Register FAQ Search Today's Posts Mark Forums Read
Go Back   JazzJackrabbit Community Forums » Open Forums » General Jazz Jackrabbit Talk

Virus around in JJ2

Reply
 
Thread Tools
defalcon

JCF Member

Joined: Apr 2001

Posts: 2,366

defalcon has disabled reputation

Apr 29, 2002, 12:25 AM
defalcon is offline
Reply With Quote
Re: the WINNER

Quote:
Originally posted by the WINNER
Hey! I have an idea! Remove all these programs:
Ultrawarp, Megawarp, TSF Warper, Weird 2, Jazz2 QuickCheat, Anti-Access Violation patch(when you have used it) and Controller.


Initcent has nothing to do with this so removve all the programs listed. If you don't have some of these, remove OTHER program what can cause problem.
Okay, Anti-Access Violation Patch (as long as it's from overlord's site/J2O), should cause nothing about this. Delete all those traniners, darn cheaters. ;P
FQuist FQuist's Avatar

JCF Member

Joined: Sep 2001

Posts: 3,251

FQuist is an asset to this forumFQuist is an asset to this forum

Apr 29, 2002, 03:23 AM
FQuist is offline
Reply With Quote
Yeah, I wonder if these programs were solely used for testing single player levels. ;p
__________________
“The truth is that everything that can be accomplished by showing a person when he's wrong, ten times as much can be accomplished by showing him where he is right.” - Robert T. Allen

Interesting Jazz-related links:
Thread: Gameplay Theories - Thread: Make Up Your Own Gametype

Spotify.fm

Mystical

JCF Member

Joined: Feb 2002

Posts: 175

Mystical is doing well so far

Apr 29, 2002, 04:34 AM
Mystical is offline
Reply With Quote
Quote:
Originally posted by Fquist
Yeah, I wonder if these programs were solely used for testing single player levels. ;p
I doubt it. I have a few cheat programs on the computer I downloaded but I never used them. And I very rarley cheat in single player.
__________________
------------Mystical

Determined Leader of *
>>Møønßlãzé<<

JCF Member

Joined: Apr 2002

Posts: 459

>>Møønßlãzé<< is doing well so far

Apr 29, 2002, 06:41 AM
>>Møønßlãzé<< is offline
Reply With Quote
Okay, let's stop cheat and give it a try. If it dosen't work, Overlord hands free usernames out to his ultrawarp. :P
Btw. Your saying Overlord putted badies in his ultrawarp?
I Think I known what program it's! ;P
Umbaman *Skulls at umbaman* send me this program:
http://upload.turbosport.co.uk/galle...4044319072.jpg
I'm testing about it, I give my results soon
But right after he send me it, I got the problem too
Anyway, it's a crap of cheat program ;P
Cpp Cpp's Avatar

JCF Member

Joined: Mar 2001

Posts: 1,557

Cpp is doing well so far

Apr 29, 2002, 07:26 AM
Cpp is offline
Reply With Quote
Re: the WINNER

Quote:
Originally posted by the WINNER
Hey! I have an idea! Remove all these programs:
Ultrawarp, Megawarp, TSF Warper, Weird 2, Jazz2 QuickCheat, Anti-Access Violation patch(when you have used it) and Controller.
Winner! My programs have nothing to do with the virus so you are removing them for no reason. But it can be/is possible that they got infected by it. So just redownload my progs again and check the file size if bigger than the downloaded one.

And Moonblaze!
I don't give UW keys to everyone BTW. But I'm not the only one who can give them *HINT*
__________________
<a href="http://nmap.org/"><img border="0" alt="Nmap Security Scanner" src="http://images.insecure.org/nmap/images/prop/nmap_bnr_matrix_pfos.gif"/></a>
>>Møønßlãzé<<

JCF Member

Joined: Apr 2002

Posts: 459

>>Møønßlãzé<< is doing well so far

Apr 29, 2002, 11:15 AM
>>Møønßlãzé<< is offline
Reply With Quote
So if I said, gimme one, you don't give, so if I say Don't gimme one, you give me one? ;P

