Trojan virus found in files after update 1.2.362

[PR PUNISHER]

Hey everyone,

Something suspicious poped up after I updated this afternoon. My virus protection quickly caught on to a file that should not exist which contained a trojan 7 virus. The file name is "TR/Crypt.XPACK.Gen". This cant be a coincidence bcause I had never recived a warning coming form 3Dmark until the recent update.(1.2.362) Anyone else have this issue and if so what have you done, currently I have the file in quarantine just incase. Everyone else you should also check just incase, better to be safe than sorry.

Feel free to comment.

[jhxp]

Yeah, got the pop-up as well. It happened while Steam was updating 3DMark.
BTW. I'm using Avira Free Antivirus 2014 (14.0.3.350).

[PR PUNISHER]

Yea already have writen a report to the company, but this is very suspicious.... There shouldnt be any type of file like this within the folder, if this isnt resolved im contacting the BBB.... A virus in my computer , never that...

[prdxd]

yeah i had taht same alarm with avira, i bet its false alarm since there was threads from 2013 with same issue, i got it aswell instantly after update.

[UL_Jarnis]

False positive. Yet again.

Does the message specify which file it is complaining about?

This is a generic alert (".gen") which means that the antivirus is making a (false) guess based on a generic detection.

[c0mi]

Originally posted by FM_Jarnis:

False positive. Yet again.

Does the message specify which file it is complaining about?

This is a generic alert (".gen") which means that the antivirus is making a (false) guess based on a generic detection.

D:\Steam\SteamApps\common\3DMark\bin\x86\dxinfo.exe => 'TR/Crypt.XPACK.Gen' [trojan]

[UL_Jarnis]

Same file. Which we already reported to all antivirus vendors who mis-detected it last time. Which was not changed for this build. This is highly annoying.

Guess it is time for another round of emails notifying various antivirus vendors about this. Our apologies.

[UL_Jarnis]

Hmm, VirusTotal claims no detections from the file

https://www.virustotal.com/en/file/fc373ceb95df097a6242863eac349f74da980e3cb94e38bcb114620e7340de06/analysis/1394685487/

(or you can upload it there yourself and do a re-analysis)

So I would guess that this was already fixed by the vendors in question.

[PR PUNISHER]

Will try this, thank you for responding...

[Jet]

WTF? I have Kaspersky and it deleted the 3DMark application. Is this getting fixed?

[MAKAPOHbI]

Originally posted by Jet1337:

WTF? I have Kaspersky and it deleted the 3DMark application. Is this getting fixed?

Same thing.

[Jesso2k]

Kaspersky is driving me wild.

[Luc1f3r XXIII]

I got the same issu with Kaspersky Internet Security. After contacting Kaspersky and upload the currupt file the ask me to send the x64 file of 3DMark.exe,to fix the issu. But I dont have the x64. exe, this file is missing. Some infos about the warrning : HEUR:Trojan.Win32.Generic. its found Steam\SteamApps\downloading\223850\bin\x64\3DMark.exe.
Kaspersky delete the entire folder.

[UL_Jarnis]

Kaspersky being stupid. (This is false positive). Feel free to report this to them. We've obviously done the same thing but in my experience they fix these quicker if more people report them.

[UL_Jarnis]

Kaspersky has reported to us that this is fixed. If you are still seeing this on your systems and have verified that your Kaspersky virus signatures are up to date, I suggest contacting Kaspersky support about it.

[Luc1f3r XXIII]

Now it works, thank you!