• There is NO official Otland's Discord server and NO official Otland's server list. The Otland's Staff does not manage any Discord server or server list. Moderators or administrator of any Discord server or server lists have NO connection to the Otland's Staff. Do not get scammed!

Complaint Virus

Status
Not open for further replies.

Zisly

Intermediate OT User
Joined
Jun 9, 2008
Messages
7,338
Reaction score
120
Well I just found a thread with a virus in the distributions forum.
It has been there from 24th December 2008.
Thread: http://otland.net/f18/8-3-8-31-eldinworld-sql-edit-me-18110/

My complaint is that noone has reacted on it.
It's clearly a virus.
The thread is full of noobs with very low post counts saying "nice"."there is no virus" etc.
Which probably are the same person.

And a mod has said that it's clean probably without even checking it out. no names mentioned.

Anyways, it has been reported but I felt like doing a thread for the ones which downloaded this and ran it.

How to remove
First off just run your anti-virus scanner.
The things which needs to be deleted are:
  • A temp file in c:\ named temp****.temp
    ****=random number
  • issas.exe at autostart
  • A copy of itself in "c:\documents and settings\*USER_NAME*\local settings" (don't know the english dir)
  • A file in the windows\prefetch folder.
    Named: ELDINWORLD.EXE-1F93B174.pf

If your anti-virus doesn't find them all, you will have to do it manually.
  • Reboot in safe-mode.
  • Run>msconfig
    Chose autostart and remove issas.exe
  • Start file search and search for 'eldin'
    Remove the files mentioned.
  • Go to c:\ and remove the temp file.
 
Last edited by a moderator:
win32 only says it's for windows 32bit.
It can still be a virus, so stop lying to people.
Lying? Oh please shut up and don't talk about something you don't know about.


Thread Closed!
 
Lying? Oh please shut up and don't talk about something you don't know about.


Thread Closed!

reopend. You should read your own post again and stop talking about things you don't know about. He is right. It can be a virus. Its used in serveral trojan horses to take remote control of a computer.
 
reopend. You should read your own post again and stop talking about things you don't know about. He is right. It can be a virus. Its used in serveral trojan horses to take remote control of a computer.

You just got merked :)

I downloaded this mad long ago idk if its still there Ima check :) thanks.
 
Lying? Oh please shut up and don't talk about something you don't know about.


Thread Closed!
You don't know what the hell your talking about.
And don't close the thread because you can't handle being wrong, just accept that you are.
And your a mod, so you should only say such things if your 100%, because people listen to you.

Anyways you can read some here;
http://en.wikipedia.org/wiki/Win32
 
^Oh really? Tell me more about it. jevla noob
reopend. You should read your own post again and stop talking about things you don't know about. He is right. It can be a virus. Its used in serveral trojan horses to take remote control of a computer.
It could but in this case it ain't, TFS got it too so we shall delete TFS distribution because it got win32?
 
^Oh really? Tell me more about it. jevla noob

It could but in this case it ain't, TFS got it too so we shall delete TFS distribution because it got win32?
Svengelska rox!

"it got win32"
You still don't get it do you?
Win32 only says that it is developed for/in windows 32bit.
 
Svengelska rox!

"it got win32"
You still don't get it do you?
Win32 only says that it is developed for/in windows 32bit.
Then why does the antivirus program say its a virus? Lol. No svenska suck worst language ever :')
And so what if I'm wrong? Everyone do mistakes;)
 
Then why does the antivirus program say its a virus? Lol. No svenska suck worst language ever :')
I thought you knew, the one that is so damn sure that he calls me a noob.

Svengelska = mixed swedish and english.
 
Status
Not open for further replies.
Back
Top