Crypto Mining trojan ?

[Abrilliate]

Found this on Redit after my virus checker alerted me to a trojan

Nope it's 100% not a false positive Enable3GBMem_Vista_Win7_32bit.exe is a Crypto Mining trojan. It's cute that they did it that way for a free to play game too...

How to make the scary file go away: Simply scan the install folder with Malwarebytes using a custom scan. It'll find the Trojan, then quarantine it and reboot the system. go back into that folder after reboot and edit the Enable3GBMem_Vista_win7_32bit.bat file with notepad. Delete everything and save it as a blank .bat file. You won't see any more issues. enjoy the game.

[Ziyor]

Idk but windows defender found nothing when I custom scanned

[Chlorodifluoromethane]

mine didnt find ♥♥♥♥

[Ziyor]

Originally posted by Black Jesus:

mine didnt find ♥♥♥♥

What did you use to scan?

[Laughing kookaburra]

where is the file location ?

[JokaIsAwful]

how about a link to the reddit post.

[Laughing kookaburra]

VT scan : https://www.virustotal.com/#/file/54844c743ad0d9e67ca6aed4e1bf0b907de0e75f02dd45b10bd25c8b0c614c60/detection

sorry but OP is being delusional

[JokaIsAwful]

Originally posted by Compa Desu:

VT scan : https://www.virustotal.com/#/file/54844c743ad0d9e67ca6aed4e1bf0b907de0e75f02dd45b10bd25c8b0c614c60/detection

sorry but OP is being delusional

what a surprise. I was going to debunk through his steps. VirusTotal is faster I suppose

[Abrilliate]

https://www.reddit.com/r/RingOfElysium/comments/8c1zml/trojansmokeloader_attached_to_download/

[Abrilliate]

\Steamlibrary\steamapps\downloading\755790\NPSWF#2_21_0_0_197.dll

Win32:bogEnt ?

downloaded game twice and twice this message comes up

[Hunk Survivor]

♥♥♥♥♥♥♥♥♥ that explains the poor performance

[Laughing kookaburra]

sorry, i'm not gonna believe some reddit BS post, if VT say it's clean then it's clean

[SunnyRustles]

Originally posted by Abrilliate:

https://www.reddit.com/r/RingOfElysium/comments/8c1zml/trojansmokeloader_attached_to_download/

https://www.reddit.com/r/RingOfElysium/comments/8g9zas/trojan_gone/

Trojan existed in the beta and what-not. I did a full scan with several prorams and came up with nothing.

[Ziyor]

"Malwarebytes Premium" This seems like a shady scheme to try and get you to buy their service.

[Ziyor]

Also possibly a false positive because it was using Garena

[Jsin]

yeah dude, I did also scan with best 5 top antivirus, caught mining trojan, browser hijacker, system injects.. free game but risky.. why should I trust a game instead 5 top antivirus, at least it's nearly impossible to say something is false positive, unless you wrote the programme..