Anyone ever had a trojan from GOG?

[moon]

Well, apparently I did... ?

16 games from GOG. False positive?

Not had this happen before & when I check the link from the AV it says it's malware from 2018 lol

Is the AV just being very over protective or ¯\_(ツ)_/¯

[↑↑↓↓←→←→BASelect]

No gog never gave me free trojans. I always had to buy them. 6 bucks for a pack of 3.

On a serious note no i haven't.

[Cathulhu]

It's very likely it's a fale positive.

[Zekiran]

Your computer likely had that malware on it for a while.

Game distributors don't distribute viruses. The extraordinarily rare times that a mod or small game has wound up with them Steam took extremely fast action to stop that.

Whitelist the game exes and folders, for gog and steam, because programs will always throw false positives on them.

[Jej]

False positive.

[Killerwhale]

No.

[Bastila Shan]

What AV you using?

[moon]

Originally posted by Hoboslayer:

What AV you using?

Avira

[moon]

Originally posted by Zekiran:

Your computer likely had that malware on it for a while.

Game distributors don't distribute viruses. The extraordinarily rare times that a mod or small game has wound up with them Steam took extremely fast action to stop that.

Whitelist the game exes and folders, for gog and steam, because programs will always throw false positives on them.

For some reason it's the uninstallers for each game. Why would the AV think that's a trojan? Weird...

[moon]

Originally posted by Miss Ann Thrope:

False positive. I've been buying games from GOG for years without any problem.

Besides, it would be very bad for business if a game store distributed viruses.

Yeah exactly which why I thought it was a bit odd. I had to double check because it's never happened before.

This is an example:

Beginning disinfection:
D:\Program Files (x86)\GOG Galaxy\Games\Grim Dawn\unins003.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '566b2732.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Grim Dawn\unins002.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '4efc0891.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Grim Dawn\unins001.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '1ca35275.qua'!

[Naedmi]

Originally posted by Rotting In My Chair:

For some reason it's the uninstallers for each game. Why would the AV think that's a trojan? Weird...

From the sound of it, you have an overbearing anti virus software installed. Likely senses anything with permission to alter files as a false positive. Hence the uninstall file being sensed as dangerous.

Is it Avast by any chance?

[moon]

Originally posted by Explosion Hugger:

Originally posted by Rotting In My Chair:

For some reason it's the uninstallers for each game. Why would the AV think that's a trojan? Weird...

From the sound of it, you have an overbearing anti virus software installed. Likely senses anything with permission to alter files as a false positive. Hence the uninstall file being sensed as dangerous.

Is it Avast by any chance?

Avira

At least it works I guess lol but yeah just a bit overbearing maybe, but better to be safe.

Beginning disinfection:
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\光明记忆 [GOG.com]\Uninstall 光明记忆.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XCOM - Enemy Unknown [GOG.com]\Uninstall XCOM - Enemy Unknown.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wasteland 2 - Director's Cut [GOG.com]\Uninstall Wasteland 2 - Director's Cut.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vikings - Wolves of Midgard [GOG.com]\Uninstall Vikings - Wolves of Midgard.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Victor Vran [GOG.com]\Uninstall Victor Vran.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpellForce 3 - Soul Harvest [GOG.com]\Uninstall SpellForce 3 - Soul Harvest.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seven - Enhanced Edition [GOG.com]\Uninstall Seven - Enhanced Edition.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project Zomboid [GOG.com]\Uninstall Project Zomboid.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project Warlock [GOG.com]\Uninstall Project Warlock.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metro 2033 Redux [GOG.com]\Uninstall Metro 2033 Redux.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metro - Last Light Redux [GOG.com]\Uninstall Metro - Last Light Redux.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immortal Redneck [GOG.com]\Uninstall Immortal Redneck.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grim Dawn [GOG.com]\Uninstall Grim Dawn.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Divinity - Original Sin 2 [GOG.com]\Uninstall Divinity - Original Sin 2.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrossCode [GOG.com]\Uninstall CrossCode.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ATOM RPG - Post-apocalyptic indie game [GOG.com]\Uninstall ATOM RPG - Post-apocalyptic indie game.lnk' was moved to the quarantine folder.
The file '\\?\C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMID EVIL [GOG.com]\Uninstall AMID EVIL.lnk' was moved to the quarantine folder.
D:\Program Files (x86)\GOG Galaxy\Games\Bright Memory_Early Access\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '4fa0f04f.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\XCOM Enemy Unknown\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '7bc8e559.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Wasteland 2 Director's Cut\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '4157fa02.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Vikings - Wolves of Midgard\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '71f79614.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Victor Vran\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '45c582c7.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\SpellForce 3 - Soul Harvest\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '5820977f.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Seven The Days Long Gone\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '1313defe.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Project Zomboid\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '4259c330.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Project Warlock\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '5053da22.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Metro 2033 Redux\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '1595b2b1.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Metro Last Light Redux\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '2d44e26e.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Immortal Redneck\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '6c3b8a00.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Grim Dawn\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '34d5ffe7.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Divinity - Original Sin 2\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '195ba63b.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\CrossCode\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '3c979706.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\ATOM RPG Post-apocalyptic indie game\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '01b0933a.qua'!
D:\Program Files (x86)\GOG Galaxy\Games\Amid Evil\unins000.exe
[DETECTION] Is the TR/AD.Swrort.gedwq Trojan
[NOTE] The file was moved to the quarantine directory under the name '744eb6db.qua'!

[Bastila Shan]

Try kaspersky, it will never find a thing.

[moon]

Originally posted by Hoboslayer:

Try kaspersky, it will never find a thing.

Is that good or bad? Sounds bad lol

[Naedmi]

Yes, that whole list. It's sensing that files which allow access to alter files downloaded in GoG are dangerous. It's likely because your local virus protection has not listed the files from GoG as safe.

The only altering it will do to your computer is to uninstall the game. It's safe.

[Bastila Shan]

Originally posted by Rotting In My Chair:

Originally posted by Hoboslayer:

Try kaspersky, it will never find a thing.

Is that good or bad? Sounds bad lol

Well i assume its doing its job but ive never seen it detect a threat.