 |
Castle Paradox
|
View previous topic :: View next topic |
Author |
Message |
Inferior Minion Metric Ruler

Joined: 03 Jan 2003 Posts: 741 Location: Santa Barbara, CA
|
Posted: Tue Dec 16, 2008 3:11 pm Post subject: |
|
|
James Paige wrote: | My antivirus scanner is claiming that the zip file for Crescent Dream (which contains an exe installer) is infected by Trojan.Banker-151
I have a feeling this is a false positive, but I would appreciate it if somebody else could check with another virus scanner. |
Hi James,
I get the same virus warning with clamav, but do not see it when executing the installer on a windows box. The game is also playable post-install. Does anyone else get a virus warning with this file?
Thanks,
~IM _________________
|
|
Back to top |
|
 |
Bob the Hamster OHRRPGCE Developer

Joined: 22 Feb 2003 Posts: 2526 Location: Hamster Republic (Southern California Enclave)
|
Posted: Tue Dec 16, 2008 4:24 pm Post subject: |
|
|
I did some digging and noticed that Crescent Dream is packaged using ClickTeam's Install Builder. I downloaded installbuilder, and scanned it, and got the same result. So I am now almost completely certain that this is a false positive.
Probably some virus author packaged a variant of Trojan.Banker into an Install Builder installer, and ClamAV mistakenly took a signature of the installer rather than the viral payload (which is a clumsy thing to do, which IMHO they do far too often)
I already submitted the file to ClamAV as a false positive. |
|
Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|