Page 1 of 1

Urgent! Avast found virus in game!

Posted: Wed May 19, 2010 1:37 pm
by Lynx
Sorry to be the messenger of bad news but recently my Avast anti-virus program found viruses in some BOTF files.

The files infected were:
Botf-102-Wk-XP-9x-eng
C:botf\English.res
C:botf\German.res
C:botf
C:botf\UDM
Cbotf\UDML

The strange thing is that I have had those files installed since November last year (when I bought a new computer) and no scan has revealed those files as virus-infected before.

I removed three other virus-files too but they were in the restore Windows directory.

Are there anyone else who have had a similar problem?

I'm planning to download the game again and re-install it to see if the same problems occur. Have there been any updates of the Dominion Mod since November last year?

Posted: Wed May 19, 2010 1:45 pm
by thunderchero

Posted: Wed May 19, 2010 3:19 pm
by marhawkman
in short avast is stupid.

Posted: Wed May 19, 2010 7:23 pm
by KrazeeXXL
imo false alarm. don't worry game worked for what? 10 years w/o problems?

if there was an trojan in it we had noticed. (tcp output f.e.)

it's the heuristic scan methods which are often wrong. that is how they work. pre-emptive to protect you from new future threats which aren't known as yet.

but since the files are for some years in use.. there's nothing pre-emptive about the scanner. just a false alarm.

if you're not sure then you can take a look at this permament link. it is a scan I did yesterday in case of the trek.icd file. (ol' BotF copyprotection file)

http://www.virustotal.com/en/analisis/d ... 1274021074

most entries show that its about heuristics (generic). only about the Antivir entry I can't tell a thing atm.

but as we have only 7 from 41 scanners which found anything at all I still say: it's a false positive.

Posted: Wed May 19, 2010 8:55 pm
by TurboC
I have only experienced trek.icd as being "infected" and it is almost definitely a false positive, unless the original file was infected on the original CD-ROM 10 years ago. Update Avast, then try another scan of all those directories. Tell us what virus it supposedly is seeing in the other files. It is possible that your particular files were actually infected by something.

Posted: Wed May 19, 2010 9:07 pm
by thunderchero
TurboC wrote:It is possible that your particular files were actually infected by something.
All of these files also have trek.icd inside of them (zipped/rar)

Botf-102-Wk-XP-9x-eng (jokers patch)
C:botf\English.res (Backup file to install mods)
C:botf\German.res (Backup file to install mods)

all other locations was trek.icd that had been installed

thunderchero

Posted: Wed May 19, 2010 9:31 pm
by eber3
Avast on my machine didn't detect any virus. But then I updated the program and now it says all the .icd files are all high level threats.

Obviously this is problem with the newer versions of the antivirus programs. Of course I actually had to get rid of another program a couple of months ago because after they updated it, it detected a vital XP program as a threat and deleted it without telling me. My machine would not then auto start without. I thought I had a genuine virus in that file, so I did a reformat and fresh install of xp and that virus program. Dang thing deleted the windows file again. Of course that program had worked fine on my machine for years before that update that now detects XP as a virus.

Posted: Thu May 20, 2010 5:13 am
by Borg
Try downloading Comodo its a free anti virus and fire wall all in one, that is want am using right now its has stop and clean viruses be for and never come back. So try using that see if its helps you.

http://www.comodo.com/home/internet-sec ... curity.php

Posted: Thu May 20, 2010 5:24 am
by Selected
No problems for me but I can see why this had to be investigated,there must be nearly 10,000 members and lurkers downloading these mods.

I would also recommend Comodo.

Posted: Thu May 20, 2010 10:28 am
by thunderchero
this post is now locked all downloads are now available again

see this post

viewtopic.php?name=Forums&file=viewtopic&t=1527

thunderchero