Possible virus in the trainers on this site (may be false alarm)

SlickRCBD · Wed, 8th Apr '09, 10:43pm

A couple years ago I downloaded the IWD2 trainer files from this site. Now, I just updated the definitions for AVG Antivirus Free Edition on my Windows 98SE computer and ran a full scan. It reported that both trainers were infected with possible trojan horses. I have subjected these files to scans with the same antivirus program for years, and nothing else was flagged by the antivirus software as infected.

Can anybody else can confirm the results with AVG or another antivirus program?

Here's a link to a screenshot of my antivirus scan:

http://www.flickr.com/photos/10736018@N05/3424987938/

Ziad · Wed, 8th Apr '09, 11:05pm

It's pretty common to get false positives with game trainers. The programs monitor the game executables and modify things on-the-fly. In order to do this they have to use certain algorithms, and in many cases the heuristics of anti-virus programs will think these algorithms are similar to some trojans. Considering some of the trainers have been on the site for almost 10 years I seriously doubt they are real trojans without anyone having found out. Tal and the admins would have caught it straight away, and even if one had somehow slipped through there's a number of tech wizards on the boards would have got them.

Of course, it always pays to be careful of the things you download from the internet. Trainers being infected with viruses or trojans has happened plenty of times. But if it's a trustworthy site like SP you can pretty much bet it's a false positive, especially if the file's been around for years.

Taluntain · Thu, 9th Apr '09, 12:54am

False positives, as Ziad explained. Various virus scanners report false positives for any kind of game trainers all the time.

Wed, 8th Apr '09, 10:43pm	#1
SlickRCBD Gems: 15/31 Latest gem: Waterstar Join Date: May 2005 Location: in front of a computer Posts: 726 Like: 16 Liked 17 Times in 17 Posts vBActivity - Stats XP: 2,542 Level: 16 vBActivity - Bars Level Completion: 49.82% Daily Activity 3.53% Weekly Activity 2.52% Monthly Activity 19.81% Achievements	Possible virus in the trainers on this site (may be false alarm) A couple years ago I downloaded the IWD2 trainer files from this site. Now, I just updated the definitions for AVG Antivirus Free Edition on my Windows 98SE computer and ran a full scan. It reported that both trainers were infected with possible trojan horses. I have subjected these files to scans with the same antivirus program for years, and nothing else was flagged by the antivirus software as infected. Can anybody else can confirm the results with AVG or another antivirus program? Here's a link to a screenshot of my antivirus scan: http://www.flickr.com/photos/10736018@N05/3424987938/

Thu, 9th Apr '09, 12:54am	#3
Taluntain SPS Account Holder Founder Resident Alpha and Omega Join Date: Jun 2000 Location: Cori Celesti Posts: 20,805 Blog Entries: 13 Like: 158 Liked 122 Times in 79 Posts vBActivity - Stats XP: 53,164 Level: 58 vBActivity - Bars Level Completion: 49.93% Daily Activity 74.2% Weekly Activity 148.76% Monthly Activity 101.23% Achievements Awards	False positives, as Ziad explained. Various virus scanners report false positives for any kind of game trainers all the time.
	__________________ Help Support Sorcerer's Place! Join the Sorcerer's Place page!

		Sorcerer's Place Home \| Chatrooms \| BoM Rules & FAQ Sorcerer's Place Stores: Games, Books, DVDs, Merchandise (buying via these links & our affiliated stores below helps support the site - thanks!)
Have you liked us yet?

Wed, 8th Apr '09, 11:05pm	#2
Ziad I speak in rebuses Join Date: Aug 2004 Location: Montreal Posts: 4,088 Like: 0 Liked 0 Times in 0 Posts vBActivity - Stats XP: 9,149 Level: 28 vBActivity - Bars Level Completion: 71.73% Daily Activity 3.53% Weekly Activity 2.52% Monthly Activity 2.73% Achievements	It's pretty common to get false positives with game trainers. The programs monitor the game executables and modify things on-the-fly. In order to do this they have to use certain algorithms, and in many cases the heuristics of anti-virus programs will think these algorithms are similar to some trojans. Considering some of the trainers have been on the site for almost 10 years I seriously doubt they are real trojans without anyone having found out. Tal and the admins would have caught it straight away, and even if one had somehow slipped through there's a number of tech wizards on the boards would have got them. Of course, it always pays to be careful of the things you download from the internet. Trainers being infected with viruses or trojans has happened plenty of times. But if it's a trustworthy site like SP you can pretty much bet it's a false positive, especially if the file's been around for years.