 12-03-2007, 02:59 PM | #1 (permalink) | | Junior Member Join Date: Nov 2007 Posts: 4 Style: Light - Version 6 Thanks: 0
Thanked 0x in 0 Posts Gil: 53 Bank: 0 Total Gil: 53 Donate  | Trojan detected in POL folder? When I scanned my PC it found what it said was an 'unknown trojan' which pointed to: C:\Program Files\PlayOnline\SquareEnix\FINAL FANTASY XI\SIGNATURE.DAT Is this something everyone's install has and the scanner is just giving out a 'false alarm' or is it something thats not supposed to be there? |  | ::Quote Selected::  | | | 12-03-2007, 03:49 PM | #2 (permalink) | | Needs jugs!! Join Date: Aug 2007 Location: Someplace resembling a mental institution. Posts: 204 Style: Dark - Version 6 My Mood:  Thanks: 104
Thanked 40x in 30 Posts Gil: 1,799 Bank: 15,903 Total Gil: 17,701 Donate | Re: Trojan detected in POL folder? I'm just doing a bit of net checking...the first link is a bit long. Please take the time to read it. First Link
I'll put this in here as well. Could be a good read, though I admit, I only read stuff like this and pick out key words, phrases, tone, and intent.... Second Link
There are various other readings on the net that you can have fun with. Bounce your "Signature.dat" file through google along with "ffxi" and have fun.
Personally, I'd kill it. Check and follow the advise in the first link. Please keep in mind though that if your fix eats your machine, you'll be loading up again......  Doesn't this really say it all? ><  | | | ::Quote Selected:: | | | 12-03-2007, 04:58 PM | #3 (permalink) | | Veteran Member Join Date: Jul 2004 Posts: 1,834 Style: Light - Version 6 My Mood:  Thanks: 5
Thanked 22x in 19 Posts Gil: 14,262 Bank: 0 Total Gil: 14,262 Donate | Re: Trojan detected in POL folder? I had the same scan happen to me on a old backup I made that only accessed the net long enough to update it. I do believe S.E addressed certain virus products might consider it a bug sometime back..
I killed mine and it didn't mess with logging into the game. 
Nin75, Bst75. Drk61, War61, Rdm40, All other jobs are 37. All 3 starting city missions completed. All Zilart missions completed. All CoP missions completed. TouA completed. | | | ::Quote Selected:: | | | 12-03-2007, 05:14 PM | #4 (permalink) | | The S.E.E.S. Brigade Oracle of Knowledge Join Date: Oct 2004 Posts: 6,439 Style: Light - Version 6 Thanks: 1,596
Thanked 1,396x in 976 Posts Gil: 14,987 Bank: 213,935 Total Gil: 228,923 Donate | Re: Trojan detected in POL folder? from what I remember, most viruses don't give up as easily as just deleting their file. You should see what your virus scanner reports it as, and then google instructions for dealing with that virus.
Likely scenario at worst is you wind up reinstalling FFXI.
Possibly reinstalling everything on your PC.
Absolute worst case scenario is the computer doing something freaky with quantum mechanics and destroying all of humanity.
Either way, better than leaving it unchecked. | Originally Posted by someone who just spent ten minutes with feba | | wtf? I am horribly disoriented and scared. I can't tell what's real anymore | |  | ::Quote Selected:: | | | 12-03-2007, 05:59 PM | #5 (permalink) | | Needs jugs!! Join Date: Aug 2007 Location: Someplace resembling a mental institution. Posts: 204 Style: Dark - Version 6 My Mood: Thanks: 104
Thanked 40x in 30 Posts Gil: 1,799 Bank: 15,903 Total Gil: 17,701 Donate | Re: Trojan detected in POL folder? Originally Posted by Feba  | Likely scenario at worst is you wind up reinstalling FFXI.
Possibly reinstalling everything on your PC.
Either way, better than leaving it unchecked. |
True. I don't have a clue as to how nasty that thing is. From the quick quips that I read, I was left w/ the impression that it was a keylogger/trojan, or a hybrid animal there of. Give it the boot, then reboot the machine and see if it comes back. If it doesn't, then simply deleting said file should keep you in the clear. If it comes back, well, then you've got some deeper issues.
I hate digging through HJT logs, and posts on forums containing them as they are generally mind numbing to all but those who are really interested in them, however, the fellow who posted up his HJT log and then followed listed instructions there in seemed to have his problem solved.
In the interest of not having to do more research than needed, would the OP(er) be willing to post up the 3rd party programs that are installed on said computer? ....would be nice to get the word out about someone's shitty program that they put on the net for the "benefit" of the ffxi community..... Doesn't this really say it all? >< | | | ::Quote Selected:: | | | 12-04-2007, 01:18 AM | #6 (permalink) | | red means NO Super Moderator Join Date: May 2004 Location: Portugal Posts: 2,709 Style: Light - Version 6 My Mood:  Thanks: 55
Thanked 148x in 89 Posts Gil: 19,066 Bank: 0 Total Gil: 19,066 Donate | Re: Trojan detected in POL folder? This is why i shudder upon the thought of third party software  | | | ::Quote Selected:: | | | 12-04-2007, 03:27 AM | #7 (permalink) | | WHO ARE YOU? Join Date: Nov 2007 Location: Windurst/USofA Posts: 31 Style: Light - Version 6 Thanks: 11
Thanked 2x in 2 Posts Gil: 648 Bank: 0 Total Gil: 648 Donate | Re: Trojan detected in POL folder? I am just glad that mine doesn't have this Trojan, even though stupider things have gave me Trojans. MySpace for one, don't even know how that happened lol...
