting. If it's as good as you say it seems extremely good value.

I don't know much about anti-virus software. I have always trusted NAV & it's never let me down in 4 years. It's true that it might not update the virus definitions every day. I doubt that many programs of this type do that. I think this refers to the auto-update feature that regularly searches the home site for updates - not necessarily downloading anything or updating the GUI.

I would not recommend any free anti-virus applications. All the options I've checked out offer a commercial update for the product. This means to me that something is missing from the free version. I also notice that most free applications offer no regular updated virus definitions at all. Anti-virus protection is too important to cut costs on. IMHO

Going back to the original topic, apparently the virus was hidden in a self-extracting executable (within a zipfile) which is the reason the anti-virus software did not detect it. I'm wondering if Panda would have detected it before the executable was run?
 

...

Founder & Sole Member - Grumpy's Over the Hill Club for Veteran Virtual Aviators
Member of the Fox Four Group

Need help? Try Grumpy's Lair

My photo gallery
IP Logged
 
Reply #20 - Oct 23rd, 2003 at 4:14pm

bonerre   Offline
Colonel

Gender: male
Posts: 10
*****
 
Hi Hagar,
  In answer to your question, Panda found the virus as soon as I opened the zip file. I hadn't begun running the exe.
  I am currently attending college, majoring in Computer Information Systems. My A+ and N+ instructor is also one of the network administrators at the university. He has switched the college to Panda and dropped Norton. He is the one who told me about Panda when we were studying viruses.
  I hope you don't have any trouble with NAV, but per their website, be prepared to pay out some money if you somehow do get a virus. $39.95 to talk with their tech about it, or $69.95 if you have them help you step-by-step.  Or you have the option of calling their 900 number for $4.95 per minute. Panda does it all for FREE, just like Norton USED to.
That's something else to think about. Why would they want to update their definitions daily? That would mean fewer customers having viruses, meaning fewer calls to their tech support, so they make less money. They can make more by NOT updating regularly. Find details at
http://www.symantec.com/techsupp/contact_phone_virus.html
 
IP Logged
 
Reply #21 - Oct 23rd, 2003 at 5:45pm

Hagar   Offline
Colonel
My Spitfire Girl
Costa Geriatrica

Posts: 33159
*****
 
Hi Bonerre. I hear what you say. Both you & your instructor obviously know far more on this subject than me. NAV has intercepted viruses in the past, one only a few days ago, & dealt with them successfully. With a new virus it doesn't recognise it quarantines them until the definitions that can deal with it have been updated. I never had any reason to ring their support line or pay extra, apart from the annual update fee. When this runs out it might be worth giving Panda a try.
 

...

Founder & Sole Member - Grumpy's Over the Hill Club for Veteran Virtual Aviators
Member of the Fox Four Group

Need help? Try Grumpy's Lair

My photo gallery
IP Logged
 
Reply #22 - Oct 27th, 2003 at 3:17pm

LANDMYN   Offline
Colonel
My Evo :P

Gender: male
Posts: 242
*****
 
Just downloaded AVG. Wicked!  Grin Was using loads of program in the first place though. You might like these although can't remember where I got them. LOL

Adaware
Spybot : Search & Distroy
BH Blaster
Hijack this

and another one I cant remember the name of. Although before my...experiance I had none of these. My...experiance was the (has anyone heard of this?) LOP virus. VERY dangerous. Although like you are saying I didnt get it through a file I downloaded.
 

www.willspage.me.uk&&My forum : www.willspage.me.uk/cgi-bin/yabb/YaBB.cgi&&P4 running Windows XP PRO&&ATI Radeon 9800 XT&&Athlon XP 3.4 ghz&&2048 mb ram&&.&&.&&.&&i wish&&&&&&visit my page at &&www.willsapge.me.uk&&
IP Logged
 
Pages: 1 
Send Topic Print