Read-only archive of the Armageddon Games Forums Archive (2000–2026) · About this archive

DANGER: Possible Infected File Warning

6 replies · 17,743 views · Started 18 September 2018

I'm not sure why, but Windows Defender is flagging `[FONT=Courier New]zelda-255a1-moretiles67.exe[/font]` that was previously linked by dropping it directly onto Discord.

Fore the sake of safety, I tested these:
http://timelord.insomnia247.nl/zc/zc_dev/zelda-255a1-moretiles67a.exe
http://timelord.insomnia247.nl/zc/zc_dev/zquest-255a1-moretiles67.exe
THOSE TESTED CLEAN

I think that the file was infected on Discord's servers!! If you previously grabbed this file direct from Discord, to ensure security, delete it and download this file pair.

This only affects the file [FONT=Courier New]zelda-255a1-moretiles67.exe[/font] that was ORIGINALLY shared through Discord.

If you received this file in any way, destroy it and do not run it. The replacement file has an '][FONT=Courier New]a[/font]' after '][FONT=Courier New]67[/font]', to ensure that the filenames are not identical.

Again, my original file tested clean, and a re-build also tested clean. Somewhere between dropping it into a Discord chat, and re-downloading it from there, something evil occurred.

Tried to open it and it closes instantly. I'm using windows 7 and I put it in the ZC Directory. Any solutions?

[MENTION=42228]ZoriaRPG[/MENTION]
So your the reason my computer now got aids...
No problem. I cleaned it and deleted the file.

Tamamo wrote:[MENTION=42228]ZoriaRPG[/MENTION]
So your the reason my computer now got aids...
No problem. I cleaned it and deleted the file.

Sometime this week, I'm going to break out my analysis toolchain, and do a side-by-side evaluation of the file from Discord, and the local file, to see WTF is different between the two--if anything.