(Link to AcmlmWiki) Offline: thank ||bass
Register | Login
Views: 13,040,846
 Main | Memberlist | Active users | Calendar | Chat | Online users
Ranks | FAQ | ACS | Stats | Color Chart | Search | Photo album 		05-06-24 01:10 PM
0 users currently in ROM Hacking.
Acmlm's Board - I3 Archive - ROM Hacking - Wait, what the fuck? New poll | |
Pages: 1 2Add to favorites | Next newer thread | Next older thread
User Post
The Kins

Hoarder








Since: 11-18-05
From: Hurf.

Last post: 6300 days
Last view: 6286 days
Posted on 11-29-05 10:59 PM Link | Quote
My AVG free has gone ballistic and declared YY-CHR a trojan. Now I can't use it, even if I try and extract it to my other HDD from a fresh download.

What?
Deleted User
Banned


 





Since: 05-08-06

Last post: None
Last view: 6287 days
Posted on 11-29-05 11:02 PM Link | Quote
Use TLP
The Kins

Hoarder








Since: 11-18-05
From: Hurf.

Last post: 6300 days
Last view: 6286 days
Posted on 11-29-05 11:14 PM Link | Quote
Originally posted by lags_80x
Use TLP

Yes, a most helpful reply regarding GETTING YYCHR TO WORK AGAIN.

You dunce.
MathOnNapkins

1100

In SPC700 HELL


 





Since: 11-18-05

Last post: 6286 days
Last view: 6286 days
Posted on 11-29-05 11:28 PM Link | Quote
http://forum.grisoft.cz/freeforum/read.php?8,56056,backpage=,sv=

Hate to say it but it's better to go to the source of the evil.
The Kins

Hoarder








Since: 11-18-05
From: Hurf.

Last post: 6300 days
Last view: 6286 days
Posted on 11-30-05 12:10 AM Link | Quote
Weird, every copy of YYCHR on my computer seems to have been rendered unusable (The properties window in Explorer seems to recognise it as a DOS program, and Windows refuses to execute it), despite working perfectly as recently as last night Also, it won't upload to that malware scanner.

I have no idea what is going on.

EDIT: Pushed the ZIP file from Zophar through that online scanner instead. Apparently it has about four seperate virii in it. Can someone else please download the YY CHR zip from Zophar and send it through this?

(edited by The Kins on 11-29-05 11:11 PM)
MathOnNapkins

1100

In SPC700 HELL


 





Since: 11-18-05

Last post: 6286 days
Last view: 6286 days
Posted on 11-30-05 12:12 AM Link | Quote
Yeesh... really don't know what to do about that. Probably better off asking in the hardware / software forum. B/c if it [windows] did it to one program, it might have done it to others.
Xkeeper
Took the board down in a blaze of glory, only to reveal how truly moronical ||bass is.


 





Since: 11-17-05
From: Henderson, Nevada

Last post: 6286 days
Last view: 6286 days
Skype
Posted on 11-30-05 01:54 AM Link | Quote
ArcaVir Found Trojan.Delwin.D
AVG Antivirus Found Generic.EUI
BitDefender Found Trojan.Killfiles.BI
Dr.Web Found Trojan.DelWin.76
UNA Found Trojan.Win32.DelWin




Wow, that's pretty insane. I'll try scanning an executable instead and see if it still finds all of those viruses...


Edit: Yep, even the main executable is full of it... I wonder what's going on.

(edited by ~ on 11-30-05 12:56 AM)
The Kins

Hoarder








Since: 11-18-05
From: Hurf.

Last post: 6300 days
Last view: 6286 days
Posted on 11-30-05 02:24 AM Link | Quote
Well, at least I'm not alone.

This is really, really strange.
asdf

Link's Awakening
‭‮‭‮ಠ_ಠ








Since: 11-18-05

Last post: 6288 days
Last view: 6286 days
Posted on 11-30-05 03:19 AM Link | Quote
Originally posted by ~
ArcaVir Found Trojan.Delwin.D
AVG Antivirus Found Generic.EUI
BitDefender Found Trojan.Killfiles.BI
Dr.Web Found Trojan.DelWin.76
UNA Found Trojan.Win32.DelWin




Wow, that's pretty insane. I'll try scanning an executable instead and see if it still finds all of those viruses...


Edit: Yep, even the main executable is full of it... I wonder what's going on.


The only thing I can think of, although absurd, is that there is a new virus that makes the program think innocent programs are viruses. It's highly unlikely, but it's the only thing I could think of that could be causing this to happen.

(edited by asdf on 11-30-05 02:19 AM)
The Kins

Hoarder








Since: 11-18-05
From: Hurf.

Last post: 6300 days
Last view: 6286 days
Posted on 11-30-05 03:52 AM Link | Quote
It's possible, I guess. I'll give it a couple of days and see if it clears up.
BMF54123
WARNING: MOOD LEVEL CRITICAL








Since: 11-18-05
From: MOOGLES

Last post: 6287 days
Last view: 6286 days
Posted on 11-30-05 04:01 AM Link | Quote
Originally posted by asdf
The only thing I can think of, although absurd, is that there is a new virus that makes the program think innocent programs are viruses. It's highly unlikely, but it's the only thing I could think of that could be causing this to happen.
If that were true, the online scanner (http://virusscan.jotti.org) would've reported the file as clean.

