Rising Sun Downloaders A heads up :Virus's [Archive]

RDDR

06-02-09, 05:09 PM

I downloaded Maddys The fall of the Rising Sun today.
Really looking forward to getting it up and running.

Unfortunately I detected Trogen worms attached to two of the Bug fixes,and another update.
I sent Maddy an Alert PM to let him know,then on second thought figured it would be wise to let everyone know as soon as possible what has happened.
I have a very tough Anti Virus program that slams the door on any site that is unsafe, however for some that might not be the case.
The first fix had a virus { Win32 Trogen-gen(Other) Virus/Worm/VPS version 090601-06/12009}

Hope this is helps and is repaired as soon as possible,and hope if anyone had the same prob as myself that they are OK and it was detected.
If you have recently downloaded and noticed nothing, it would still be a good idea to perform a Deep Scan for safety sake.

Cheers,RDDR

Highbury

06-02-09, 06:38 PM

What AV are you running? My wife works for a data protection company and one of our friends there set up their own in-house AV program on our PCs. I had always thought it was more advanced then off the shelf AV programs.. and I detected nothing downloading FOTRS. Just curious to know what you are running so I can ask some questions.

RDDR

06-02-09, 07:35 PM

Greetings from San Diego Highbury.
I'm using the paid Upgrade version of Avast as well as Malwarebytes and Super Anti Syware.
I've used them all, ie Norton, AVG, and McCaffe.
Found this combo really keeps me as protected as you can get.
The virus';s were there at 11:30AM Pacific.

Cheers RDDR

Chaoic16

06-02-09, 07:40 PM

I have exactly same problems when downloading updates for FOTRS, when trying to download them, my avast AV program alway warned me that there is virus in these files so I couldn't download these.

Chaoic out...

RDDR

06-02-09, 08:05 PM

Sometimes a pic works better.
Hope it gets repaired soon.

http://i131.photobucket.com/albums/p298/RDDR/untitled-1.jpg

AVGWarhawk

06-03-09, 09:14 AM

Google that malware name...could be a false positive.

FIREWALL

06-03-09, 09:22 AM

Still, thanks for the alert. :salute:

RDDR

06-03-09, 10:18 AM

AVGWarhawk

06-03-09, 10:51 AM

Im not going to Google anything.

I think I have done the responsible thing, and thats to alert the community.
Perhaps someone might offer to zip up and send me the fixes.
I would really like to get Maddys addon working

Well now, who is to say the files sent to you by another who is using the file is not infected....perhaps their AV did not catch this trojan and it now resides on their hard drive. Then, you get the virus anyway. A quick GOOGLE indicates that Avast does catch this malware were others did not. Hence the suggestion to dig further using Google or any search engine you wish. PM Maddy and advise what you found or do you feel you have done enough:06:

Akula4745

06-03-09, 10:53 AM

I couldn't find anything on TrendMicro about "Win32 Trogen-gen(Other) Virus/Worm/VPS version 090601-06/12009"

Also I downloaded these FOTRS files recently myself and they came through clean and with no malware or trojans. I am not sure what he is seeing but TrendMicro says the downloads are fine.

AVGWarhawk

06-03-09, 11:19 AM

Reading more on this issue and Avast it would seem to be a false positive. It is also a generic name for a possible Trojan. It does not mean that something is not there however. So, attempt a download from another who has this file and see if the file contains the same.

RDDR

06-03-09, 02:00 PM

As mentioned in my first post.I PM'd Maddy first before posting this thread.
Thanks everyone
Cheers,RDDR

Rockin Robbins

06-03-09, 02:14 PM

My testing is not done, so best to be cautious but:

Kapersky online scan found no virus
Spybot Search & Destroy says it's clean
Ad-Aware says clean
Anti-virus portion of Comodo Firewall says it's clean
WinPatrol says no problem

Could be a false positive, but let me scan it with ClamWin and someone could hit it with AVG as well. THEN we can clear it as a false positive.

One of the reasons I use Avast! is that it is sensitive and sometimes gives false positives as a result. This would be about the fifth false positive so far this year. I'll take a hundred of those before I accept one false negative!

Don't bother with Norton. It reports that WinPatrol is a virus. Best way to knock out the competition is to make people afraid to use it. So Norton is permanently off my list.

RDDR

06-03-09, 04:17 PM

Thanks Rockin Robbins.
I certainly agree.I'd rather deal with false positives for sure.
A few years agao a virus took down my hard drive and I lost photos and valuable info forever.
I hope this is a false positive and if it is I'd like a bit of advice about going back and installing files that look like this.What happens next?

