Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Is 7TSP really safe? (it does 'deposit' 'suicide.bat' temporarily)

20 Jan 2015   #1
icekool

Win 7 Ultimate 64 bit
 
 
Is 7TSP really safe? (it does 'deposit' 'suicide.bat' temporarily)

Hello all, it's been a while since I posted on here.

I thought I would ask you guys about the well known and often used 7TSP. I have just used it again and everything is 100% fine, no probs no errors, I have a great looking theme with icons, wmp patched etc.

However, I did notice that it does 'deposit' a file called "suicide.bat" in appdata/local/temp, there is also a "c.i.c.exe" which is quickly picked up by antivirus and then removed (diagnosed as a specific trojan).

Am I being paranoid or is it all ok.

I have scanned with Malwarebytes, Norton (my main AV) and a standalone version of HitManPro which uses the Kaspersky & Bitdefender engines in the cloud. All ok.


My System SpecsSystem Spec
.
20 Jan 2015   #2
Tookeri

Windows 7 Pro 32
 
 

How can you not be paranoid after you had a trojan on your computer?! Not to scare you but removing malware is never 100% safe because it's simply impossible for anti-virus products to detect them all. A lot of users here, me included, would advice to do a clean install or restore a system image backup to be on the safer side.
Again, not to scare you, but if it was me I'd think: if one malicious file was detected, what's to say there aren't other files that may be undetected? But that's just me, call me paranoid

Never heard of 7TSP but I did a search and found questionable results, so I tried to download it but it was blocked by my AV (F-Secure). Assuming I tried to download the same program, from/by "Fixit".

If you prefer to scan with an additional product: https://www.f-secure.com/en/web/home...online-scanner

For more ways to check for malware see my tutorials in my signature below.
My System SpecsSystem Spec
20 Jan 2015   #3
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

Hi and welcome to SevenForums,
I suppose it depends where you downloaded from as most items like this,
Also was this a free or paid for theme and from where did you download both items,
7tsp Theme Packs Installation Tutorial
[Tutorial] How to patch your system with 7tsp - Se7en Theme Source Patcher - XPtsp.com Community

I don't know if it's safe or not
But doesn't sound good to me but the installer has to be aggressive otherwise the themes will not install if it's a trogon or not Tookeri obviously a download he picked was tagged as such so please give more details,

Themes are a great way to pick up corrupted files or more than your expecting
My System SpecsSystem Spec
.

21 Jan 2015   #4
icekool

Win 7 Ultimate 64 bit
 
 

Thanks for the replies above.
Tookeri, I'm surprised you haven't heard of 7tsp, I would of thought this was familier to anyone or everyone coming into the customization sub forum.

Thrashzone, the only theme I have used for several years now is one of Mr Grims, it's the H2O blue theme and it was a paid one but became free some time ago. Whilst I am paranoid, there could be a good reason for suicide.bat, possibly to remove something during a genuine patching (for the theming processes).

My copy of 7TSP passes all scans with various scanners and was downloaded via the virtualcustoms site quite a long time ago, I have kept it since.

Just to clarify, the posible Trojan as recognised by Norton could have been a false positive, but of course I'll never be sure.

There must be many hundreds or thousands of folks on this very forum that have used 7tsp many a time, I guess my question is how many folks took a quick peep into the user/appdata/temp folder before doing the double reboots.
My System SpecsSystem Spec
21 Jan 2015   #5
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

Hi,
No telling I don't use it personally
I would ask on the 7tps forum to see what replies you get,
I'm not sure if they have a paid version or if it's just donation ware ?
I haven't really checked into it until you questioned it
Cheers.
My System SpecsSystem Spec
21 Jan 2015   #6
Tookeri

Windows 7 Pro 32
 
 

Well I'm not into customization, I picked up on the "trojan" part

I have no idea what 7TSP is and picked the first link that came up on a search. Maybe that was a completely different app and my mistake? It was this site which clearly hosts malware so don't try it:
HTML Code:
www.xptsp.com/fixit/7tsp.php
My System SpecsSystem Spec
21 Jan 2015   #7
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

Yea most themes make far to may changes for me
Just classic shell seemed to mess with things by default I didn't like so it didn't last very long either
Best place to ask is the developers website but I'm sure the response is predictable
Cheers.
My System SpecsSystem Spec
22 Jan 2015   #8
icekool

Win 7 Ultimate 64 bit
 
 

Well, having posted on the virtualcustoms forum, apparently, 7tsp does indeed generate a 'suicide.bat' file to specifically delete the many temp files generated by the theming process (7tsp itself) and then to revoke a reboot. this is apparently deliberate
My System SpecsSystem Spec
22 Jan 2015   #9
ThrashZone

Win-7-Pro64bit 7-H-Prem-64bit
 
 

Yep what's in a name,
Except it's creators mind
My System SpecsSystem Spec
22 Jan 2015   #10
icekool

Win 7 Ultimate 64 bit
 
 

For anyone interested in explanations about some of the processes & files associated with 7TSP useage, here is the thread I started, in which the creator of the app replies several times. There is also an updated version (4) at RC stage but will go official in about 2 weeks time.

Here's the link 7TSP and the 'suicide bat' file

Thank again for replies above, this will always be my 1st stop for Win7 issues, I havent posted much because I use Linux quite a bit, but still use Win 7 on my main machine.
Regards
My System SpecsSystem Spec
Reply

 Is 7TSP really safe? (it does 'deposit' 'suicide.bat' temporarily)




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Roomba commits suicide by rolling itself onto a stove
Paranoid android: Cleaning gadget 'switches itself on' and moves onto kitchen hotplate in 'suicide bid' Source A Guy
Chillout Room
Disabling software temporarily
Alright my situation relates to tune up pc 2013. Its a special software that allows me to disable drivers, softwares, anything that takes up memory. My problem is some software and applications will not run such as the ability for my computer to read sd cards. Now my question is how to disable...
Software
7tsp Help
Hi All, I read the 7tsp tutorial but i keep getting this error when I try to install the Annihilator Pack. Does anyone know what I am doing wrong or what I have failed to do? FYI, I have also enabled custom themes by using UxStyle Core. I posted this over at Mr. Grims forums but have not...
Customization
Sun Danyong commits suicide after losing iPhone prototy
Read more on this article.. I thought that rather then using 'Foxconn Worker' (as neowin did) it deserved to has his name in the title. Sad day it is when you are forced to end your own life for losing something. Rest in peace Sun Danyong. EDIT: Title was too long I see.
Chillout Room


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:15.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App