Don't download м а л е н ь к и й ч е л о в е к 4

[Anon70000]

Sorry for loud title.

okay so there is game that came up on wiki, and there is 2 .exe's
the game itself and another .exe

at the end of the game there is

Code: [Select]

execute_program(working_directory + '\SamizdatEradicationWizard.exe', parameter_string(0), false);
it'll load it into your memory, but nothing will pop up on screen, the .exe itself got strings like

Code: [Select]

CALL DWORD PTR DS:[<&KERNEL32.GetSystemTimeAsFileTime>]
CALL DWORD PTR DS:[<&KERNEL32.GetCurrentProcessId>]
CALL DWORD PTR DS:[<&KERNEL32.GetCurrentThreadId>]
CALL DWORD PTR DS:[<&KERNEL32.GetTickCount>]It might sound like a save protection but it's actually not.

I can't determine what it is doing
If there are Assembly experts please post what the second .exe actually does

I know it might sound paranoidal, but better be cautious to this stuff

[Anon70000]

The guy states that

It has come to my attention that people slander my good name and a good game . SamizdatEradicationWizard.exe is not a virus at all. If you read the code , you would know that all this makes the game Delete the Save file and the file of the game, when it's done . Stop lying. It is no virus. Racism at finest. -- Пу́шкин (2015-09-16 09:08:08)

But the objFinale deletes the save already via file_delete.
Also, pretends to be russian while his russian speech is really poor or he's just trolling

[sunbla]

you can just delete the 2nd exe in the folder and play the game normally. it crashes at the clearscreen but that doesn't really matter

[Paragus]

Even if you do not delete the other exe, you can end the process in your task manager once the game is over.  I don't agree with the reasoning and coding of it, but it is nothing malicious.

[Anon70000]

ok, we've had conversation with Archee, the file is safe, it's just deleting the game, nothing else, .exe will close itself upon deleting the game's exe, just don't launch it separatly, author just poorly talks english, locking the topic, delete if needed