Trojan Horse ''PWS-Banker'' in Star Wars Galactic Battlegrounds Saga

[Gert]

When trying to install this game I got off the current Humble Bundle, McAfee informed me it had detected and quarantained a Trojan Horse called PWS-Banker, originating from this Star Wars game. What do I do? Can I not play the game now?

[Satoru]

Its likely a false positive

[Gert]

Originally posted by Satoru:

Its likely a false positive

http://www.paretologic.com/resources/definitions.aspx?remove=PWS%20Banker%20Trojan
Just found this, it says there's a huge risk to it

[Satoru]

There are no trojans on Steam

Period

Mcafee is reporting a false postitive

http://steamcommunity.com/app/356500/discussions/

As you can see many people run the game fine. Mcafee is screwing up the detection. Submit it to Mcafee as a false positive

[Azza ☠]

PWS-Banker is a trojan which monitors your URL Address Bar, when a bank website has been entered it attempts to replace it with a phishing (faked) bank website to steal your login details for it.

What you want to do, is grab that infected file in question and send it to McAfee. It's most likely a false positive, specially if you go to a bank website and it's still valid. However, they will need to confirm the false positive and update their virus definitions accordingly on their end.

You don't want to risk using online banking during this time.

You could add the file as an exception, if you know it's a false positive. However, even if it's not from the game itself, it doesn't mean a virus can't hijack that file. Best to be safe and double check.

[Gert]

Thanks a lot

[Jeremy]

I am getting this same message from McAfee on the same game. running virus scan Enterprise 8.8 with DAT version 8094.000 dated March 4 2016

[Gert]

What I ended up doing was:
- Deleted McAfee, installed AVG
- Deleted Star Wars Battlegrounds Saga
- Restarted my PC
- Had AVG go off for 10 minutes
- Installed Star Wars Battlegrounds Saga

Now it works. McAfee is just crap (or just the free version is crap, I don't know)

[Crowsfoot]

Does having the file removed result in the game crashing? Another easy test is to upload the file to https://www.virustotal.com/ and see what it says.

[Gert]

Thanks for the tip. Having the file removed by McAfee resulted in the gamen not being able to start: I got an error message saying something like ''Update paused: disk read error'' or the likes

[Crowsfoot]

Originally posted by Gert:

Thanks for the tip. Having the file removed by McAfee resulted in the gamen not being able to start: I got an error message saying something like ''Update paused: disk read error'' or the likes

Interesting. See what virustotal reports about it, I suspect its most likely a false-positive and that it was probably a poor choice in file name on the devs part.