I just ran my copy through the online scanner, and it reported the same thing. I'm guessing all the scanners that reported (hopefully ) false positives use similar detection code, and part of YY-CHR's code just happens to look like some obscure virus. With so many viruses and Windows applications available nowadays, you're bound to have some unintentional overlap.

I've been using YY-CHR for years, and not once has it exhibited even remotely virus-like behavior. I wouldn't worry too much.
The Kins

Hoarder








Since: 11-18-05
From: Hurf.

Last post: 6300 days
Last view: 6286 days
Posted on 11-30-05 04:05 AM Link | Quote
Originally posted by BMF54123
Originally posted by asdf
The only thing I can think of, although absurd, is that there is a new virus that makes the program think innocent programs are viruses. It's highly unlikely, but it's the only thing I could think of that could be causing this to happen.
If that were true, the online scanner (http://virusscan.jotti.org) would've reported the file as clean.

I just ran my copy through the online scanner, and it reported the same thing. I'm guessing all the scanners that reported (hopefully ) false positives use similar detection code, and part of YY-CHR's code just happens to look like some obscure virus. With so many viruses and Windows applications available nowadays, you're bound to have some unintentional overlap.

I've been using YY-CHR for years, and not once has it exhibited even remotely virus-like behavior. I wouldn't worry too much.

Yeah, I'm guessing it's a false hit.

Kinda annoying though, this'll halt all work on my SMW hack* until this gets fixed...

(* "My SMW hack" = "making crappy Lode Runner spritesheets")
asdf

Link's Awakening
‭‮‭‮ಠ_ಠ








Since: 11-18-05

Last post: 6288 days
Last view: 6286 days
Posted on 11-30-05 04:08 AM Link | Quote
Don't think that all viruses can be spotted from the moment they are unleashed. This; judging by the timestamps; seems to be a brand new virus. The other possibility is a recent update to the virus list that shares some code with YY-CHR and makes the program think it is a virus.
The Kins

Hoarder








Since: 11-18-05
From: Hurf.

Last post: 6300 days
Last view: 6286 days
Posted on 11-30-05 05:46 AM Link | Quote
OK, now it at least lets the EXE load again - I had to turn off the Resident Shield but at least the EXE itself is unaffected.

I'm a happy Trashy again.
Dwedit

Rope
フクト オン フォニクス








Since: 11-17-05
From: Chicago!

Last post: 6288 days
Last view: 6287 days
Posted on 12-02-05 02:30 AM Link | Quote
Does your virus scanner have an exclusions list? Add files to it! Mcafee thought that a really old SMS utility was a virus written 6 years after the utility came out.
Bit-Blade



 





Since: 11-18-05

Last post: 6312 days
Last view: 6407 days
Posted on 12-02-05 09:22 AM Link | Quote
I ran across the same problem with yy-chr. I eventually had to come to the conclusion that either yy-chr must be inherant corrupt or yy is hosting infected files on his server and doesn't even know it. As long as I've been using YY-CHR, these virii have not stopped me from using it or made any dsicernible dent on my computer usage.
Xkeeper
Took the board down in a blaze of glory, only to reveal how truly moronical ||bass is.


 





Since: 11-17-05
From: Henderson, Nevada

Last post: 6286 days
Last view: 6286 days
Skype
Posted on 12-02-05 05:34 PM Link | Quote
I noticed one of them lists it as being "UPX Compressed"

In the words of Merijn:
"UPX compression does not automatically equal a scary virus"
Dragonsbrethren

440








Since: 12-01-05
From: New Jersey

Last post: 6474 days
Last view: 6474 days
Posted on 12-04-05 03:08 AM Link | Quote
Originally posted by The Kins
My AVG free has gone ballistic and declared YY-CHR a trojan. Now I can't use it, even if I try and extract it to my other HDD from a fresh download.

What?


Comedy. Pure comedy.

Invest in a decent anti-virus, this only happens with shitty free ones (And McAfee, which should be free considering how shitty it is)
Dart Zaidyer
Newcomer


 





Since: 11-18-05

Last post: 6624 days
Last view: 6624 days
Posted on 12-04-05 03:35 AM Link | Quote
There has to be a way to flag it as a false positive and have AVG ignore it, but I can't seem to find such a feature.

Then again, is there a way to hack yy-chr and remove the "virus" bits without breaking it?
The Kins

Hoarder








Since: 11-18-05
From: Hurf.

Last post: 6300 days
Last view: 6286 days
Posted on 12-04-05 04:06 AM Link | Quote
Originally posted by Dragonsbrethren
Originally posted by The Kins
My AVG free has gone ballistic and declared YY-CHR a trojan. Now I can't use it, even if I try and extract it to my other HDD from a fresh download.

What?


Comedy. Pure comedy.

Invest in a decent anti-virus, this only happens with shitty free ones (And McAfee, which should be free considering how shitty it is)
I probably will. Any suggestions, preferably other than Norton? (I've used it before and it made my soul weep)
Pages: 1 2Add to favorites | Next newer thread | Next older thread
Acmlm's Board - I3 Archive - ROM Hacking - Wait, what the fuck? |


ABII

Acmlmboard 1.92.999, 9/17/2006
©2000-2006 Acmlm, Emuz, Blades, Xkeeper

Page rendered in 0.023 seconds; used 440.68 kB (max 571.83 kB)