Go to Post What does code sound like going though a complier? - Hiteak [more]
Home
Go Back   Chief Delphi > FIRST > General Forum
CD-Media   CD-Spy  
portal register members calendar search Today's Posts Mark Forums Read FAQ rules

 
Reply
Thread Tools Rate Thread Display Modes
  #1   Spotlight this post!  
Unread 09-01-2011, 11:33
elbuo elbuo is offline
Teams #2884 and #1144
AKA: Yamil Asusta
FRC #1144 (Coquitron)
Team Role: Programmer
 
Join Date: Jan 2009
Rookie Year: 2009
Location: Puerto Rico
Posts: 89
elbuo has a spectacular aura aboutelbuo has a spectacular aura aboutelbuo has a spectacular aura about
Killbill.exe found in FIRST USB

Before installing the update in our classmate we ran a scan over the USB drive with Microsoft Security Essentials and it actually reported a virus.

Details below


Does anyone have a similar issue?
__________________


Reply With Quote
  #2   Spotlight this post!  
Unread 09-01-2011, 11:37
Bochek's Avatar
Bochek Bochek is offline
Registered User
AKA: Adam Bochek
FRC #2200 (MMRambotics)
Team Role: Mentor
 
Join Date: Jan 2007
Rookie Year: 2007
Location: Burlington, Ontario, Canada
Posts: 577
Bochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud of
Re: Killbill.exe found in FIRST USB

what year classmate do you have? was this the image for the 2010 classmate or for the 2011 classmate?
__________________
-----------------------------------------------
Adam Bochek - FRC 2200
http://www.mmrambotics.com
http://www.watchfirstnow.com
Reply With Quote
  #3   Spotlight this post!  
Unread 09-01-2011, 11:39
elbuo elbuo is offline
Teams #2884 and #1144
AKA: Yamil Asusta
FRC #1144 (Coquitron)
Team Role: Programmer
 
Join Date: Jan 2009
Rookie Year: 2009
Location: Puerto Rico
Posts: 89
elbuo has a spectacular aura aboutelbuo has a spectacular aura aboutelbuo has a spectacular aura about
Re: Killbill.exe found in FIRST USB

2010
__________________


Reply With Quote
  #4   Spotlight this post!  
Unread 09-01-2011, 11:41
Bochek's Avatar
Bochek Bochek is offline
Registered User
AKA: Adam Bochek
FRC #2200 (MMRambotics)
Team Role: Mentor
 
Join Date: Jan 2007
Rookie Year: 2007
Location: Burlington, Ontario, Canada
Posts: 577
Bochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud ofBochek has much to be proud of
Re: Killbill.exe found in FIRST USB

We are currently Scanning ours, will get back to you in a bit.

Edit: Nothing found using AVG Free.
__________________
-----------------------------------------------
Adam Bochek - FRC 2200
http://www.mmrambotics.com
http://www.watchfirstnow.com

Last edited by Bochek : 09-01-2011 at 11:45.
Reply With Quote
  #5   Spotlight this post!  
Unread 09-01-2011, 12:12
iblis432 iblis432 is offline
Co Captain/Chief Programmer
AKA: Bobby
FRC #2106 (Junkyard Dogs)
Team Role: Programmer
 
Join Date: Feb 2009
Rookie Year: 2008
Location: Virginia
Posts: 146
iblis432 is a splendid one to beholdiblis432 is a splendid one to beholdiblis432 is a splendid one to beholdiblis432 is a splendid one to beholdiblis432 is a splendid one to beholdiblis432 is a splendid one to beholdiblis432 is a splendid one to behold
Re: Killbill.exe found in FIRST USB

Usually if something edits another program, virus scanners see it as a trojan even if it isn't. An image could easily be considered a trojan because it edits the code of other programs. That may be what the issue is. Unless you have plugged the flashdrive into something you aren't supposed to, the flashdrive should be completely safe. I have seen plenty of clean files pop up as 'trojans' to virus scanners.
__________________
"Don't worry, programming can fix it"
Reply With Quote
  #6   Spotlight this post!  
Unread 09-01-2011, 12:12
davidthefat davidthefat is offline
Alumni
AKA: David Yoon
FRC #0589 (Falkons)
Team Role: Alumni
 
Join Date: Jan 2011
Rookie Year: 2010
Location: California
Posts: 792
davidthefat has much to be proud ofdavidthefat has much to be proud ofdavidthefat has much to be proud ofdavidthefat has much to be proud ofdavidthefat has much to be proud ofdavidthefat has much to be proud ofdavidthefat has much to be proud ofdavidthefat has much to be proud ofdavidthefat has much to be proud of
Re: Killbill.exe found in FIRST USB

That might be the executable file that modifies the registries and whatnot to allow for that driver station to work. They have to remove all the menus and deny running other programs in driver mode.