Rockin Robbins

06-03-09, 04:47 PM

Avast! says:

http://i196.photobucket.com/albums/aa293/RockinRobbins13/Silent%20Hunter%204/avastscan.jpg

But Ad-Aware says:

http://i196.photobucket.com/albums/aa293/RockinRobbins13/Silent%20Hunter%204/Ad-awarescan.jpg

And Kapersky online says:

http://i196.photobucket.com/albums/aa293/RockinRobbins13/Silent%20Hunter%204/kaperskyonlinescan.jpg

And ClamWin says:

http://i196.photobucket.com/albums/aa293/RockinRobbins13/Silent%20Hunter%204/ClamWinScan.jpg

The verdict is in. The file is clean. http://i196.photobucket.com/albums/aa293/RockinRobbins13/smileys/medium-smiley-064.gif

OrangeYoshi

06-03-09, 09:54 PM

Thanks for clearing the mod for us.

Don't bother with Norton. It reports that WinPatrol is a virus. Best way to knock out the competition is to make people afraid to use it. So Norton is permanently off my list.

All business ploys aside, do you think there is actually anything wrong with Norten? I use it for my computer. I have never had any problem with getting infected with viruses. Norten has been good at finding, and deleting them. My records show Norten has deleted thousands of trojans.

I agree with your false positive thing.

Armistead

06-03-09, 11:41 PM

Avast is good and bad. It has given me many false positives, but I still use it. I got the same virus hit from Avast a few months ago when I DL FORS, but found it clean....

Rockin Robbins

06-04-09, 10:10 AM

Well, the first thing wrong with Norton is that it holds your computer hostage. Try uninstalling it and see what I mean. Oh, I should tell you that your computer won't work if you do, unless they changed it recently. Norton hooks into your operating system so that any disk operation points to Norton instead of the Windows disk read/write procedures. When you uninstall Norton, the pointers still point to Norton. Guess what happens when you try to start your computer?

The government forced Norton to post a true uninstall on their website. They aren't exactly trumpeting why it's needed or helping you to find it. Actually they do their best to make sure you can't find it unless you know what you're looking for and why, plus know how to do site searches. After all, they aren't trying to protect you, they're trying to force you to pay them every year.

Then like the car dealership who sends a junk mail ad disguised as an IRS refund, after tricking us into installing their junk for the protection of their "valuable customers" they ask us to trust them to sell us a car, or another year of Norton. Bye-bye Norton. You're otta here! Permanently. Your kind of service I will do without. My computer is mine and I will run it as I choose.

Either of the two free anti-virus programs, AVG or Avast! do as good a job and don't hold a gun to your head for ever increasing amounts of money every six months or a year. There are other free alternatives that are just as good.

Tonight I will be installing FOTRS to see what I have to do to defang Avast! I just want it to ignore that specific file and leave normal protection alone. I'm thinking there's an option to do that on first detection. Stay tuned...

AVGWarhawk

06-04-09, 10:19 AM

A false postive....go figure:hmmm:

FIREWALL

06-04-09, 10:22 AM

Every computer that had Norton on it that I know of had to be reformated to get rid of Norton.

NORTON is the VIRUS. :yep: :down:

Rockin Robbins

06-04-09, 01:07 PM

Before the feds made Norton make the Norton Removal Tool, I manually edited the registry, individually removing dozens of hijackers that pointed disk input/output routines to Norton. Once I was sure I had them all, I backed up my system, uninstalled Norton and all was well. To this day Norton does not provide the Norton Removal Tool as part of its uninstall process or anywhere on its install disks. You have to go to their website armed with a separate search engine to dig it out to use it. They are conforming to the law as begrudgingly as possible and now they wonder why we don't love them.

From now until the end of time no computer I own will ever have a Norton product on it again.

captgeo

06-04-09, 01:18 PM

Avast:yeah: Norton:down:

Highbury

06-04-09, 01:40 PM

Besides the un-install issues of Norton, it is a resource hog and it is IMO a poor Anti Virus program.

Everyone remember the "Blaster Worm" thing a few years back? Well both computers in my home at the time got it before any of the AV programs had recognized and scanned for it. My PC at the time had Panda AV, my then girlfriend had Norton. To remove it with Norton you had to go online, get a removal tool. Turn off System Restore, boot into safe mode, run the tool, boot into normal mode, enable Sys Restore, boot again blah blah blah. With Panda, on the same day, it said "would you like to remove?" I said "Yes" and it was done. Sorry to people who have paid for Norton, but it really is the worst AV option.

