Malicious content on "SeeJays" site?

Bigdawg67 · Post by **Bigdawg67** » Thu Aug 01, 2013 2:45 am

Hello Everyone,

I am new to EM and have been playing for a few days now. Up until last night, the game has played smoothly on my rig (Win 7 64x, Phenom quad core 3.2 GHz, 8 GB RAM, nVidia GTX 760 ti) at highest settings. I am using the LAA utility as well.

Iâ€™ve been spending time on the forums learning about the game and have noticed that â€œSeeJaysâ€� website (http://evochron.junholt.se/) seems to be great place to go for info on the game but when I try to visit the site, BitDefender blocks the site as containing malicious content.

Realizing that sometimes anti-virus programs can be mistaken and wanting to access the information on that site (and in particular the NavData tool), and also not believing the SeeJay would intentionally have malicious content on his site as he appears to be still actively involved with Evochron, I decided to take a risk and override Bitdefender to access the site. Not the smartest decision Iâ€™ve made in my life I am afraid.

I downloaded the NavData tool and set it up. Started the game and attempted to jump through a gate and the game crashed with the error â€œRuntime error 506. Could not load image at line 65659. C:\Users\...\AppData\Local\Temp\28888evo\<somefilenamehere>10118,1,0"

So, next I tried to reverse everything I did to set up the Navdata tool and remove it but even after doing that, I still couldnâ€™t jump out of the system or even jump within the system without the 506 crash. I next tried the following in order:
1. Ran a full scan with Bitdefender. It found over 70 infections and removed them. Game still crashed on jumps.
2. Started a new character thinking there may have been some corruption associated with my other character profile. Game just CTD with no errors at all.
3. Verified the game cache through Steam. Game still CTD with no errors at all.
4. Backed up my character files in c:\SW3DG\Eveochron Mercenary, uninstalled the game from Steam, reinstalled, added my profile and key/joystick settings files back. Game ran more stable for longer but I noticed lag that wasnâ€™t there before and it would still occasionally CTD on jumps or arrivals.
5. I then searched and found this post http://www.starwraith.com/forum/viewtopic.php?t=9483 and tried removing BitDefender. That seemed to do the trick and the game is back to normal (so far anyway). I installed Ad Aware instead and explicitly added Steam, EM, and all my other games to the exception list so we'll see how things go from here.

Anyway, in conclusion, can someone alert SeeJay and ask him to take a look at his site and see if it can be cleaned up? Iâ€™d really like to use it as a resource but it is apparent that there is some bad juju going on with it at the moment.

Awesome game Vice! Thanks for making it.

Cheers!

Post by **Marvin** » Thu Aug 01, 2013 6:11 am

The problem might be with the NavData tool, which was written for the previous version of the game. The expansion made many changes, one or more may have caused the NavData tool to crash ... leaving bits and pieces of the game floating around on your hard drive (WAG, on my part). Vice is a magician when it comes to spotting possible malicious problems ... but, if the guilty party is the NavData tool, I'm not sure Vice has tested it against his game. Only Vice can say for sure.

SeeJay · Post by **SeeJay** » Thu Aug 01, 2013 6:12 am

Hi Bigdawg67.

No need for anyone to alert me, I read the forum every day!;)

That is weird. I've never heard of anyone having problems with any files on my site before.
I will look into it and will let you know the result.

Vice might have an idea regarding the error message you received when the game crashed.

I'll be back!

Post by **Marvin** » Thu Aug 01, 2013 6:15 am

BigDawg's link to one of Vice's solutions indicated that BitDefender might be the culprit. So far, that indeed seems to be the case.

SeeJay · Post by **SeeJay** » Thu Aug 01, 2013 6:31 am

I use Win7 64bit with M-GPS (Evometrix) with no problems. That's the online map/GPS.

Navdata was created by Atollski and that is very old now and might not work on the newest EM update.

SeeJay · Post by **SeeJay** » Thu Aug 01, 2013 6:47 am

I just had my web host (one.com) to check my site for malicious contents and they couldn't find anything.

I suspect that it's the "old" NavData program that causes the crash. Several parameters have changed in the latest game update
and communication between NavData and the game does not work as intended anymore.

Atollski hasn't been around for a while but if I get a hold of him, I'll ask if he could update the program.

Thalium · Post by **Thalium** » Thu Aug 01, 2013 8:34 am

ive had the same thing with seejays site, but since the first time my anti virus said "NO leave this site" ive carried on and use seejays site daily. 99% of the time i play EM on my alienware desktop with seejays site on my other screen or my ipad.. i even had a friend of mine whos a programmer for the MOD look at the site and he cant find nothing wrong.. silly anti virus software..

dont worry mate his map and EM site is second to none and ill keep useing seejays site what ever my anti virus says =]

;)

Thalium · Post by **Thalium** » Thu Aug 01, 2013 8:39 am

ahh thats weird... i just scanned his site and it only flags up 1 thing 1/38 and what it flags up is something called bitdefender.. dunno what that is but its nothing bad going by what i read.

Normalized URL: http://mercenary.junholt.se/
Detection ratio: 1 / 38
Analysis date: 2013-08-01 08:36:49 UTC ( 0 minutes ago )

BitDefender Malware site

bitdefender isnt a bad thing lol

dunno if this helps..

[Edited on 8-1-2013 by Thalium]

[Edited on 8-1-2013 by Thalium]

SeeJay · Post by **SeeJay** » Thu Aug 01, 2013 9:10 am

From post: 163700, Topic: tid=10929, author=Thalium wrote:ahh thats weird... i just scanned his site and it only flags up 1 thing 1/38 and what it flags up is something called bitdefender.. dunno what that is but its nothing bad going by what i read.

Normalized URL: http://mercenary.junholt.se/
Detection ratio: 1 / 38
Analysis date: 2013-08-01 08:36:49 UTC ( 0 minutes ago )

BitDefender Malware site

bitdefender isnt a bad thing lol

dunno if this helps..

[Edited on 8-1-2013 by Thalium]

[Edited on 8-1-2013 by Thalium]

What????

There is nothing on any of my sites that has bitdefender.
My host couldn't find anything at all and I mentioned bitdefender for them as well.
Wicked!?

Post by **Marvin** » Thu Aug 01, 2013 3:27 pm

Curiouser and curiouser.

Capt_Caveman · Post by **Capt_Caveman** » Thu Aug 01, 2013 3:54 pm

you say you found 70 infected files, it sounds like you picked up a virus before going to seejays site and it only showed its symptoms when you installed the nav program.

Maarschalk · Post by **Maarschalk** » Fri Aug 02, 2013 1:15 am

Can we get immunized for Computer Viruses?.....

:P:P:P:P:P