This page is a wiki. Please login or create an account to begin editing.


10 posts / 0 new
Last post
Offline
Joined: 2011 Jul 21
Virus Warning

My computer became infected with the 666 virus about a month ago. The symptom was a corrupted System file that would show up as a crash with error -127 just before Finder was launched.

I traced the source of the virus to the file:
logic_platinum_4.7.0.sit

that I downloaded from MG.

I recommend that you DON'T try to use this archive.

Gary

Comments

MikeTomTom's picture
Offline
Joined: 2009 Dec 7

@Gary: Virex 6.1 will detect and remove 666 and variants from your system OK. You must use the included 2007 defs with this DL to eradicate successfully.

Also, you don't need to install Virex 6.1 you can run it over your drives without installing

ps: 666 (aka sevendust) is a biatch. You might be surprised where it lodges itself once loose in your HD.

pss: There are 3 DL's on the 4.7.0 page. Which DL is the "dusted" one?

Offline
Joined: 2011 Jul 21

Virex is cleaning up the mess right now. I have lots of stuff to scan so it's taking awhile.

The infected culprit is the first one listed on the 4.7.0 download page.

Gary

MikeTomTom's picture
Offline
Joined: 2009 Dec 7

Hi Gary. I've located, cleaned and re-uploaded. This should keep others safe.

It looks as though 666 was introduced via the patch the original uploader had used, as inside the DL, "666 variant D" had infected the patched Dongle, "Logic Audio Dongle EMU 1.3.1" and in testing to see if the patch had taken, it in turn had infected "Logic Audio Platinum 4.7.0".

This I've eradicated from the original upload and have replaced & re-uploaded with a cleaned copy of LAP 4.7.0

If anyone else reading this has DL'd "Logic Audio Platinum 4.7.0" before this notice was sent. I seriously recommend that you run Virex 6.1 with the 2007 defs. Now.

MegaKsenia's picture
Offline
Joined: 2013 May 8

Are you sure?
It was my upload. I used this app (screen is my) and packed.
I havent any virus and no one trouble with system (Mac OS 9).

Offline
Joined: 2011 Jul 21

I'm sure - based on the Virex Report. But it COULD be the dongle emulator included in your SIT file where the virus actually resides. I can't tell.

Take a look at your extensions folder. The 666 virus (if present) will be at the top of the (filename sorted) list.

Gary

MikeTomTom's picture
Offline
Joined: 2009 Dec 7

[Heads up] Files in Audio Logic Platinum 4.0.4 were also virus infected with "666" variant D, a.k.a. "SevenDust"

[Edit] This file has since been replaced with a cleaned copy.

MegaKsenia's picture
Offline
Joined: 2013 May 8

You was try my upload or reupload by Daxeria user?
MY upload stay at mega.co.nz

Offline
Joined: 2011 Jul 21

I don't recall the source I used for the download (MG or external). But to be safe, check yours on the mega site as well.

Gary

MikeTomTom's picture
Offline
Joined: 2009 Dec 7

There is no mega.co.nz link on the Logic Audio Platinum 4.7.0 page.

The file that was linked at the top of that page was a broken amazonaws link. Daxeria posted a corrected amazonaws link in Dax's post. The corrected link DL'd the virus infected file.

This has since been cleaned. But don't use Dax's link for now as it still is active and will DL the infected file.

[Update] All links to infected copies of Logic Audio Platinum 4.7.0 on the LAP 4.7.0 page, have now been removed.