Speedo

06-04-09, 03:44 PM

Avast is best antivirus for me :) norton ***s

AVGWarhawk

06-04-09, 03:50 PM

I can honestly say I have used Norton for years. I have also paid for Norton for years. I can honestly say Norton was ok and never caused any problems. I have found though that there are plenty of fee AV programs and do not use Norton anymore. I use Avast on my new computer and my old computer still has Norton but I will not renew the program....it will be removed and Avast installed. :up:

Seeadler

06-04-09, 04:10 PM

From now until the end of time no computer I own will ever have a Norton product on it again.
The last good product of Norton was the Norton-Commander. Everything that came afterwards with the label Norton on it was a pain for pc admins :D

OrangeYoshi

06-04-09, 04:48 PM

Armistead

06-04-09, 07:25 PM

RR is right, Norten is a hog on resoures. It's not that it's that bad as a virus tool in itself, it's just loaded with junk that tracks everything your cp does, plus it's expensive. Avast does a great job, updates are great, no complaints. However, it is sensitive, but I prefer to be safer than sorry.

I used Perfect Installer to rid myself of Norten......

Rockin Robbins

06-04-09, 07:33 PM

Yoshi, with the world of Linux, especially Ubuntu Linux, the world is changing. Free software of the quality of commercial is running all over the place. Much of it is migrating to the Windows world. Sir Gates better watch his step if he wants to charge us $200.00 for a garden variety Windows 7. The ground has shifted under his feet and it could eat him up.

In ten years I've never had a virus with AVG or Avast!

A computer with AVG or Avast! antivirus, Free Comodo Firewall, WinPatrol, Secunia Software Inspector, CCleaner, ERUNT and other great free protectors is better protected than a computer with commercial software simply because you would never have the cash to buy the commercial equivalents. If you did, you wouldn't have better protection.

Folks, I'm thinking Avast! is going nuts over the installer of the patch. I'm downloading the carrier upgrade patch to see if I get a similar hissy fit. Nope, no squawking from Avast! on the Carrier Upgrade, so it's something peculiar about the patch. I'm going to install the patch and the carrier upgrade, delete the installers and see if I get an alarm.

Yikes!!! What a slow download FOTRS is!!!

Buddahaid

06-04-09, 08:35 PM

OK, I'm a chump who uses Norton, and has for years. Currently I'm using Norton 360 and formerly used Norton Internet Security. NIS was a big resource hog, but 360 is much better about it from my non-professional viewpoint. I've never had any real problems, or use issues, or viruses. And besides, if you want you can turn off you cable modem and unload it.

Buddahaid

Graf Paper

06-04-09, 09:18 PM

Anyone who has ever worked with Assembly programming will tell you that many anti-virus apps will have a nuclear meltdown over many common code subroutines.

Things like certain Registry edits, process hooking, DLL code injection, and heap insertions are all flagged by most anti-malware apps. The reason being that such legitimate functions are also used by malware. Unfortunately, this means you can't blindly trust any anti-malware app and have to be more tech-savvy to help weed out the mistakes.

False-positives have always been the Achilles' heel of anti-malware programs, especially when you have them set to use "Heuristic" scans for virus-like activity. That will increase false-positives by as much as 500%. Malware is hardly ever caught by using heuristic scans, so switching it off won't reduce your security level that much and save you some "Chicken Little" moments over many false-positives.

The method of using "signatures", code snippets as an identifying fingerprint, used to be very reliable but malware coders have gotten very resourceful in exploiting common kernel functions while anti-malware programmers have gotten lazy or too cautious by blanketing entire classes of legit kernel-level functions when creating these signatures. As a result, even signature-based scans will return a false-positive 2-3% of the time, on average.

You have to separate all the hype and business gimmicks from the facts and realize that no security app is bullet-proof or idiot-proof.

Anti-virus software has gotten so "dumbed-down" and intrusive that using it is almost as bad as the viruses they're meant to stop. All anti-virus software will slow down your system and reduce available resources. It's a trade-off for the protection you feel you need. Some are worse than others, where system performance is concerned. A few can also cause conflicts with software or games while a couple of well-known names can even break Windows.

I miss the days when shutting down your anti-virus software meant it really was shut down and not just hiding the GUI while it still has three or more processes running in the background. I also miss having the freedom to only enable the features you wanted instead of having no choice at all over some features.

As the saying goes, "Caveat Emptor", and it has never been more true than it is where computers and software are concerned.

