Spybot S&D (hopefully false) positive: trojan Win32.NrgBot.rtk

[GlowingOrb]

Spybot S&Dseems identifies volgarr.exe as the trojan Win32.NrgBot.rtk
I hope that this is a false positive, but the developers should check their file and clarify with the Spybot developers that this will not get detected in the future (of fix it, if some hacker actually modifed the executable)

[Kill0byte]

I had the same issue, and other people have been having similar problems with other AV software.The devs explained why it was happening in another thread. AFAIK however, Steam scans all the files on their CDN so if you ever get a flag I would say it's 99.9% guaranteed to be a false positive.

[GlowingOrb]

Generally, I would agree, but false positives are usually triggered by heuristic analysis. The assigned identfier however sounds very concrete and not like something a heuristic would find.

[Kill0byte]

Yeah.. If you look around the devs explained why it's happening, but it has something to do with how the game loads data packets or something that triggers a false positive.

[GlowingOrb]

Yeah. But this is something that would trigger a false positive on a heuristic analysis and not on a concrete signature check

[Phil'd With Malice]

I posted an analysis of the file here:

http://steamcommunity.com/app/247240/discussions/0/846964364001128708/#p4

It's all heuristical and it's directly a result of the fact the Steam version has cloud connections for score submission. That's why you don't find the false positive with DRM free version. It lacks online capabilities. It will take time for the AV software to correct their failings at identifying the exe as a "potential virus" (AKA heuristics). Submit the file to your AV provider and they will whitelist the program in a week to 6+ months. Standard operating procedure.