PDA

View Full Version : DANGER: Possible Infected File Warning


ZoriaRPG
09-18-2018, 06:58 AM
I'm not sure why, but Windows Defender is flagging `zelda-255a1-moretiles67.exe` that was previously linked by dropping it directly onto Discord.

Fore the sake of safety, I tested these:
http://timelord.insomnia247.nl/zc/zc_dev/zelda-255a1-moretiles67a.exe
http://timelord.insomnia247.nl/zc/zc_dev/zquest-255a1-moretiles67.exe
THOSE TESTED CLEAN

I think that the file was infected on Discord's servers!! If you previously grabbed this file direct from Discord, to ensure security, delete it and download this file pair.

This only affects the file zelda-255a1-moretiles67.exe that was ORIGINALLY shared through Discord.

If you received this file in any way, destroy it and do not run it. The replacement file has an ']a' after ']67', to ensure that the filenames are not identical.

Again, my original file tested clean, and a re-build also tested clean. Somewhere between dropping it into a Discord chat, and re-downloading it from there, something evil occurred.
Chris Miller
09-18-2018, 02:44 PM
Always practice safe Zelda Classic downloads. The morning-after pill does not protect against STDs.
cbailey78
09-18-2018, 11:05 PM
Tried to open it and it closes instantly. I'm using windows 7 and I put it in the ZC Directory. Any solutions?
ZoriaRPG
09-21-2018, 06:58 AM
Tried to open it and it closes instantly. I'm using windows 7 and I put it in the ZC Directory. Any solutions?

Tried to open...what?

You'd need a complete 2.55 package to run either of those exe files.

http://timelord.insomnia247.nl/zc/zc_dev/2.55_Win_Preliminary-10.zip

Download that, extract it, copy both files over to it. They need the correct libraries and datafiles, before they'll do a blessed thing. ;)
Tamamo
09-21-2018, 09:12 PM
ZoriaRPG
So your the reason my computer now got aids...
No problem. I cleaned it and deleted the file.
ZoriaRPG
09-25-2018, 08:16 AM
ZoriaRPG
So your the reason my computer now got aids...
No problem. I cleaned it and deleted the file.

Sometime this week, I'm going to break out my analysis toolchain, and do a side-by-side evaluation of the file from Discord, and the local file, to see WTF is different between the two--if anything.
Tamamo
09-25-2018, 08:06 PM
excellent idea...