This evaluation is done by each according to their criteria and rules they each have established for what a normal safe file is, and what is not. To sum up: Your file falls into a gray area, but displays possibly unwanted or undesired behavior when an analysed by some of the 54 a/v programs. I'd look again at their TOS to see if such a clause is in there. Otherwise, this file should not be classified as a Trojan. This may have come about by some sort of legal agreement you, the user, agreed to in the TOS (Terms Of Service) fine print, as when you installed it, that would allow them to install that (spyware) part of the program legally. You can quickly use the first link to see what wiki says a Trojan is.Īpparently some of the Trojan detections above may involve some sort of spyware capabilities. Here, 12 a/v's have it as a Trojan, or at least one that is heuristically detected. In order to determine whether this file is malicious or a false positive, one must look at what type of classification your file is catagorised as. Malicious behavior in a file is defined as:įalse positive detection and consequences: Not so sure with 19 out of 54 a/v engines. If a low-prevalence file is detected by 1 or 2 a/v engines, then that may be a false positive detection. In any case, prudence is usually the best course, and finding alternatives that work, as Eddy suggests, is your best course of action. Not sure how you got a week old detection result from VT when your last post was here yesterday at 8:42 AM forum time. And who knows, you may find that the game runs just as well without it. If it's still blocked after Avast looks it over, it probably really is malware. ![]() Submit it as a potential false positive and do without it for a few days, then see whether it's allowed. You, by virtue of the fact that you're here, may be the best educated about security of the lot of them.Įrring on the side of prudence would be my suggestion (unless you LIKE reinstalling Windows and all your apps). ![]() Regarding "many others in the WC3 community" running it. I doubt you're the first person to submit the detection to them, assuming it's not brand spanking new. With something that's commonly downloaded, and the AV companies still flagging it, I'd worry. False positives are a possible reality, but usually they're relatively unknown things that Avast and company haven't seen before. Your anti-malware software is on task because you want to trust other, well-funded research organizations to determine for you whether the software you're trying to run is malicious. ![]() Now, it could be that they all sense its behavior - maybe it pokes data in places you're normally expected to keep away from, and therefore it may be flagged as malicious - where in fact in this particular case you really WANT that to happen. Seriously, I don't know this program at all, but if 19 of 54 virus scanning services flag it, I'd be suspicious. Could a game-tweaking executable from the Internet have malware in it? No way!
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |