Virus in the .exe file?

[ReivaX]

Hi there,

Since last evening i found out i had been infected by a computer virus, it's been a few years since that happened. I'm always carefull about what i browse and everything.

The only thing that change before the infection was that my AV flagged The binding of Isaac when i tried to lauch it yesterday, since many people played this game without any problem and it's been on steam for quiet some time i ignored the advertisment.

After that when i tried to visit some website (bundlestar.com for example) i would be redirected to a webpage wpkg.org or something like that.

After some research it's a virus that would redirect you to this page for the heck of it:

Recently many computer users complained that when they were browsing the internet they kept getting Wpkg.org popups and redirections. If you have the same problems, then it means that your machine has been infected by a brwoser virus. The domain Wpkg.org itself is legitimate, but some evil cyber criminals make use of it to hijack users’ web browsers, including Gooogle Chrome, Mozilla Firefox, Internet Explorer etc. Therefore, Wpkg.org is deemed as an annoying browser infection by lots of people. Actaully, as long as you delete the virus that takes you to Wpkg.org, all problems will be fixed. However, this is not an easy job. On one hand, virus of this type does not appear on computer control panel at all. Even you reinstall browsers or try system restore, it still comes back again and again. On the other hand, common antivirus software like Microsoft Security Essential, Avast, Avg, Kaspersky….cannot detect anything. Under the circumstances, you have to rely on other more powerful virus removers, such as Spyhunter, Reghunter or remove it manually. Here below i will show you how to deal with the nasty and stubborn Wpkg.org Redirect virus.

I got rid of the little bugger but if the dev could have a look at it, just to make sure.

Not sure if this helps:

OS: Win7-32bits
AV that flagged Isaac: KingAntivirus (chinese thing i guess)

I also have Malwarebytes, it didn't flag anything nor find the infected files. Spyhunter did the job though.

[obamafish]

Extremely unlikely Steam is shipping the game with a virus in it, since it hasn't been changed for months and was downloaded (and, thus, checked for viruses) by way too many people.
My guess is that either the virus alert that you're getting from the antivirus is a false positive, or that the game was infected locally by another virus-laden app on your computer.

1) Try checking all the exe and dll files that the game comes with on www.virustotal.com to make sure it's not a false positive.
2) Then, run a local cache check on the game files. If Steam says some files were modified, that will indicate that the game was infected locally.
If these two actions don't show anything wrong, it might be a false positive.

By the way, the Internet[malwaretips.com] says that Spyhunter is dodgy and should not be used or trusted.

[ReivaX]

About the false positive i'm not sure what it is. That virus though is ♥♥♥♥♥♥♥ china being china.

http://www.reddit.com/r/China/comments/33wpk3/anyone_else_almost_all_websites_in_both_chrome

A new weapon in their Great Firewall of China it seems.... The Great Cannon -_-'

The ♥♥♥♥♥♥♥.

Thanks though. I'll try that virustotal.com to see what'up and let you know :)

[obamafish]

Originally posted by ReivaX:

About the false positive i'm not sure what it is.

In your case, an antivirus would give a false positive on a program if there is no actual virus present in it, and yet the antivirus thinks there is (it happens, though rarely, if the AV is good) and sounds the alarm . Google for more details.

Regardless of whether you find the virus or not in the local game files, you should strongly consider replacing Spyhunter (which seems to be essentially malware on its own) with a more reputable antivirus. From what I gather, even the default and free Microsoft Security Essentials would be a better choice. In addition to that, do a standalone malware scan[www.malwarebytes.org].

[ReivaX]

I have malwarebytes, it didn't find anything.... Spyhunter i deleted it since it wanted me to pay.

Yeah i know what false positive is, i meant i didn't know why isaac has been one. virustotal.com is blocked here apparently (what a surprise....) i'll make the scan using the VPN then....