OrangeYoshi

06-04-09, 09:24 PM

Very interesting speech there RR. I just have on more question. How in the world can they afford to do it all for free? Is it just that everyone else overcharges and it isn't really that expensive to do, or do they live of advertisements?

I sure don't have much love for Microsoft after this Vista crap he is putting me through. I can't even play SH3 anymore! (Although I have yet to buy the encore version.)

As for it being a resource hog, it would have to be giant hog to mess with my machine.

RDDR

06-05-09, 02:50 AM

Hey Rockin,

You definitely have my attention.Looking forward to the outcome.

Cheers,RDDR

Rockin Robbins

06-05-09, 05:39 AM

Yoshi, download Ubuntu Linux. You can run it right off the free CD you'll make. As a matter of fact, you can run Ubuntu Linux off a flash drive! Now you'll have a free operating system that in many ways is better and more secure than Windows. I KNOW it makes Vista look like a model T if you want. Mine looks like OSX, so it's kind of utilitarian, but all the appearance of Vista was copied from different Compiz variations available in Ubuntu before Vista hit the street. The cute rectangular, colored max, restore, minimize and close buttons were all available in June 2006 before Vista. I used 'em and discarded 'em, using something like the OSX look now.

Actually the Compiz compositing environment is much more entertaining than Vista, with the additional benefit that it and the Ubuntu operating system, plus ALL the software is free. Imagine if Ubi had the foresight to publish its games able to be installed on Linux systems. Then the question would be $200 for Windows or $200 worth of games for Linux?

Oh, Ubuntu runs twice as fast as Windows when running the same program. I run Firefox and Thunderbird when I boot Linux. They work just the same as they do on Windows but.... twice as fast. Linux is much safer than Windows. No worms, viruses, trojans, etc. Trojans could not call home because they would not have the administrator privileges to do so. When you upgrade Linux, you press one button. From central repositories of scanned, rated, safe, free and excellent software, your operating system, drivers and EVERY PIECE OF SOFTWARE on your machine are automatically upgraded in the background while you work or play. Unlike the Windows world, you only have to reboot once a month for kernel updates.

Where you might have to reboot Windows once a day, I can run Ubuntu for a month without ever thinking about having to because it is much more stable than any version of Windows, even my beloved XP.

How do they make money? You assume that Linux is a business. It is not. Asking how they make money is like visiting a model airplane club flying radio control giant scale models that cost thousands of dollars and asking "How do they make their money?" The question is not even relevant. Until the commercial game companies sell Linux versions of their games, there will have been very little commercialism there.

Akula4745

06-05-09, 06:17 AM

I have messed around with Ubuntu (not on my new machine yet) and it is super silky smooth... too bad we cannot run our games on it. As RR said... maybe someday.

I did want to recommend the solution for me which has been far better than any anti-virus software - Smoothwall Express firewall - www.smoothwall.org (http://www.smoothwall.org) - its open source so its FREE... and it is the BOMB for network protection. Sure there are other options... but SE is stable and solid with clear controls. Take an old PC and load it up... then be shocked at the number of daily intrusion attempts you get (I was). Have not had any kind of trojan or worm or malware issue since I started using Smoothwall. Do yourself a favor and check it out...

Rockin Robbins

06-05-09, 11:46 AM

Have not had any kind of trojan or worm or malware issue since I started using Smoothwall. Do yourself a favor and check it out...

OOOOOOOOO! Sounds great. I've been really happy with Comodo but an open-source alternative sounds excellent.

Rockin Robbins

06-05-09, 05:37 PM

OK, here is the scoop. Left alone, Avast! will protect you whether you wish to be protected or not. It just will not let you run the FOTRSbugfix001.

So we have to be as nasty to Avast! as it is to us. In your system tray (lower right hand corner of your screen, you see the Avast! icon with the "a" on it. Right-click that and choose "Pause Provider" then "Standard Shield." Avast! will pop a warning window on you to attempt to scare you out of making the change. "Your computer might be at risk. Click this baloon to fix the problem."

Refuse to be intimidated. Now you can run FOTRSbugfix001.exe right out of the rar file. It will ask you where FOTRS is and then apply the patch. You might as well run the Carrier Upgrade now too. When you're done, delete the rar files so Avast! won't have a cow.

Right-click the Avast icon again, choose "Resume Provider" then "Standard Shield" and you are back in business with Avast! none the wiser. Enjoy FOTRS!