Last edited by >>Møønßlãzé<<; May 2, 2002 at 01:17 AM.
Super Saiyan

JCF Member

Joined: Nov 2001

Posts: 416

Super Saiyan is doing well so far

May 1, 2002, 11:37 AM
Super Saiyan is offline
Reply With Quote
I dont think Overlord puts virusses in his programs. Also, I got TSf warper too, why I dont have the virus, huh!?
__________________
Bla.
FQuist FQuist's Avatar

JCF Member

Joined: Sep 2001

Posts: 3,251

FQuist is an asset to this forumFQuist is an asset to this forum

May 1, 2002, 12:02 PM
FQuist is offline
Reply With Quote
Moonblaze, please pursue your questions elsewhere. The JCF wants to have nothing to do with cheating.
__________________
“The truth is that everything that can be accomplished by showing a person when he's wrong, ten times as much can be accomplished by showing him where he is right.” - Robert T. Allen

Interesting Jazz-related links:
Thread: Gameplay Theories - Thread: Make Up Your Own Gametype

Spotify.fm

Krezack Krezack's Avatar

JCF member

Joined: Nov 2001

Posts: 5,156

Krezack has disabled reputation

May 3, 2002, 03:44 PM
Krezack is offline
Reply With Quote
As magoo and i already said, GULLIBLE! You silly people should know that going to a geocities site and downloading bloody trainers is gonna kill your comp.

I know how to get rid of the virus...I uh had it aswell, do this:
Delete: megawarp, ultrawarp, superwarp, duperwarp, sillywarp, warp, mega jj2 trainer, anything with the word "trainer" in it, anything with the word "jj2" in it thats not jj2 and/or a file jj2 needs to run.

I did this and now my system is virus free!
__________________
"Are we not threatened with a flood of information? And is this not the monstrousness of it: that it crushes beauty by means of beauty, and annihilates truth by means of truth? For the sound of a million Shakespeares would produce the very same furious din and hubbub as the sound of a herd of prairie buffalo or sea billows."
—Stanisław Lem, Imaginary Magnitude (1973)
Krezack Krezack's Avatar

JCF member

Joined: Nov 2001

Posts: 5,156

Krezack has disabled reputation

May 3, 2002, 03:48 PM
Krezack is offline
Reply With Quote

AHAHAH! DIE!
__________________
"Are we not threatened with a flood of information? And is this not the monstrousness of it: that it crushes beauty by means of beauty, and annihilates truth by means of truth? For the sound of a million Shakespeares would produce the very same furious din and hubbub as the sound of a herd of prairie buffalo or sea billows."
—Stanisław Lem, Imaginary Magnitude (1973)
the WINNER

JCF Member

Joined: Feb 2002

Posts: 381

the WINNER is doing well so far

May 12, 2002, 06:44 AM
the WINNER is offline
Reply With Quote
I know how to get rid of the virus!!!
1.Press ctrl+alt+del.
2.Click Initcent.
3.Press enter. Then very quickly press ctrl+alt+del again. If you see two Initcents, you was fast enough. If you see only one, too late(you must act very quickly).
4.Wait 30 seconds.
5.Click on the upper Initcent and press enter. And then 'close program' to the two windows what appear!

Yeah, no virus
the WINNER

JCF Member

Joined: Feb 2002

Posts: 381

the WINNER is doing well so far

May 13, 2002, 03:47 AM
the WINNER is offline
Reply With Quote
Peacemaker has a program. You can remove Initcent with it. But he gives it to nobody! Yeah!
Ruffe aka Peacy

JCF Member

Joined: May 2002

Posts: 6

Ruffe aka Peacy is doing well so far

May 13, 2002, 04:12 AM
Ruffe aka Peacy is offline
Reply With Quote
Winner is a hacker.

