Virus?

[Shibby1985]

Just recieved a notification from Avira Antivir that 3DMark contains a virus / malware?


10.12.2013 20:02 [System Scanner] Malware found
The file 'E:\Steam\SteamApps\common\3DMark\bin\x86\dxinfo.exe'
contained a virus or unwanted program 'TR/Crypt.XPACK.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '559ef61f.qua'!

10.12.2013 11:15 [Real-Time Protection] Malware found
Virus or unwanted program 'TR/Crypt.XPACK.Gen [trojan]'
detected in file 'E:\Steam\SteamApps\common\3DMark\bin\x86\dxinfo.exe.
Action performed: Transfer to Scanner

10.12.2013 11:14 [Real-Time Protection] Malware found
Virus or unwanted program 'TR/Crypt.XPACK.Gen [trojan]'
detected in file 'E:\Steam\SteamApps\downloading\223850\bin\x86\dxinfo.exe.
Action performed: Transfer to Scanner


Avira Free Antivirus:
Product version 14.0.1.759 26.11.2013
Search engine 8.02.12.160 06.12.2013
Virus definition file 7.11.118.248 10.12.2013
Control Center 14.00.01.641 03.12.2013
Config Center 14.00.01.645 03.12.2013
Luke Filewalker 14.00.01.645 03.12.2013
Real-Time Protection 14.00.01.519 03.12.2013
Filter 14.00.01.755 07.12.2013
Web Protection 14.00.00.383 03.12.2013
Scheduler 14.00.01.641 03.12.2013
Updater 14.00.01.647 03.12.2013
Rootkits Protection 14.00.01.341 03.12.2013
Local Decider 14.00.01.681 03.12.2013

Windows 7 - 64bit
All times above are CET (GMT +1)

The update completed at 11:15, the time when the Virus/Malware was found initially.
At 20:02 I confirmed the popup message, that's why it was not moved to quarantine before.

[*****User5671089]

I just did a full scan of all files in my steam folder of my 3DMark installation and nothing detected. I use AVG 2014 free edition. I do have that dxinfo.exe file in a similar location. It's probably a false positive, I hope anyway.

[UL_Jarnis]

False positive. Thanks for the report, will have to bug Avira about it...

[UL_Jarnis]

See here for more about this generic detection tripping up for many others as well;

http://forum.avira.com/wbb/index.php?page=Thread&postID=782501

http://forums.steampowered.com/forums/showthread.php?t=2982564

I have submitted the file in question to avira so they can clear this from their virus database.

[The King Possum]

Nice that the developer is scanning the boards and commenting on the posts. that shows respect to the consumer and that you are trying to make sure your product is legit.

[Y/\}{000]

agreed ^

[Joe le Taxi]

Still not fixed by Avira, I just got this alert...

[UL_Jarnis]

Perhaps you should also complain to them as well? We've done what we can but since Futuremark is not Avira customer (we do not use their products), it may be that they are ignoring our reports.

(another option would be to use a different antivirus software)

[*****User5671089]

I have no problems with AVG, I did have lots of false positives with avira. I've had a great experience with 3D Mark, it even helped me pick the graphics card I wanted that fit my budget. I'm very happy with that.

[TG SHINODA]

I had a problem with talktalk f-secure saying it found a virus so i submitted a report to them and they must have done something about it as i dont get the warnings anymore, you could manually exclude it from the scan so it doesnt show up.