Patching and Trojan detected

[Sgt "Stinky" Apone]

So, I'm downloading the game and the beta for the mod everyone recommends, and Norton flags this up:

Trojan.Zbot in ...\downloading\289890\e6.exe

Any thoughts?

[brad]

Might be a false positive, I doubt Valve would let something with a virus be hosted on their servers.

[Sgt "Stinky" Apone]

So would I but still...

Do I take the plunge and exclude it and hope for the best?

[Sneaksie(RUS)]

You could check it on virustotal.com if you are not sure. This is BSM loader, it launches the original game executable while changing it on the fly to allow more weapons and other stuff, and some antivirus software doesn't like it since viruses usually behave so.

[Sgt "Stinky" Apone]

Cheers - I've adde dit to Nortons exlude so hopefully this time it will finisht the download!

[Sgt "Stinky" Apone]

ClamAV - Win.Trojan.8533586 20140710
ESET-NOD32 - a variant of Win32/DllInject.BH 20140710
Ikarus - Virus.Win32.PEStealth 20140710
Kingsoft - Win32.Malware.Heur_Generic.B.(kcloud) 20140710
NANO-Antivirus - Trojan.Win32.Rogue.ctdcpa 20140710
Symantec - Trojan.Zbot 20140710
VBA32 - Trojan.Stoldt 20140710
ViRobot - Trojan.Win32.A.Stoldt.88576 20140710
nProtect - Trojan/W32.Small.34816.SW

other 44 checkers dont have a problem with it so its either fine or these 9 get it wrong, and given they all come up with different answers, my guess is they are wrong:)

[Trenchf00t]

I have the Same issue - I was downloading the Blue Sun Mod and Windows Defender flags it as a Trojan:

Trojan:Win32/Beaugrit.gen!C

is this the same as above or is my pc now a potato?

[Obi-Van-Hamster]

I have that same thing. Windows Defender identifies it as a virus that allows remote user to execute programs on your system. That is quite weird ID for a game and mod that is single player only. I'm using Comodo Firewall to put it in a sandbox (virtual enviroment) and only allowed it to save game in save game folder, everything else is restricted. I also made a shortcut to run the game in sandbox every time. That way, virus or not, it wont be able to do anything.

[Trenchf00t]

Originally posted by Obi-Van-Hamster:

I have that same thing. Windows Defender identifies it as a virus that allows remote user to execute programs on your system. That is quite weird ID for a game and mod that is single player only. I'm using Comodo Firewall to put it in a sandbox (virtual enviroment) and only allowed it to save game in save game folder, everything else is restricted. I also made a shortcut to run the game in sandbox every time. That way, virus or not, it wont be able to do anything.

I wouldn't have the faintest of ideas how to do that.

Can anyone confirm/deny that this is malware or just another wonderfully crappy game design/coding failure from 7.62?

[ssander75]

There was a thread on R@S's old Blue Sun MOD forum about getting False Positive's with Virus Scanners here:

http://bluesunmod.webs.com/apps/forums/topics/show/8440006

It was a known issue, I have run a number of virus scanners, nearly all of which had issues with the installation of Blue Sun Mod. I think, if I recall, R@S said something about the installation program (written by someone else) uses 'code injection' which virus scanners do not like. I'm not a code person, but I have installed various versions of Blue Sun Mod.

Link removed by steam google: "R@S + Blue Sun Mod + Virus + false positive". Good luck.

[Trenchf00t]

Originally posted by ssander75:

There was a thread on R@S's old Blue Sun MOD forum about getting False Positive's with Virus Scanners here:

http://bluesunmod.webs.com/apps/forums/topics/show/8440006

It was a known issue, I have run a number of virus scanners, nearly all of which had issues with the installation of Blue Sun Mod. I think, if I recall, R@S said something about the installation program (written by someone else) uses 'code injection' which virus scanners do not like. I'm not a code person, but I have installed various versions of Blue Sun Mod.

Link removed by steam google: "R@S + Blue Sun Mod + Virus + false positive". Good luck.

Thanks firstly for that. I found the link from R@S.
- Check the size of the BlueSunMod.exe in your game directory. If it's 34KB then youre safe and the warning you get is a false positive. Then just add the file to your AV's Trusted Files.

If it's bigger than 34KB it has gottten infected somewhere along the way, I know for a fact that the ISO image is safe.-

The BlueSunMod.exe isn't in the game directory as the antivirus cancels the download so I have no idea how large the BSM folder is. The steam download is about 976.3 mb

7.62 E6.exe [normal] in my steam folder is about 3,464KB.

Would you guys suggest this is fine and it's ok to go ahead and download it or not?

Thanks for helping me out with this btw. 7.62 is one of those games, where you can put up with the random crashes due to love for it.

[ssander75]

Originally posted by m0000nface:

Originally posted by ssander75:

There was a thread on R@S's old Blue Sun MOD forum about getting False Positive's with Virus Scanners here:

http://bluesunmod.webs.com/apps/forums/topics/show/8440006

It was a known issue, I have run a number of virus scanners, nearly all of which had issues with the installation of Blue Sun Mod. I think, if I recall, R@S said something about the installation program (written by someone else) uses 'code injection' which virus scanners do not like. I'm not a code person, but I have installed various versions of Blue Sun Mod.

Link removed by steam google: "R@S + Blue Sun Mod + Virus + false positive". Good luck.

Thanks firstly for that. I found the link from R@S.
- Check the size of the BlueSunMod.exe in your game directory. If it's 34KB then youre safe and the warning you get is a false positive. Then just add the file to your AV's Trusted Files.

If it's bigger than 34KB it has gottten infected somewhere along the way, I know for a fact that the ISO image is safe.-

The BlueSunMod.exe isn't in the game directory as the antivirus cancels the download so I have no idea how large the BSM folder is. The steam download is about 976.3 mb

7.62 E6.exe [normal] in my steam folder is about 3,464KB.

Would you guys suggest this is fine and it's ok to go ahead and download it or not?

Thanks for helping me out with this btw. 7.62 is one of those games, where you can put up with the random crashes due to love for it.

I would suggest it is fine, though you have a few typos in your response. I have two BSM installations, one with steam, and one non-steam version i bought years ago. Both game *.exe files have the same file size noted within properties in Win7 as:

Size on Disk = 36,864 bytes
Size = 34,816 bytes (which is the file size shown in explorer).

So if yours matches, chances are, it is a false positive. Good luck.