Winner is a hacker. He hacks people and sends Initcent to them without they are seeing it! One of Winners victims have been Eagle! If someone know Eagle so tell this to him!
the WINNER

JCF Member

Joined: Feb 2002

Posts: 381

the WINNER is doing well so far

May 13, 2002, 06:11 AM
the WINNER is offline
Reply With Quote
Re: Ruffe aka Peacy's post

Quote:
Originally posted by Ruffe aka Peacy
Winner is a hacker. He hacks people and sends Initcent to them without they are seeing it! One of Winners victims have been Eagle! If someone know Eagle so tell this to him!
By the way, don't lie to Eagle(unless you are his enemy).
I don't have hacking programs. How do you even prove it? Tell Eagle about that and Eagle will slap you back.
(by the way, don't attack, Peacemaker)

Edit 1:

If I am sending Initcent, why I am telling how to get rid of it?
Ruffe aka Peacy

JCF Member

Joined: May 2002

Posts: 6

Ruffe aka Peacy is doing well so far

May 13, 2002, 06:56 AM
Ruffe aka Peacy is offline
Reply With Quote
Re: Re: Ruffe aka Peacy's post

If it isnt true so you are a liar. because that was what you told to me. But if it was true, then there is proofs. And you told how to get away from it because that doesn't help. You said to me that it didn't help either on your computer.
Unhit Unhit's Avatar

Pornocrat

Joined: Nov 2001

Posts: 3,771

Unhit is doing well so far

May 13, 2002, 07:23 AM
Unhit is offline
Reply With Quote
Re: Winner is a hacker.

Quote:
Originally posted by Ruffe aka Peacy
Winner is a hacker. He hacks people and sends Initcent to them without they are seeing it! One of Winners victims have been Eagle! If someone know Eagle so tell this to him!
I don't know anything about this. But I also don't think Winner could hack Eagle. Eagle is a hacker himself, and theres nothing harder than to hack hackers !
__________________
<center>somebody holds the key</center>
>>Møønßlãzé<<

JCF Member

Joined: Apr 2002

Posts: 459

>>Møønßlãzé<< is doing well so far

May 13, 2002, 10:44 AM
>>Møønßlãzé<< is offline
Reply With Quote
Cool How to get rid of INITCENT

I bet your waited for this :P
I don't have checked on other computers if it works there becuse i only have one (D'uh)
Folow theese steps
1. Reboot/start your computer
2. After pressing OK, folow the system start up by pressing ALT+CTRL+DEL
3a. If a program named wtujmwy start, stop it FAST
4a. Initcent and wtujmwy should be asked to stop, and they...stop! :P
3b. If a program named wtujmwy dosen't appear, keep closing INITCENT until it appear, stop it.
4b. Now initcent should stop recoming, and you have got rid of it this time! :P

It's hard to do, but IF you want to make a JDC duel, this is usefull
~Screen Shot
Unhit Unhit's Avatar

Pornocrat

Joined: Nov 2001

Posts: 3,771

Unhit is doing well so far

May 13, 2002, 10:52 AM
Unhit is offline
Reply With Quote
Cool desktop Background, Moonblaze :P!

Argh...offtopic !
__________________
<center>somebody holds the key</center>
Link Link's Avatar

Untitled

Joined: Apr 2001

Posts: 2,099

Link is doing well so far

May 13, 2002, 07:01 PM
Link is offline
Reply With Quote
Although that solution may or may not be a temporary way to stop the "virus," we still need to find out more about what it is, and who made it.

I would assume that the creator will eventually come forward. I was talking to Derby on ICQ about this, and I came up with two possibilites:
  1. The creator wants to prove a point, or teach people a lesson (such as "don't use cheat programs!")
  2. The creator wants attention or publicity or something. (I can see this happening, because after coming back after making MW, people I had never heard of before would chat in a JJ2 game, "Hey! Are you THE Link? The one that made MW?!" That wasn't purposeful of course, but I do think that making MW has my name more well known in the JJ2 community)

Either of these possibilities need the creator to come forward. I guess there could be someone who just wanted to destroy JJ2, like "Ooooh! This game is so fragile that just one more crack and it will shatter into a hundred tiny pieces " but I doubt that.

In my conversation with Derby, he mentioned someone he thought was a suspect. I'm not going to name that person here, at least not until we do further investigation.

