Trojan detected in POL folder?

[Poptart]

When I scanned my PC it found what it said was an 'unknown trojan' which pointed to: C:\Program Files\PlayOnline\SquareEnix\FINAL FANTASY XI\SIGNATURE.DAT Is this something everyone's install has and the scanner is just giving out a 'false alarm' or is it something thats not supposed to be there?

[WovenDarkness]

Re: Trojan detected in POL folder?

I'm just doing a bit of net checking...the first link is a bit long. Please take the time to read it.

First Link


I'll put this in here as well. Could be a good read, though I admit, I only read stuff like this and pick out key words, phrases, tone, and intent....


Second Link


There are various other readings on the net that you can have fun with. Bounce your "Signature.dat" file through google along with "ffxi" and have fun.

Personally, I'd kill it. Check and follow the advise in the first link. Please keep in mind though that if your fix eats your machine, you'll be loading up again......

[little ninja]

Re: Trojan detected in POL folder?

I had the same scan happen to me on a old backup I made that only accessed the net long enough to update it. I do believe S.E addressed certain virus products might consider it a bug sometime back..

I killed mine and it didn't mess with logging into the game.

[Feba]

Re: Trojan detected in POL folder?

from what I remember, most viruses don't give up as easily as just deleting their file. You should see what your virus scanner reports it as, and then google instructions for dealing with that virus.

Likely scenario at worst is you wind up reinstalling FFXI.

Possibly reinstalling everything on your PC.


Absolute worst case scenario is the computer doing something freaky with quantum mechanics and destroying all of humanity.

Either way, better than leaving it unchecked.

[WovenDarkness]

Re: Trojan detected in POL folder?

Likely scenario at worst is you wind up reinstalling FFXI.

Possibly reinstalling everything on your PC.

Either way, better than leaving it unchecked.

True. I don't have a clue as to how nasty that thing is. From the quick quips that I read, I was left w/ the impression that it was a keylogger/trojan, or a hybrid animal there of. Give it the boot, then reboot the machine and see if it comes back. If it doesn't, then simply deleting said file should keep you in the clear. If it comes back, well, then you've got some deeper issues.

I hate digging through HJT logs, and posts on forums containing them as they are generally mind numbing to all but those who are really interested in them, however, the fellow who posted up his HJT log and then followed listed instructions there in seemed to have his problem solved.

In the interest of not having to do more research than needed, would the OP(er) be willing to post up the 3rd party programs that are installed on said computer? ....would be nice to get the word out about someone's shitty program that they put on the net for the "benefit" of the ffxi community.....

[Balfree]

Re: Trojan detected in POL folder?

This is why i shudder upon the thought of third party software

[Soulsaver]

Re: Trojan detected in POL folder?

I am just glad that mine doesn't have this Trojan, even though stupider things have gave me Trojans. MySpace for one, don't even know how that happened lol...

But, as everyone else has said just delete the stupid little booger, and be gone with it!

[Feba]

Re: Trojan detected in POL folder?

If it doesn't, then simply deleting said file should keep you in the clear.

Don't trust this. Just because the one file is gone does not mean there is not another problem elsewhere.

post up the 3rd party programs that are installed on said computer?

I highly doubt this would be of any help. The chances of that doing more than starting a witchhunt are slim.

[Mhurron]

Re: Trojan detected in POL folder?

The signature.dat file is naturally quite small (1k on mine iirc). If yours is any larger you have a problem, if not, you probably don't.

EDIT: It's 2 bytes taking up a full block (4k) in my Virtual Machine.

[Poptart]

Re: Trojan detected in POL folder?

I deleted the file and I can still log into the game fine. It didnt re-create itself or anything.
I dont use any 3rd party addons for FF11, so Im not sure where it could of came from. Im very careful when I browse the web and use FF + noscript addon. /shrug
To me, it sounds like something that came installed with the game, I only found it soon after I installed FF11 and know of another with FF11 who has this file too. Who knows...
Well, thanks for the heads-up about this file... wasnt sure if it was a big threat or not.

[little ninja]

Re: Trojan detected in POL folder?

Norton's fixed my virus that was attached to FFXI. I have long since moved on to another virus protection program and it hasn't located anything.

The virus's I have had are usually easily fixed by Norton's and never to come back. I think only 1 time I had to actually manually remove one. Its mainly the maleware virus's that causes me the most frustration.

Funny thing about mine was it was on my back up version on my external hard drive but not on my main version on my internal drive.

[Neomage]

Re: Trojan detected in POL folder?

I am just glad that mine doesn't have this Trojan, even though stupider things have gave me Trojans. MySpace for one, don't even know how that happened lol...

But, as everyone else has said just delete the stupid little booger, and be gone with it!

Myspace is a virus in and of itself. Not suprising you would get a smaller spawn from it.