Pages: [1] :: one page |
|
Author |
Thread Statistics | Show CCP posts - 0 post(s) |
Tamia Clant
New Dawn Corp New Eden Research
|
Posted - 2007.12.06 10:32:00 -
[1]
I just downloaded the Trinity patch manually from the eve-online site. Was running great and looking awesome for the first 5 minutes.
Then Kaspersky firewall tells me EVE is doing some very suspicious activities. Namely, this:
I can understand if I get a warning if EVE tries to connect to the Internet, after all it's supposed to, but is there any valid reason it should try to inject itself to ALL processes?
CCP, is this expected behavior for Trinity, or is there something wrong with my client? I can't see how it could have been infected, since I downloaded the patch directly from the official site, but then again, I'm no security expert.
Looking for queue-free research slots? Click here!
|
Admiral Pelleon
Caldari White Shadow Imperium Burning Horizons
|
Posted - 2007.12.06 10:41:00 -
[2]
Interesting.. Only thing I can suggest is CCP is trying to take over the world one computer at a time and IT'S A TRAP RUN FOR YOUR LIFE. ________ "It's a good day to die!"
|
Surfin's PlunderBunny
Minmatar mUfFiN fAcToRy
|
Posted - 2007.12.06 10:42:00 -
[3]
It's looking for your boot.ini file
Originally by: ISD Valorem The Devs have stated multiple times that they are looking at the Amarr issues.
|
Oedus Caro
Caldari Cross Roads
|
Posted - 2007.12.06 10:44:00 -
[4]
Edited by: Oedus Caro on 06/12/2007 10:46:27 Spam removed. Please stay on topic - Valorem
|
Dark Shikari
Caldari Imperium Technologies Firmus Ixion
|
Posted - 2007.12.06 10:48:00 -
[5]
Originally by: Surfin's PlunderBunny It's looking for your boot.ini file
BURN!
23 Member
EVE Video makers: save bandwidth! Use the H.264 AutoEncoder! (updated) |
Tamia Clant
New Dawn Corp New Eden Research
|
Posted - 2007.12.06 10:56:00 -
[6]
Clearly this is an attempt from CCP to take over my computer, and on the next restart I can expect the Windows XP boot screen replaced with "Property of CCP, all rights reserved".
Looking for queue-free research slots? Click here!
|
Omak Topal
Gallente The Topal Corporation
|
Posted - 2007.12.06 11:08:00 -
[7]
Originally by: Tamia Clant Clearly this is an attempt from CCP to take over my computer, and on the next restart I can expect the Windows XP boot screen replaced with "Property of CCP, all rights reserved".
you accepted that when you accetped the EULA ;)
--------[sig]--------- I didn't do it, i swear! |
Tamia Clant
New Dawn Corp New Eden Research
|
Posted - 2007.12.06 12:12:00 -
[8]
Update: EVE will try to do the same thing once per session when I press ESC to bring up the options menu. Any dev know if I should be allowing or denying this action? (I assume terminating isn't a valid option, as I kinda need the executable to run the game)
Looking for queue-free research slots? Click here!
|
Tamia Clant
New Dawn Corp New Eden Research
|
Posted - 2007.12.06 12:34:00 -
[9]
Looks like it makes no difference if I allow or deny it, so I told my firewall to deny it every time, just in case.
Looking for queue-free research slots? Click here!
|
Tamia Clant
New Dawn Corp New Eden Research
|
Posted - 2007.12.07 21:18:00 -
[10]
Argh, it keeps popping up no matter what! Am I the only one with this issue?
Looking for queue-free research slots? Click here!
|
|
Keav
Minmatar Spitfire Inc
|
Posted - 2007.12.07 21:21:00 -
[11]
Perhaps you do actually have a virus that is masking itself as the Eve executable??!!
Have you run a complete virus scan on your system? Perhaps scan with multiple anti-virus solutions, i.e. Kaspersky and e.g. a Symantec online scan. ________________________________________________________
|
Barrick Stormsworn
Minmatar Re-Awakened Technologies Inc Electus Matari
|
Posted - 2007.12.07 21:23:00 -
[12]
I don't know why Kapersky means by "all processes."
Is it literal, or does it mean "all associated processes," or all with "EVE.exe," or what? I can't imagine it trying to "inject" itself into all processes.
My guess, judging by when it occurs, is that EVE is checking to see how much of your processor it can use. It does this by querying existing processes and what they're using/needing, then adjusts accordingly. When hitting Esc, it throttles down since it's just in a menu.
This is a BS hypothesis with no proof and doesn't really make sense (for instance, there are way better ways to query the processor and see how much time is available), but it's the only positive explanation that comes to mind I don't really think CCP is malicious.
Originally by: Tarminic OH MY GOD WHAT HAVE YOU DONE?!
|
Tamia Clant
New Dawn Corp New Eden Research
|
Posted - 2007.12.07 21:47:00 -
[13]
Originally by: Keav Perhaps you do actually have a virus that is masking itself as the Eve executable??!!
Have you run a complete virus scan on your system? Perhaps scan with multiple anti-virus solutions, i.e. Kaspersky and e.g. a Symantec online scan.
That's the first thing I thought of, I've ran several anti-virus programs, along with a few Spyware scanners, I was completely clean except for a few tracking cookies, which are obviously not related to the issue.
Originally by: Barrick Stormsworn I don't know why Kapersky means by "all processes."
Is it literal, or does it mean "all associated processes," or all with "EVE.exe," or what? I can't imagine it trying to "inject" itself into all processes.
My guess, judging by when it occurs, is that EVE is checking to see how much of your processor it can use. It does this by querying existing processes and what they're using/needing, then adjusts accordingly. When hitting Esc, it throttles down since it's just in a menu.
This is a BS hypothesis with no proof and doesn't really make sense (for instance, there are way better ways to query the processor and see how much time is available), but it's the only positive explanation that comes to mind I don't really think CCP is malicious.
As far as I know, when Kaspersky means "all processes", it's every entry on the "Processes" tab in the Task Manager.
I don't think it's a query for processor usage information. If it was, why would it only do it once per session?
As an additional information, it doesn't do it only when I press ESC, sometimes I'm just sitting in station and it'll eventually pop up.
Looking for queue-free research slots? Click here!
|
|
|
|
Pages: [1] :: one page |
First page | Previous page | Next page | Last page |