Mac OS 9 Lives
Mac OS 9 Discussion => Mac OS 9, Hacks & Upgrades => Topic started by: Syntho on July 12, 2014, 03:02:27 AM
-
On older Windows machines, I noticed that after you browse the web a lot and just generally use your computer extensively, things start lagging or stalling. An example is after a fresh format you click the Start button and the menu comes up immediately, but after some use of your PC, it'll take 1-2 seconds for the menu to appear.
I'm experiencing something similar in OS9. When I right click on a file it takes a bit for the menu to come up, and when I click off and try again, it's fast the 2nd time around. Another example is when I open software (even Simple Text), I see the top bar appear for 2-3 seconds but it's totally grey (like it's frozen on opening) until it finally opens. It clears up after closing it and trying again.
What could be the cause of this? I'm running on an SSD drive so I don't defragment.
-
I think You should make a virus check...
-
I don't browse the web on that machine though. Well, in OSX I did a little, but not in OS9. I just opened Simple Text and it took 5-6 seconds to open.
-
:)"Mac Os 9 Lives" :)
...and its virus too...
:'(
-
Which software?
-
sometimes its hard to really figure it out..... but theres a problem.
for example i was having problem i thought was with my delta 1010 sample rate clock
because my audio was dropping out and i had to reset my samplerate to get my audio back clear
but i found out it was something to do with my midi setup because i disabled the ports that i wasnt using and BANG
eveyrthing is fine..
i guess this is the logic behind disabling alot of extensions u arent using etc
well thats more about conservation of resources but u never know what can be causing problems
u have to be very thorough and go slow to figure it out maybe?
-
Ok guys, I found the problem.... but the problem is probably worse than you think.
My computer is officially possessed by the devil and I'm going to need an exorcist to remedy it.
There's a mysterious extension that appeared in my extensions panel. It's a blank file icon (like when there's no association) with no version or software type information, and it looks just like this:
◻666
:o :o :o
I disabled it and Simple Text immediately opened as usual, and the lag seems to be gone.
-
http://forums.macnn.com/82/applications/21787/extension-666-is-this-bad/
I think I know where this may have come from too...
-
I've been meaning to format my OS9 system for a while so I think I'm going to format the system instead just to be safe...
-
Guys, I've got some bad news. That Cubase VST/32 5.0 update file is infected with the 666/SevenDust virus. CubaseVST32_51r1.sit.bin is the file.
Does this mean that all of us who installed it are also infected?
I used some software called Agax to scan it and it's definitely the culprit. You can download the scanner from here: http://defyne.org/agax/
Maybe that file was cross contaminated on my own system and the files online here are fine, but I'd use this software to check and also take a look in your extensions panel for the 666 extension to be sure.
-
I can confirm that the infected file is the Cubase 5.1 update that was posted here. Everyone who installed it needs to grab http://defyne.org/agax/ and run a scan. I'm personally just going to format my system as I've needed to do that anyway.
-
thats not the cubase 5.x updateer its the actual installer downloaded directly from steinberg
can u check this out for us?
ftp.steinberg.net
download from there and check the file because if thats the file then we all have this ;(
but it seems like its not a huge deal
http://www.symantec.com/security_response/writeup.jsp?docid=2000-122112-5959-99
lists it as easy to remove and threat level low
-
That file on the Steinberg FTP isn't infected. I think what happened is whoever posted the update file on Adrive was infected, downloaded the updater (then it got infected), then uploaded it to Adrive.
-
great.. so its mactron, me, or diehard..
how do i check my files for the virus.
can u outline the process for me
going to get a coffee looks like i have work to do
*sigh*
i remember there was some talk of this on the macintoshgarden site
-
Look in your extensions folder, at the very top there may be an extension that looks like this:
◻666
I believe you installed Cubase long before it was posted here though. The update that was posted here was only posted in March, and I didn't install this until a couple days ago when I started having problems.
