Please Help - Is This A Virus?

Printable View

Feb 2nd, 2003, 03:50 AM
Gtarawneh

Please Help - Is This A Virus?

Hi Guys,
I've just received this file in a very encrypted mode in IE. Still, I was able to extract it. Looking back at the data I received, this file should be named 'parker.pif', I extracted it to 'File.x' temprarily and when I renamed that file to 'parker.pif' alot of problems happened! Windows stopped responding & I had to do 2~3 restarts. I wasn't able to view its properties or delete it via Windows (WindowsXP Pro here), so I used my startup disk and I deleted it using Dos. Please check it for me, I've attached that 'File.x'!

Please HELP!
Feb 2nd, 2003, 02:40 PM
Gtarawneh

Nooooo

Anybody Pleeaaasee ?

What does it mean when two members download a file which may contain a fatal virus, and they never show up again :eek: :eek: :confused: !!!!!!!!
Feb 2nd, 2003, 03:41 PM
Spiv

It's not dangerous, looking at it in a hexeditor it looks like it could be an encrypted exe. Other than that it seems perfectly harmless. it contains no valid exe header information at all, atleast not in it's current form:p
Feb 2nd, 2003, 03:42 PM
crptcblade

Hmmm..."Please open up this file and see if its a virus".

I don't understand, people should be just lining up to help...

:rolleyes:
Feb 2nd, 2003, 03:46 PM
Spiv

That said, renaming it to .pif locks out explorer:D in Win2k lol

Anyways, just drop into dos and delete it from the desktop. It's just a corrupted pif or lnk file thats contiains invalid information to icons and program locations. Following the MS philosophy

On error goto Infinate loop
InfinateLoop
resume

:p :eek:
Feb 3rd, 2003, 08:01 AM
venerable bede

NO. But this is :
http://www.avert.org/graphics/hivvirus4.jpg
Feb 3rd, 2003, 10:25 AM
plenderj

I have deleted the attachment in Gtarawneh's post. Just to be on the safe side ;)
Feb 3rd, 2003, 01:08 PM
Gtarawneh

Thanks Guys, Good News :D

Really wish I could know who's behind this!??#@$@#%
Feb 3rd, 2003, 05:02 PM
Spiv

It's not a virus. There is no executable code on the file at all. Renaming the file to a Pif or lnk mearly causes Explorer to try get the accociated icon from the included path in the pif/lnk. Since it's a corrupted/garbage file Explorer goes crazy and locks trying to get the path thats totally invalid.

A virus needs to execute, naming the file pif/lnk doesn't execute it:p
Feb 5th, 2003, 10:35 AM
mendhak

Stop causing problems.
Feb 27th, 2003, 08:28 AM
Gtarawneh

he he he he, I love you menhack! :D
I missed you alot man :)
Feb 27th, 2003, 08:32 AM
mendhak

:mortification:
Feb 27th, 2003, 08:41 AM
plenderj

Quote:

Originally posted by mendhak
:mortification:

lol :)
Feb 27th, 2003, 07:06 PM
Nightwalker83

Re: Please Help - Is This A Virus?

Quote:

Originally posted by Gtarawneh
Hi Guys,
I've just received this file in a very encrypted mode in IE. Still, I was able to extract it. Looking back at the data I received, this file should be named 'parker.pif', I extracted it to 'File.x' temprarily and when I renamed that file to 'parker.pif' alot of problems happened! Windows stopped responding & I had to do 2~3 restarts. I wasn't able to view its properties or delete it via Windows (WindowsXP Pro here), so I used my startup disk and I deleted it using Dos. Please check it for me, I've attached that 'File.x'!

Please HELP!

I downloaded it awhile ago and scanned it with anti virus software no viruses were found.