And finally, if you have been paying attention to the J2HG message board, you'll find that there has been someone under the alias "EO3" who claimed to make this "virus." I gave the IP to the JCF admins, who looked it up, and figured out that it was a joke message, but they wouldn't tell me who it was (The message was in the style of an ElectroPiZZa joke though). Whoever that was, please don't joke around about something serious like this.
__________________
With our extreme gelatinous apology,
We beg to inform your Imperial Majesty,
Unto whom be dominion and power and glory,
There still remains that strange precipitate
Which has the quality to resist
Our oldest and most trusted catalyst.
It is a substance we cannot cremate
By temperatures known to our Laboratory.

~ E.J. Pratt
 
defalcon

JCF Member

Joined: Apr 2001

Posts: 2,366

defalcon has disabled reputation

May 13, 2002, 10:22 PM
defalcon is offline
Reply With Quote
Well, it turns on at startup, right? Couldn't you at least remove it from the startup process, by editing the startup-ini-file (boot/win.ini, I foget which) or by using mscfg? It won't remove it from you system, but it won't be running either.
Krezack Krezack's Avatar

JCF member

Joined: Nov 2001

Posts: 5,156

Krezack has disabled reputation

May 15, 2002, 03:40 AM
Krezack is offline
Reply With Quote
Quote:
Originally posted by Link
In my conversation with Derby, he mentioned someone he thought was a suspect. I'm not going to name that person here, at least not until we do further investigation.
First of all i would like to tell people some maybe not so permenant ways to remove programmes you don't want to occur at start up:

Click start>run>type: msconfig

Once in click the tab called 'Startup' then untick the programmes you don't want at startup.

Also i don't think that "wtujmwy" has anything to do with this, most likely just another trojan screwing over your computer.

And last of all: Of course we all know who the suspect is Link, its Krezack of course. Who else could it be? (na i'm just joking with you Link )
__________________
"Are we not threatened with a flood of information? And is this not the monstrousness of it: that it crushes beauty by means of beauty, and annihilates truth by means of truth? For the sound of a million Shakespeares would produce the very same furious din and hubbub as the sound of a herd of prairie buffalo or sea billows."
—Stanisław Lem, Imaginary Magnitude (1973)
Super Saiyan

JCF Member

Joined: Nov 2001

Posts: 416

Super Saiyan is doing well so far

May 16, 2002, 10:35 AM
Super Saiyan is offline
Reply With Quote
No wait. I think those programs like TSF Warper or those other cheat programs dont have much to do with this virus. I think the virus is more a Add-On Script which uses programs which are a bit popular so much people would use it and get the virus. Im sure Its that, because I have TSF Warper too, but I dont have the virus.

Also I think I may know why this virus uses TSF warper and not other programs: The virus warps victims to places, he does that with TSF warper, Im sure about that. And those F9 list names could be some lil extra script.
__________________
Bla.
Link Link's Avatar

Untitled

Joined: Apr 2001

Posts: 2,099

Link is doing well so far

May 16, 2002, 01:35 PM
Link is offline
Reply With Quote
I highly doubt that this virus (or whatever it is) "attaches" itself onto existing programs.
__________________
With our extreme gelatinous apology,
We beg to inform your Imperial Majesty,
Unto whom be dominion and power and glory,
There still remains that strange precipitate
Which has the quality to resist
Our oldest and most trusted catalyst.
It is a substance we cannot cremate
By temperatures known to our Laboratory.

~ E.J. Pratt
 
defalcon

JCF Member

Joined: Apr 2001

Posts: 2,366

defalcon has disabled reputation

May 16, 2002, 09:59 PM
defalcon is offline
Reply With Quote
1. The virus CANNOT spread through JJ2, the only way is the method link pointed out about replacing it with a level blah b lah, but it'd be difficult to do.

2. I don't think it'd attach itself to programs, for various reasons that I'm too lazy to type

3. Overlord, Eagle and Krezack don't make viruses. Overlord is not that type of person, nor is Eagle or Krezack.

Use mscfg to take it out of startup. It shouldn't hassle you then.
Unhit Unhit's Avatar

Pornocrat

Joined: Nov 2001

Posts: 3,771

Unhit is doing well so far

May 16, 2002, 11:33 PM
Unhit is offline
Reply With Quote
Eagle told me the virus would come through some warp programme, and he and Alberto are at the moment looking where you EXACTLY can get it from.
Darned cheaters :P. This is a nice punishment to all of you !
__________________
<center>somebody holds the key</center>
the WINNER

