xboxscene.org forums

Author Topic: Extra Files/folders When I Dumped Out My Hdd...!  (Read 151 times)

xCAUSALITYx

  • Archived User
  • Jr. Member
  • *
  • Posts: 56
Extra Files/folders When I Dumped Out My Hdd...!
« on: February 08, 2008, 04:39:00 PM »

Hi,

Here is a screen dump of extra files/folders I dumped out from my x360 hdd:

(IMG:http://aycu22.webshots.com/image/41541/2005622654910578260_rs.jpg)

I looked at a win32 .exe file with a hex viewer and it showed a list of commands and a log of my console connecting to the xbox live server,it also showed what messages were sent between the console and the server.....One line shows a message "the server dropped the connection because the user has been banned from online play during this session", also right below was another message "the memory check for cheat detection failed".

If anyone is interested in having a better look at this .exe file I will zip it up and make a torrent for download here if the moderators are ok with this.

Also, I apologise now if I have put this topic in the wrong place...!  

Cheers...!
Logged

scuba156

  • Archived User
  • Hero Member
  • *
  • Posts: 1217
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #1 on: February 08, 2008, 07:45:00 PM »

Riiigggghhhtttt..... why would a 360 HDD have a Macintosh Paint image, or an .exe file, or .txt files, or UNIX files or any of those files?

and an exe would not contain a log file within itself

seems fake to me. where exactly did you get these files?
Logged

xCAUSALITYx

  • Archived User
  • Jr. Member
  • *
  • Posts: 56
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #2 on: February 08, 2008, 09:21:00 PM »

Honest, 100% - I created a full 20(18...ish)gig backup using x-port 360.
I then used a data revcovery and opened up the image, i then ran a scan on the .bin file and it found some extra files other than the 3 partitions. 1.6Gb.

If you want have a look at the .exe file, I will compress and make a torrent in a moment and you can download it, I will be seeding the torrent all night.

Have a look at it....!

Torrent: 774.exe - Unknown File

Cheers
Logged

scuba156

  • Archived User
  • Hero Member
  • *
  • Posts: 1217
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #3 on: February 08, 2008, 10:11:00 PM »

ill start downloading in a second.

explain what you did in detail and ill see what i can get out of mine

EDIT: got it. it mentions EAGAMES and PS3 in there which seems strange. i dont think its a log

This post has been edited by scuba156: Feb 9 2008, 06:28 AM
Logged

xCAUSALITYx

  • Archived User
  • Jr. Member
  • *
  • Posts: 56
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #4 on: February 08, 2008, 10:08:00 PM »

Ok here goes:

- Connected my HDD via Team Xe HDD connectivity board, then off to my PCMCIA SATA Card (Sil3512)
- Fired up x-port 360 and performed a full backup and this created a .bin file
- Fired a data recovery program like Winhex, opened and scanned the .bin file
- Scan reported that it found 3 partitions (normal), then it said extra files found outside of the partitions (1.6GB in size)
- I then selected all these extra folders and extracted them (Results in the image above)
- Then opened folder Win32 Executable and then saw the file 774.exe
- Opened 774.exe file with a hex viewer and looked at the strings to find the details about my console being banned

Hope this helps...!
Logged

scuba156

  • Archived User
  • Hero Member
  • *
  • Posts: 1217
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #5 on: February 08, 2008, 10:11:00 PM »

ill try it out now. is your console actually banned?
Logged

xCAUSALITYx

  • Archived User
  • Jr. Member
  • *
  • Posts: 56
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #6 on: February 08, 2008, 10:16:00 PM »

QUOTE(scuba156 @ Feb 9 2008, 05:47 AM) View Post

ill try it out now. is your console actually banned?


Yes, I accidently connected to live whilst having my burnout revenge backup in - Strange as it was an EA game as well.
Logged

gamerfreak1727

  • Archived User
  • Full Member
  • *
  • Posts: 137
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #7 on: February 08, 2008, 10:54:00 PM »

Were you trying to play NFS Pro Street by any chance? If so, then it explains a lot... If you were, then the file paths were the actual paths used when creating the exe/xex file. The xbox 360 can execute exe files, so, it's possible that this file was extracted and put into the cache drive that is mounted when playing a game...

Of course, this can only work if you had just been playin NFS:PS, or you were playing it when backing up your HDD.

Gamerfreak1727

Oh, and I used IDA Pro to analyze the exe, if that matters.

This post has been edited by gamerfreak1727: Feb 9 2008, 06:55 AM
Logged

scuba156

  • Archived User
  • Hero Member
  • *
  • Posts: 1217
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #8 on: February 08, 2008, 10:37:00 PM »

yeah i noticed NFSPS too but didnt think of it as need for speed.

its possibly just a cache. whats in that exe isnt an error log, its just an error list. ie, possible errors

ive tried looking for it on my HDD but i cant come up with anything
Logged

javaoverride2003

  • Archived User
  • Newbie
  • *
  • Posts: 22
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #9 on: February 09, 2008, 02:37:00 PM »

any chance of you hosting the file some where eg rapidshare
Logged

xCAUSALITYx

  • Archived User
  • Jr. Member
  • *
  • Posts: 56
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #10 on: February 09, 2008, 03:11:00 PM »

QUOTE(javaoverride2003 @ Feb 9 2008, 10:13 PM) View Post

any chance of you hosting the file some where eg rapidshare


No problem - Here you go: 774.zip

Cheers
Logged

bi0hacker

  • Archived User
  • Newbie
  • *
  • Posts: 12
Extra Files/folders When I Dumped Out My Hdd...!
« Reply #11 on: February 09, 2008, 06:36:00 PM »

After analyzing that executable in ollydbg and looking at the string references, I'd have to say it's a debug tool or something left over from the developers of that car game. Has references to SDK files left over from the compiler and references Xbox live.

Interesting find.
Logged