mystery file

[Tim_axe]

I tried to decompile it in MSVC++5.0, but there was no debugging info within it. It tried to run the program and debug in MSVC++, and a console window came up for 1/10th of a second. I don't know if it was an error or what. Since then, I've been really worried. I tried to execute it again, but it was 'corrupt'. Hopefully it wasn't a virus or anything...

BTW, when I closed MSVC++, my computer became unstable. I had to restart, and shortly after I deleted the file. Hopefully nothing was messed up, and my computer seems stable right now.

As for the contents, I've only found one place of very repetitive data so far...
000071A0H - C3 E9 00 00 00 00 A1 - Ãé
The next few lines after that start off with the same HEX value...and end with the same HEX value... I don't know what it means...


And to Dominaterx: It isn't a PHP file. I think you're using Mozilla (as I am) as it thinks it is .php. It is acturally supposed to be .zip, and you extract the file with WinZip. We don't know for sure about the file inside the zip...



-Tim_axe

[Trust_Not_123]

tim_axe of course it will be corrupt. if you read the first post, it was only half downloaded..and thus in theory, only half the data would be there. thats probably the reason there is no debug info and possibly the reason your computer becomes unstable when you try to execute it. but im not sure on that one.

peace

[Dominaterx]

Yes Tim_axe,I am using mozilla.But have not got Winzip installed at the moement.Like I suggested why not upload to an AntiVirus company and tell them you found this strange file and if its not a virus could they possibly tell you what it is?.


-Dominaterx

[Zonewalker]

I have to agree with trust here, there isn't much point trying to decompile it being as it was only half way throught the download... we already knew from Stephenmg's post that it couldn't be run in DOS mode (by logical extension we can deduce it isn't a 16 bit program... i.e. is a 32bit program) - although I did have a look at the source anyway.... I really don't think that there is much else we can tell about this 'program' unless Hatebreed would be kind enough to d/l it again.....cos it's either corrupted or encrypted (but i doubt encryption..it looks more corrupted to me)

Hatebreed fancy d/l it again? (assuming you can restore the d/l link!)

Z

[hatebreed2000]

i would have d/l again a long time ago to get the full d/l unfortunatley i didnt do anything that i know of to d/l it...i have no clue why i got a d/l pop-up like i said the window came up and i didnt know what it was cause i hadnt clicked on anything it just poped up out of no where.so in short i have no clur how to d/l it.thanx for your guys thoughts and effort ill keep the file around cause hopefully one day ill be smart enough to do something with it to find out what it is.take it easy ppl.

[Jim Ryan]

try emailing the guys at google and ask them about it .. they may have a simple answer rather than all this investigating ..

[MrLinus]

Originally posted here by hatebreed2000
i went to open up IE and had multi-proxy on, ... <snip>

I've been reading this thread and I'm curious about one thing. You said you had "multi-proxy" on. I'm assuming anonymous browsing or going through a proxy server. Could this file be from there rather than google?