JCF Member

Joined: Feb 2002

Posts: 381

the WINNER is doing well so far

May 17, 2002, 01:21 AM
the WINNER is offline
Reply With Quote
UNHIT!!! STOP THAT!
Stop attacking, mr. Unhit!YEAH

Edit 1:

The virus uses programs.
1. The virus uses TSF Warper or Ultrawarp to make you to warp other positions.
2. Virus uses The Weird to change names.
3. The virus makes players invisible. You can do that with Stealth Kicker.
4. You get a black screen if you kick yourself with Stealth Kicker. Virus does that.

btw, how Eagle can know the virus comes with a warp program?

Last edited by the WINNER; May 17, 2002 at 01:39 AM.
Krezack Krezack's Avatar

JCF member

Joined: Nov 2001

Posts: 5,156

Krezack has disabled reputation

May 17, 2002, 02:30 AM
Krezack is offline
Reply With Quote
Gee, this "virus" seems to mutate each day. Why would someone that advanced at programming bother to bother us? Tell me that darned cheaters.
__________________
"Are we not threatened with a flood of information? And is this not the monstrousness of it: that it crushes beauty by means of beauty, and annihilates truth by means of truth? For the sound of a million Shakespeares would produce the very same furious din and hubbub as the sound of a herd of prairie buffalo or sea billows."
—Stanisław Lem, Imaginary Magnitude (1973)
Ruffe aka Peacy

JCF Member

Joined: May 2002

Posts: 6

Ruffe aka Peacy is doing well so far

May 17, 2002, 03:32 AM
Ruffe aka Peacy is offline
Reply With Quote
Lightbulb

I had got Initcent away a week ago, but then, I needed TSF warper to do a thing, then, I downloaded it and just got Initcent back!! Thats a proove about it comes from TSF warper.....
I have been hacking Initcent sometimes, but I dont get any clues about who mae it or anything. There comes another program with Initcent, that one makes a new Initcent to the Windows directory. You just have to shut down those programs and delete the files, then everything is good again.
MaGoo

JCF Member

Joined: Jun 2001

Posts: 2,059

MaGoo is doing well so far

May 17, 2002, 03:46 AM
MaGoo is offline
Reply With Quote
Nobody believed me when I was the first to say it was a bunch of programs.
__________________
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Unhit Unhit's Avatar

Pornocrat

Joined: Nov 2001

Posts: 3,771

Unhit is doing well so far

May 17, 2002, 04:55 AM
Unhit is offline
Reply With Quote
I definitely did not attack anyone, Winner.
__________________
<center>somebody holds the key</center>
the WINNER

JCF Member

Joined: Feb 2002

Posts: 381

the WINNER is doing well so far

May 17, 2002, 09:18 AM
the WINNER is offline
Reply With Quote
Ruffe/Peacemaker? What are the files? Initcent has a random name. Everybody has different because the filename is random.
I saw that thing when I deleted UGKCAB.EXE(Initcent program). When I restart computer to make sure that Initcent is gone. Pow! Initcent came BACK! With a different filename. You know what is the filename if you do THIS thing:
1.Press ctrl+alt+del.
2.Close initcent.
3.VERYVERYVERY QUICKLY press ctrl+alt+del.
4.If you see a NEW program came to the close programs window, that is Initcent. That new program is the filename without EXE.
5.Close the new program.

If the Initcent did not close, try again. In my computer, this works SOMETIMES, but when it did not work, I tried to do this again and then Initcent was away.
Do that above and delete the virus program('new program in ctrl+alt+del'.exe).

