Author Topic: Don't download м а л е н ь к и й ч е л о в е к 4  (Read 2327 times)

Anon70000

  • Cherry Eater
  • Posts: 50
  • OS:
  • Windows 7/Server 2008 R2 Windows 7/Server 2008 R2
  • Browser:
  • Firefox 39.0 Firefox 39.0
    • View Profile
  • Playstyle: Keyboard
Don't download м а л е н ь к и й ч е л о в е к 4
« on: September 15, 2015, 02:30:07 PM »
Sorry for loud title.

okay so there is game that came up on wiki, and there is 2 .exe's
the game itself and another .exe

at the end of the game there is
Code: [Select]
execute_program(working_directory + '\SamizdatEradicationWizard.exe', parameter_string(0), false);
it'll load it into your memory, but nothing will pop up on screen, the .exe itself got strings like

Code: [Select]
CALL DWORD PTR DS:[<&KERNEL32.GetSystemTimeAsFileTime>]
CALL DWORD PTR DS:[<&KERNEL32.GetCurrentProcessId>]
CALL DWORD PTR DS:[<&KERNEL32.GetCurrentThreadId>]
CALL DWORD PTR DS:[<&KERNEL32.GetTickCount>]
It might sound like a save protection but it's actually not.

I can't determine what it is doing
If there are Assembly experts please post what the second .exe actually does

I know it might sound paranoidal, but better be cautious to this stuff
« Last Edit: September 15, 2015, 02:34:20 PM by Anon70000 »

Anon70000

  • Cherry Eater
  • Posts: 50
  • OS:
  • Windows 7/Server 2008 R2 Windows 7/Server 2008 R2
  • Browser:
  • Firefox 39.0 Firefox 39.0
    • View Profile
  • Playstyle: Keyboard
Re: Don't download м а л е н ь к и й ч е л о в е к 4
« Reply #1 on: September 15, 2015, 11:33:19 PM »
The guy states that
Quote
It has come to my attention that people slander my good name and a good game . SamizdatEradicationWizard.exe is not a virus at all. If you read the code , you would know that all this makes the game Delete the Save file and the file of the game, when it's done . Stop lying. It is no virus. Racism at finest. -- Пу́шкин (2015-09-16 09:08:08)
But the objFinale deletes the save already via file_delete.
Also, pretends to be russian while his russian speech is really poor or he's just trolling

sunbla

  • Cherry Eater
  • Posts: 74
  • OS:
  • Windows NT 10.0 Windows NT 10.0
  • Browser:
  • Chrome 45.0.2454.85 Chrome 45.0.2454.85
    • View Profile
  • Playstyle: Gamepad
Re: Don't download м а л е н ь к и й ч е л о в е к 4
« Reply #2 on: September 16, 2015, 06:19:57 AM »
you can just delete the 2nd exe in the folder and play the game normally. it crashes at the clearscreen but that doesn't really matter

Paragus

  • Alumi
  • Spike Dodger
  • Posts: 179
  • OS:
  • Windows 7/Server 2008 R2 Windows 7/Server 2008 R2
  • Browser:
  • Firefox 40.0 Firefox 40.0
    • View Profile
  • Playstyle: Keyboard
Re: Don't download м а л е н ь к и й ч е л о в е к 4
« Reply #3 on: September 16, 2015, 09:10:35 AM »
Even if you do not delete the other exe, you can end the process in your task manager once the game is over.  I don't agree with the reasoning and coding of it, but it is nothing malicious.

Anon70000

  • Cherry Eater
  • Posts: 50
  • OS:
  • Windows 7/Server 2008 R2 Windows 7/Server 2008 R2
  • Browser:
  • Firefox 39.0 Firefox 39.0
    • View Profile
  • Playstyle: Keyboard
Re: Don't download м а л е н ь к и й ч е л о в е к 4
« Reply #4 on: September 16, 2015, 10:34:18 AM »
ok, we've had conversation with Archee, the file is safe, it's just deleting the game, nothing else, .exe will close itself upon deleting the game's exe, just don't launch it separatly, author just poorly talks english, locking the topic, delete if needed
« Last Edit: September 16, 2015, 10:40:25 AM by Anon70000 »