But, as everyone else has said just delete the stupid little booger, and be gone with it!  | Originally Posted by Silent Howler | Vana'diel is a big world, so don't bite off more than you can chew.  | | | | ::Quote Selected:: | | | 12-04-2007, 04:02 AM | #8 (permalink) | | The S.E.E.S. Brigade Oracle of Knowledge Join Date: Oct 2004 Posts: 6,439 Style: Light - Version 6 Thanks: 1,596
Thanked 1,396x in 976 Posts Gil: 14,987 Bank: 213,935 Total Gil: 228,923 Donate | Re: Trojan detected in POL folder? | Quote: | | If it doesn't, then simply deleting said file should keep you in the clear. | Don't trust this. Just because the one file is gone does not mean there is not another problem elsewhere. | Quote: | | post up the 3rd party programs that are installed on said computer? | I highly doubt this would be of any help. The chances of that doing more than starting a witchhunt are slim. | Originally Posted by someone who just spent ten minutes with feba | | wtf? I am horribly disoriented and scared. I can't tell what's real anymore | | | | ::Quote Selected:: | | | 12-04-2007, 05:13 AM | #9 (permalink) | | Senior Veteran Oracle of Knowledge Join Date: May 2006 Posts: 4,416 Style: Light - Version 6 Thanks: 102
Thanked 1,277x in 774 Posts Gil: 2,421 Bank: 79,083 Total Gil: 81,504 Donate | Re: Trojan detected in POL folder? The signature.dat file is naturally quite small (1k on mine iirc). If yours is any larger you have a problem, if not, you probably don't.
EDIT: It's 2 bytes taking up a full block (4k) in my Virtual Machine.
Last edited by Mhurron : 12-04-2007 at 05:27 AM. | | | ::Quote Selected:: | | | 12-04-2007, 10:52 AM | #10 (permalink) | | Junior Member Join Date: Nov 2007 Posts: 4 Style: Light - Version 6 Thanks: 0
Thanked 0x in 0 Posts Gil: 53 Bank: 0 Total Gil: 53 Donate | Re: Trojan detected in POL folder? I deleted the file and I can still log into the game fine. It didnt re-create itself or anything.
I dont use any 3rd party addons for FF11, so Im not sure where it could of came from. Im very careful when I browse the web and use FF + noscript addon. /shrug
To me, it sounds like something that came installed with the game, I only found it soon after I installed FF11 and know of another with FF11 who has this file too. Who knows...
Well, thanks for the heads-up about this file... wasnt sure if it was a big threat or not. | | | ::Quote Selected:: | | | 12-04-2007, 11:51 AM | #11 (permalink) | | Veteran Member Join Date: Jul 2004 Posts: 1,834 Style: Light - Version 6 My Mood: Thanks: 5
Thanked 22x in 19 Posts Gil: 14,262 Bank: 0 Total Gil: 14,262 Donate | Re: Trojan detected in POL folder? Norton's fixed my virus that was attached to FFXI. I have long since moved on to another virus protection program and it hasn't located anything.
The virus's I have had are usually easily fixed by Norton's and never to come back. I think only 1 time I had to actually manually remove one. Its mainly the maleware virus's that causes me the most frustration.
Funny thing about mine was it was on my back up version on my external hard drive but not on my main version on my internal drive.
Nin75, Bst75. Drk61, War61, Rdm40, All other jobs are 37. All 3 starting city missions completed. All Zilart missions completed. All CoP missions completed. TouA completed. | | | ::Quote Selected:: | | | 12-04-2007, 01:50 PM | #12 (permalink) | | Brain of Knowledge Join Date: May 2006 Location: Colorado Posts: 1,530 Style: Light - Version 6 My Mood:  Thanks: 139
Thanked 91x in 57 Posts Gil: 14,884 Bank: 10,470 Total Gil: 25,354 Donate | Re: Trojan detected in POL folder? | Originally Posted by Soulsaver | I am just glad that mine doesn't have this Trojan, even though stupider things have gave me Trojans. MySpace for one, don't even know how that happened lol...
But, as everyone else has said just delete the stupid little booger, and be gone with it! | Myspace is a virus in and of itself. Not suprising you would get a smaller spawn from it.  | Originally Posted by Ellipses | | Really, it's just like pretty much every question about this game that begins with "Why." The answer is "Because." | | Originally Posted by MCLV | | A subjob is like sex, you shouldn't have it untill your 18 but if you don't have it after 21 everyone laughs at you. | | | | ::Quote Selected:: | |
| Thread Tools | | | | Display Modes |  Linear Mode |
 Posting Rules | You may not post new threads You may not post replies You may not post attachments You may not edit your posts
HTML code is Off | | |
All times are GMT -8. The time now is 05:09 AM.
| | |