Last edited by the WINNER; May 18, 2002 at 12:28 AM.
Cpp Cpp's Avatar

JCF Member

Joined: Mar 2001

Posts: 1,557

Cpp is doing well so far

May 17, 2002, 09:40 AM
Cpp is offline
Reply With Quote
I was wondering... What does actually "initcent" mean? It doesn't mean anything in English. Maybe it's in another language. Can anyone recognise the meaning of this word?
__________________
<a href="http://nmap.org/"><img border="0" alt="Nmap Security Scanner" src="http://images.insecure.org/nmap/images/prop/nmap_bnr_matrix_pfos.gif"/></a>
Unhit Unhit's Avatar

Pornocrat

Joined: Nov 2001

Posts: 3,771

Unhit is doing well so far

May 17, 2002, 10:15 AM
Unhit is offline
Reply With Quote
Perhaps it means "in_it_sent" (sent for cent), what means that it is included in a file?
__________________
<center>somebody holds the key</center>
>>Møønßlãzé<<

JCF Member

Joined: Apr 2002

Posts: 459

>>Møønßlãzé<< is doing well so far

May 17, 2002, 11:11 AM
>>Møønßlãzé<< is offline
Reply With Quote
Quote:
Originally posted by the WINNER
Ruffe/Peacemaker? What are the files? Initcent has a random name. Everybody has different because the filename is random.
I saw that thing when I deleted UGKCAB.EXE(Initcent program). When I restart computer to make sure that Initcent is gone. Pow! Initcent came BACK! With a different filename. You know what is the filename if you do THIS thing:
1.Press ctrl+alt+del.
2.Close initcent.
3.VERYVERYVERY QUICKLY press ctrl+alt+del.
4.If you see a NEW program came to the close programs window, that is Initcent. That new program is the filename without EXE.
Well done winner, the program is called wtujmwy ¬_¬

I didn't installed any crap called wtujmwy, or anything, but this program appears when initcent reload.
Oh, get it, just close the program.

I didn't got glasses and don't need any, what's the program in start up edit called? There's no program called initcent or wtujmwy.

*Falls on his knees* sniff...I did it, I'd found out how to stop initcent a single time, and people don't even say a little thanks
*Runs crying away*
*Finds a blaster*
*Shoots anything he sees*
defalcon

JCF Member

Joined: Apr 2001

Posts: 2,366

defalcon has disabled reputation

May 17, 2002, 04:25 PM
defalcon is offline
Reply With Quote
Quote:
Originally posted by the WINNER
UNHIT!!! STOP THAT!
Stop attacking, mr. Unhit!YEAH

Edit 1:

The virus uses programs.
1. The virus uses TSF Warper or Ultrawarp to make you to warp other positions.
2. Virus uses The Weird to change names.
3. The virus makes players invisible. You can do that with Stealth Kicker.
4. You get a black screen if you kick yourself with Stealth Kicker. Virus does that.

btw, how Eagle can know the virus comes with a warp program?
Unhit isn't attacking anyone in specific - he's putting down cheaters, something I agree to ;P

Okay: EAGLE DOES NOT MAKE VIRUSES!!!! How does he know the virus comes from a warp program? Well, for starters, you guys here are saying 'oh, we got TSF warper and now we have this weird thing', so just a slight possibility he visited this thread or heard from others.

Now, Stealth Kicker? TSF Warp and Ultrawarp? If you choose to use all these trainers and programs, then technically it's nobodies fault but your own.
Ruffe aka Peacy

JCF Member

Joined: May 2002

Posts: 6

Ruffe aka Peacy is doing well so far

May 17, 2002, 11:56 PM
Ruffe aka Peacy is offline
Reply With Quote
Exclamation Is this forum full of rookies???

Why is everyone asking what the file names are??!! You must just find out yourself!! Find the two files 1. the Initcent file 2. the file wich makes a new Initcent Then delete them. Initcnet isnt in the startup things because the other one is and that one starts Initcent! So, if you want to get it away, find out wich names the 2 files have on your computer and then shut them down and delete them! (It isnt so hard as you think! You only are making it very hard!)
the WINNER

JCF Member

Joined: Feb 2002

Posts: 381

the WINNER is doing well so far

May 18, 2002, 12:16 AM
the WINNER is offline
Reply With Quote
Re: Moonblaze's post

Quote:
Originally posted by >>Møønßlãzé<<


Well done winner, the program is called wtujmwy ¬_¬

I didn't installed any crap called wtujmwy, or anything, but this program appears when initcent reload.
Oh, get it, just close the program.

I didn't got glasses and don't need any, what's the program in start up edit called? There's no program called initcent or wtujmwy.

