Page 1 of 1

Virus Threat

Posted: Sat Feb 11, 2012 2:38 am
by haydugjr
WTF:

Image

I was downloading and extracting gear, when suddenly this was extracted into my personal folder: apparently some type of virus. Even if it's not a virus, there is no reason whatsoever for there to be an mx.exe in gear downloads. This is the list of gears it could possibly be in (I still have the *rars selected in 7zip). Only the ones that are selected/have dark icons. My AV is currently telling me it's failing to remove the threat. I'm going to go ahead and post this and then continue dealing with it.

Image

Re: Virus Threat

Posted: Sat Feb 11, 2012 2:47 am
by haydugjr
AVG wouldn't just move/quarantine the file or whatever it normally does, it said "Advanced removal techniques are not working: Would you like to forcefully delete the file? WARNING: This may cause system instability and even crash." I decided to press the issue and hit delete, afterall I doubted mx.exe was vital to my system. I was right, AV notifications went away and all is well, I presume. Now, Can we figure out wtf is happening? Part 1 and Part 2, the only poorly named ones, are from this team's thread.

http://forum.mxsimulator.com/viewtopic. ... t1#p288601

DWAYNEMAKESEVERYTHINGSOHARD is one of the new NLR bike/gears.

I can't track down the readme.rar, however the PNG's in it are for an MCD racing skin.

Re: Virus Threat

Posted: Sat Feb 11, 2012 2:51 am
by haydugjr
Had an idea and went snooping, found this. Apparently the BTO sports guys thought it'd be clever to include a full copy of the game with their skins? No wonder the shit was so huge.

Image

Re: Virus Threat

Posted: Sat Feb 11, 2012 7:32 am
by Phathry25
CSI Cleveland on the case!

Re: Virus Threat

Posted: Sat Feb 11, 2012 9:10 am
by Jester#132
haydugjr wrote:Had an idea and went snooping, found this. Apparently the BTO sports guys thought it'd be clever to include a full copy of the game with their skins? No wonder the shit was so huge.

Ahahaa noice! :D

Re: Virus Threat

Posted: Sun Feb 12, 2012 2:47 pm
by haydugjr
Anything gonna be down about these homos?

Re: Virus Threat

Posted: Sun Feb 12, 2012 6:49 pm
by Phathry25
Those are the zzzz files that are for the snapshots, they are publicly available.

Re: Virus Threat

Posted: Sun Feb 12, 2012 7:02 pm
by haydugjr
Phathry25 wrote:Those are the zzzz files that are for the snapshots, they are publicly available.
But they posted a virus in a skin pack...

Re: Virus Threat

Posted: Mon Feb 13, 2012 12:17 am
by jlv
I removed the link from here. If it's anywhere else let me know.

That probably was a real virus. I compared it with every mx.exe I have and it didn't match any of them.