I loaded up this program that is suppost to help my Epson Printer work and what I got acted like a virus. The program is called “SSC_SERV.EXE” I installed it, scanned it with Avast and A2 and it came up clear. I tried to run it and it didn’t work at all so I uninstalled it. Well when I uninstall things I check to make sure its uninstalled. I found the program still running in Processes and I could not terminate it. So I went to SSC Service Utility folder and could not uninstall it. I could not delete the ssc_serv.exe program in the folder either. Some websites seem to think that this program contains the Tesslar A virus. It would be interesting to send this thing off for testing. I had to do a system restore to get rid of it. It didn’t get a chance to damage my computer in that I caught it quickly. I downloaded this program from the following site: http://www.ssclg.com/epsone.shtml
My question is, is this thing a virus or just poorly written?
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently 30 different scanners.
Or Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. Whichever scanner you use, you can’t do this with the file in the chest, you will need to move it out.
If detected by multiple scanners, send the file to avast for analysis.
Send the sample to virus@avast.com zipped and password protected with password in email body and fundetected malware in the subject.
Or you can also add the file to the User Files (File, Add) section of the avast chest where it can do no harm and send it from there (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest. A copy of the file/s will remain in the original location, so any further action you take can remove that.
Well Avast or any other virus scanner i used didn’t pick up on this “virus” (Scc_Serv.exe) It acted like a virus when I attempted to remove it. When I installed this program it didn’t work right so I removed it. I always check to see that everything that is supposed to be removed is indeed removed. I found that after I had uninstalled it the program was still running in processes and I could not terminate it. I also could not delete anything either. There was a folder left over with the scc_serv.exe program that would not delete. Being that I could not remove, uninstall, delete this thing I was thinking VIRUS. What was supprising is that no virus scanner I used would even see this thing. I mailed it off to Avast so they can take a look at it. It will be interesting to see what this thing is.
Oh, sorry! It said I didn’t have permission to delete it or insufficient rights to delete it. I checked the permissions box and I have full permission to the file. This computer is running Vista. When I attempted to terminate program operation I received a error stating that the path could not be found.
Unlocker http://ccollomb.free.fr/unlocker/ is also good as it also has a few additional features to not only delete the files but stop any process that is stopping you from deleting a file.
Unlocker was the first program i tried and it didn’t work and that was a shocker! Usually unlocker is quite effective but in this case nothing. My research indicates that Vista has problems with file permissions getting messed up. This is my first time working with Vista and its kind of strange for sure. Nothing is where its supposed to be and lots of programs that worked with XP don’t function well in Vista. It seems that I have control over all the permissions but one. Its called Special Permissions. Not sure what that does but its not checked. I’m not sure this is the problem but this is the only permissions box that I don’t seem to have control over. Well here is something interesting in Vista the Special Permissions box has an advanced section. There is all kinds of extra controls and options here. Maybe one of these controls is effecting this folder!
Its OK I enjoy the hunt! I’m glad this is not my computer I don’t like Vista so far! It looks like they attempted to beef up security but there isn’t much info about whats going on out on the net yet. I’m currently looking at an interesting article that might have the explanations I’m looking for. Vista has a new set of Permissions that are rather complex to deal with. Here is the article: http://campus.umr.edu/cis/desktop/documentation/pc/vista/permissions/index.htm
I’m trying to understand this “inheritance” function. Interesting stuff!