*Falls on his knees* sniff...I did it, I'd found out how to stop initcent a single time, and people don't even say a little thanks
*Runs crying away*
*Finds a blaster*
*Shoots anything he sees*
The program is called WTUJMWY in your computer. It's random filename. The program what makes new Initcent file, I don't know its filename (or argh, it's random too?). And this is to all: TSF WARPER makes the virus so you, who has TSF Warper but not the virus, DELETE THE TSF WARPER NOW! The program don't make the virus in some two days. When you have TSF Warper for a week, you have the virus. . Moonbaze, your WTUJMWY is the virus, but did you even listen?? EVERYBODY HAS A DIFFERENT VIRUS FILENAME!
That's why they did not say "Thank you". So. Follow the Moonblaze's reply(That where was the very nice big pic ) and the WTUJMWY is a 'new program' what comes into CTRL+ALT+DEL list. If you don't understand, read MY reply how to get rid of INITCENT. But Moonblaze, delete the file and restart your computer. You have the virus still and with different filename.
Ruffe aka Peacy

JCF Member

Joined: May 2002

Posts: 6

Ruffe aka Peacy is doing well so far

May 18, 2002, 01:40 AM
Ruffe aka Peacy is offline
Reply With Quote
Thumbs up Initcents time is over.

A virus comes and it looks like impossible to get rid of. Then.... maybe a month goes, and then someone sees how to delete it. Then he/she tells to others and they delete it too. Then....soon the virus is only history. If someone gets it, he just deletes it. Initcents time is now over. Some people have allready got rid of it before and now I can do it too and so. I dont think it takes much time before nearly everyone knows how to delete it. So dont be affraid you never get rid of it. Its not even hard.
Super Saiyan

JCF Member

Joined: Nov 2001

Posts: 416

Super Saiyan is doing well so far

May 18, 2002, 02:00 AM
Super Saiyan is offline
Reply With Quote
Maybe its: Ini't'cent, Inicent.
ya know from: it didnt do anything or its harmless ya know. Hmm maybe its not, maybe its just a stupid name.
__________________
Bla.
Cpp Cpp's Avatar

JCF Member

Joined: Mar 2001

Posts: 1,557

Cpp is doing well so far

May 18, 2002, 02:26 AM
Cpp is offline
Reply With Quote
Good news, people!

Yesterday me and Alberto examined this virus a bit. As Alberto said, the virus spreads itself with a program called TSF Warper, exe name: Warper.exe, Icon: An exclamation mark in a yellow 3angle. His discovery was confirmed by me. When you run this warper.exe it creates a file named "Msacdlg.exe" in windows/system directory. It aslo adds this file to startup so it runs every time windows start. This is the reason why the virus didn't disappear when you deleted all the trainers you had(including warper.exe). When this file (Msacdlg.exe) is executed it creates another file in windows directory under random file name making it hard to find. This file has a windows icon so it looks like just like it was a non-exe or a file with unknown extension. Its file size is around 16,5 kb. And when this file is executed it creates the "Initcent" virus that messes with the game.

So shortly:
Warper.exe => Msacdlg.exe in windows/system directory => Initcent virus with a random file name in windows directory.

I'm not sure if there are any more files that were created by this virus but if you delete them the virus is gone for sure.

How to get rid of it:
1. Delete Warper.exe, don't spread it.
2. Run registry editor and delete this key: "Mscadlg" in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run
3. Delete Msacdlg.exe from your windows/system directory
4. If Initcent is running restart your computer otherwise skip this step
5. And finally find the virus file in the windows directory and remove it. It has a random name, windows icon, file size = 16896 b

This should take care of the virus.
Me and Alberto also winhacked this file and discovered a few things. It actually has a name. It's called Jazz 2 Annoying Virus. We also found all the bad words in it. LOL "Naked lori" :P Thanks, Alberto for the copy :P
But we still have one question unsolved. Who made it?
__________________
<a href="http://nmap.org/"><img border="0" alt="Nmap Security Scanner" src="http://images.insecure.org/nmap/images/prop/nmap_bnr_matrix_pfos.gif"/></a>
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump

All times are GMT -8. The time now is 12:16 PM.