Because Windows Essentials picked it up and AVG did not, I can adduce that my statement is true. The Essentials are looking for files that will modify the OS in anyway and call it a trojan.
__________________
Do not say what can or cannot be done, but, instead, say what must be done for the task at hand must be accomplished.

Last edited by davidthefat : 09-01-2011 at 12:21.
Reply With Quote
  #7   Spotlight this post!  
Unread 09-01-2011, 18:13
Erik Huang's Avatar
Erik Huang Erik Huang is offline
Jack of all Trades, Master of None
FRC #0296 (Northern Knights)
Team Role: Mentor
 
Join Date: Mar 2010
Rookie Year: 2010
Location: Montreal
Posts: 27
Erik Huang is a jewel in the roughErik Huang is a jewel in the roughErik Huang is a jewel in the rough
Re: Killbill.exe found in FIRST USB

well then why would it be called killbill.exe? i don't think it's a FIRST easter egg...
__________________
Here ye, here ye! Here cometh the robot!
Reply With Quote
  #8   Spotlight this post!  
Unread 09-01-2011, 18:18
Vikesrock's Avatar
Vikesrock Vikesrock is offline
Team 2175 Founder
AKA: Kevin O'Connor
no team
Team Role: Engineer
 
Join Date: Mar 2006
Rookie Year: 2007
Location: Manchester, NH
Posts: 3,305
Vikesrock has a reputation beyond reputeVikesrock has a reputation beyond reputeVikesrock has a reputation beyond reputeVikesrock has a reputation beyond reputeVikesrock has a reputation beyond reputeVikesrock has a reputation beyond reputeVikesrock has a reputation beyond reputeVikesrock has a reputation beyond reputeVikesrock has a reputation beyond reputeVikesrock has a reputation beyond reputeVikesrock has a reputation beyond repute
Send a message via AIM to Vikesrock Send a message via MSN to Vikesrock Send a message via Yahoo to Vikesrock
Re: Killbill.exe found in FIRST USB

Some digging on Google suggests that this is a false positive and that the file is related to Webcam drivers. I'm not sure why the file is named the way it is, but it does not appear to be an actual trojan or virus.
__________________


2007 Wisconsin Regional Highest Rookie Seed & Regional Finalists (Thanks 930 & 2039)
2008 MN Regional Semifinalists (Thanks 2472 & 1756)
2009 Northstar Regional Semifinalists (Thanks 171 & 525)
Reply With Quote
  #9   Spotlight this post!  
Unread 14-01-2011, 23:04
NetPlanet NetPlanet is offline
Registered User
AKA: Michael Bilinsky
FRC #0296 (The Northern Knights)
Team Role: Mentor
 
Join Date: Jan 2011
Rookie Year: 2010
Location: Montreal, Qc
Posts: 23
NetPlanet is an unknown quantity at this point
Re: Killbill.exe found in FIRST USB

I just finished installing AVG free (not the trial version that comes with the update after re-imaging the 2010 classmate) and it detected and quarantined this exact file somewhere on the classmate itself after a scan.

For a false positive, why the menacing name?

Last edited by NetPlanet : 14-01-2011 at 23:13.
Reply With Quote
  #10   Spotlight this post!  
Unread 15-01-2011, 09:31
Team1559is1337 Team1559is1337 is offline
Registered User
None #1559
 
Join Date: Jan 2009
Location: NY, Victor
Posts: 5
Team1559is1337 is an unknown quantity at this point
Question Re: Killbill.exe found in FIRST USB

Hey, so im just wondering why it says 1/4/1980, jw.
Reply With Quote
  #11   Spotlight this post!  
Unread 15-01-2011, 16:09
1 Winged Angel 1 Winged Angel is offline
Mentor/Alumni/Guitarist/Programmer
AKA: Nicholas Henry
FRC #0841 (The BioMechs)
Team Role: Mentor
 
Join Date: Jan 2008
Rookie Year: 2005
Location: San Pablo
Posts: 2
1 Winged Angel is an unknown quantity at this point
Send a message via AIM to 1 Winged Angel Send a message via MSN to 1 Winged Angel Send a message via Yahoo to 1 Winged Angel
Re: Killbill.exe found in FIRST USB

You should scan with Malwarebytes. Tends to be more effective than AVG Free in scanning files at times.
Reply With Quote
Reply


Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 23:16.

The Chief Delphi Forums are sponsored by Innovation First International, Inc.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Copyright © Chief Delphi