Grab the software here: http://defyne.org/agax/ - just run it, and go to 'Examine' at the top and do your whole OS9 hard drive. It'll have a log file noting if anything is infected with SevenDust. If you see something, go to Repair and select OS9. The rest is intuitive.
-
Whew...
Downloaded agax and have completed without any problems on my HD.
I use Cubase vst32/5.2 and not 5.1r1 thank goodness.
I was just wondering why startup was marginally slow entering to desktop
after loading extensions must be some other culprit.
Anyway goodluck guys.
-
The 5.0 CDROM is fine. It's that darn 5.1 update on Adrive. I'm gonna install 5.1, but do it from the clean Steinberg file.
If you're curious you can download the file and scan it. Just make sure to leave it in its own folder and don't move it anywhere where software is. Scan it with Agax and it should tell you it's infected.
I'm wondering why the 5.2 update wasn't posted here, now that I think of it... which file do you use for that?
-
lol syntho, its not an update file its the complete installer of 5.1r1
pretty sure i was the one who uploaded it too;(
but i dont have any 666 extension?
it could have been from another one of my macs tho..
i just ran agax and didnt get any messages about viruses...
-
Well when you use it along with the 5.0 CDROM as noted in the instructions, it's 'kind of' an update :D
-
The 5.0 CDROM is fine. It's that darn 5.1 update on Adrive. I'm gonna install 5.1, but do it from the clean Steinberg file.
If you're curious you can download the file and scan it. Just make sure to leave it in its own folder and don't move it anywhere where software is. Scan it with Agax and it should tell you it's infected.
I'm wondering why the 5.2 update wasn't posted here, now that I think of it... which file do you use for that?
.
should be ready soon (ftp) - (5.2) it can coexist with (5.1r1)
-
Is that taken from the Steinberg FTP?
-
check my folder
-
Is that a different file from what's on the Steinberg FTP?
-
i didnt post the 5.2 file because it was listed as a "public beta" and was never taken officially out of beta status from what i could dedeuce.... its perfectly fine to use it tho im sure.
-
Is that a different file from what's on the Steinberg FTP?
It must be - but I downloaded this a long time ago.
i didnt post the 5.2 file because it was listed as a "public beta" and was never taken officially out of beta status from what i could dedeuce.... its perfectly fine to use it tho im sure.
There is a read me that goes with it you can have a look at.
-
I'll hope that Die Hard don't be offended if I quote myself from a PM I'd sent to him on May 16, 2014:
I have Sevendust/666 in two occasions. Now a days I don't have it in any of my systems, but it may be in to some very old compress file or disk image...
... in the last infection, my suspicious origin was Steinberg FTP !
-
I´d like to share my findings when I had 666/Seven Dust a few years ago. Here is how I got rid of it:
• Installing Virex (I think 6.2 is the latest version)
• getting the latest Virus definitions from late 2007
• running the full scan and let Virex delete all 666
• And here comes the tricky part; 666 is writing itselve into the RAM, and copying to every program that gets opened/closed. That means that Virex can delete all copys of 666 at the HD, but when you close Virex 666 is writing itselve to the Virex program itselve. So when you are done with Virex, do not close Virex or shutdown the computer, just switch it OFF, and let it off for a minute or more.
• Scan again if you got and deleted all 666
-
yes, absolutely, that is a virus, or to be exact, a file infector.
as there are only 2 or 3 for OS9 it should be possible to find out his name. :)
please be quick, in case it is a 666 extension (and no, removing the extension will not work.)
-
How did a poll get posted with this thread? I definitely didn't make that poll. Hmm...
-
How did a poll get posted with this thread? I definitely didn't make that poll. Hmm...
probably mactron? or protools guy?
:D
(Edited to keep personal users information privately)
-
probably mactron? or protools guy?
I didn't do it.
-
the 666virus did it he ;D he ;D
-
I definitely didn't type those answers in there, I don't even know what a couple of those are. Let me try something...
-
I thought I might have clicked New Poll when posting a thread and it fills out automatically if you don't fill anything in, but it says you must type in two responses and a question for it to go through. The only other person who can edit posts in this forum is DH I think.
-
probably mactron? or protools guy?
I didn't do it.
Neither do I
-
the 666virus did it he ;D he ;D
LOL!
-
oh, when i posted this i didnt notive how long that threas already was and that the problem already had been found.
i hope you have done in between what has to be done? because if not, this extension will one day delete all your multimedia files on startup.
-
Mactron removed the virus and replace the link -afro-
I actually formatted my entire system, but I was planning to do that anyway.
-
Guys, I've got some bad news. That Cubase VST/32 5.0 update file is infected with the 666/SevenDust virus. CubaseVST32_51r1.sit.bin is the file.
we need to figure out if this file was re-packaged by mactron back in april 2014
because that was when we were doing all this re-encoding of sit + bin files
to ensure compatibility with a-drive... we need to find out if this is a solo file that is infected or if there are other files that were infected
-
one would think that this is impossible, someone has an infected file, and then distributes it further.
but it can easily happen.
because as long as you dont launch the infected app, it wont infect your system, so all you have to do is not running antivirus stuff in the right moment, and you keep such files for years without knowing.
which is why it is important for anyone to still keep ones own protection running ... also for a 12 years old OS.
the good thing about file infectors is that you notice it.
simpletext takes 4 second to start? that rang a bell. because that is exactly what i told my friends about 14 years ago when i caught this thing for the first time, too. i then learned about "antivirus" for macintosh ithin minutes. :)
-
Three years later and the infected file is still here: CubaseVST32_51r1.sit.bin. Before I downloaded that update from here I thought "there's no way it hasn't been replaced by now". I hope we didn't infect too many people over time :o
-
Get the instant daw problem should be solved.
-
Yeah I had a brief encounter with that this past year while trying to sort out a Cubase problem I was having... i noticed it immediately though and dealt with it. It freaked me out a bit so I checked out everything I had and it seemed to point to that Download that you linked If I recall... I wasn't 100% sure about it then but it makes sense now!!
-
Three years later and the infected file is still here: CubaseVST32_51r1.sit.bin. Before I downloaded that update from here I thought "there's no way it hasn't been replaced by now". I hope we didn't infect too many people over time :o
I believe the source of the "CubaseVST32_51r1.sit.bin" file was actually the Steinberg FTP itself (as Mactron mentioned), I have moved the file for now to a non-downloadable area and I will download it, scan and confirm. The ISO file is an image from a factory CD, so we will be safe with that one, but need o find a "clean" update file :(
-
Three years later and the infected file is still here: CubaseVST32_51r1.sit.bin. Before I downloaded that update from here I thought "there's no way it hasn't been replaced by now". I hope we didn't infect too many people over time :o
I believe the source of the "CubaseVST32_51r1.sit.bin" file was actually the Steinberg FTP itself (as Mactron mentioned), I have moved the file for now to a non-downloadable area and I will download it, scan and confirm. The ISO file is an image from a factory CD, so we will be safe with that one, but need o find a "clean" update file :(
I had downloaded it from Steinberg and did get the virus. This was before I ever came here.
-
I've scanned the one on the Steinberg FTP and it's fine. What may have happened is that someone at Steinberg had it, the file got infected, then people complained and they fixed it.
-
Is this virus still contained in the VT 51r1 download offered in the download area?
-
Is this virus still contained in the VT 51r1 download offered in the download area?
Can someone download it, scan it, and LMK, my PPC machines are not up right now :(
-
i will try to install it and equip myself with the virus scanner
-
Both, VST 32/5.0 installer and 5.1r1 updater are clean. Just checked.
-
Thanks for checking, also scanning with agax reported no finds
-
Nuendo has been cleaned by ssp3 :)
It is back online and virus free... I am glad we have not had too many issues in over 10 years