OrangeYoshi

06-05-09, 07:35 PM

How do they make money? You assume that Linux is a business. It is not. Asking how they make money is like visiting a model airplane club flying radio control giant scale models that cost thousands of dollars and asking "How do they make their money?" The question is not even relevant. Until the commercial game companies sell Linux versions of their games, there will have been very little commercialism there.

So it is more like the modders here. They give you great stuff because they want to, not because they get paid.

You have pretty much convinced me to at least try Linux, but you say companies don't make Linux versions of games. Does that mean I couldn't go play SH4 on a computer running Linux? The only computer I would be able to put Linux on is the one in my room, and it is pretty much a strictly gaming computer. It has some school stuff on it, but 90% of the time I only play games on it.

You also mention something about being able to run Linux off of a CD. Does that mean you can still have Vista/XP on the computer? I also have only ever run IE, never Firefox or any other internet browser. Are any others better than IE8? I guess a nice FAQ for Linux/Firefox/other-free-things would be the best thing for me.

Rockin Robbins

06-05-09, 08:02 PM

Your best bet is to set up your computer to dual boot Linux/Windows. I set up Linux on an old 40 gb drive from a junked Compaq computer. My computer boots that disk by default.

A program called Grub is a menu giving you the option of booting Linux on that disk or Windows on its own disk. If my old 40 gb dies, the next drive in line is my completely untouched, no changes made Windows XP drive and it boots normally. So you see, there's no repartitioning of your Windows hard drive, no risk!

Want to know something that will blow your mind? My Ubuntu installation reads and writes all flavors of Windows partitions like a native. Windows cannot read or write an ext3 partition. My Linux programs read and write Windows data files just fine. I can load MS Word files into Linux Open Office.org, do whatever, save them, switch to Windows and load 'em right back up again.

The free installation understands the expensive one perfectly! The expensive one pretends the free one doesn't exist. Who is afraid of whom? Hmmmmmm?:woot::har: You have to love it.

OrangeYoshi

06-06-09, 02:17 PM

Your best bet is to set up your computer to dual boot Linux/Windows. I set up Linux on an old 40 gb drive from a junked Compaq computer. My computer boots that disk by default.

I've got a HD from my last HP I could probably put into my new one.

A program called Grub is a menu giving you the option of booting Linux on that disk or Windows on its own disk. If my old 40 gb dies, the next drive in line is my completely untouched, no changes made Windows XP drive and it boots normally. So you see, there's no repartitioning of your Windows hard drive, no risk!

Also a good thing. I don't want to mess up my already touchy Vista.

The free installation understands the expensive one perfectly! The expensive one pretends the free one doesn't exist. Who is afraid of whom? Hmmmmmm?:woot::har: You have to love it.

That is just crazy.

I've just pulled up the Ubuntu website. Do I need to download Linux first, then Ubuntu, or just Ubuntu? I can mod a game, dig and mess with program and computer files, but I've never messed with Operating Systems. I should probably look through their entire website. Any other questions I have they have probably already answered.

Rockin Robbins

06-06-09, 08:29 PM

We have ripped this thread to shreds, but I guess the damage is already done. Linux is an underlying operating system. There are dozens of different distributions (http://en.wikipedia.org/wiki/Comparison_of_Linux_distributions) (called distros by the cool people. I try not to be one of those:cool:) by various companies that make their money from tech support for their distro in commercial environments.

There's Red Hat, Fedora, Knoppix, Debian, Slackware, Ubuntu, etc. Most of the time the Linux download is free and tech support costs money from the company doing the distribution. Each of these distributions installs some variety of Linux on your machine. Now things get a bit complicated.

The underlying kernel of these is all the same and within reason they can all run the same software. Each comes with a bundle of software and they have much in common. Now Linux itself is made by a bunch of hobbyists who couldn't care less about how friendly it is for a neophyte to use, hence the geek reputation of Linux. In the bad old days if you didn't know your stuff they just sneered at you and laughed.

Well those days are gone with Ubuntu and a few of the others who have realized that what they have is a fantastic desktop environment that only needed some civilization. So they dressed Linux up in some nice clothes, taught him some basic manners, made it easy to install and produced some really great GUIs.

Windows only has one GUI. Linux has many. The most common are Gnome (pronounced with a hard G) and KDE. Both are great. KDE works more like the web without double-clicks and MIGHT be a bit more polished. I switched to Gnome when the Mac4Lin enhancement came out that makes my Linux operation look like OSX, even the log-in screens, which have Apple Logos. Since I won't ever own an Apple product again (got burned in the Apple /// debacle) this is a way to make fun of 'em.

The big thing about KDE and Gnome is that they are MUCH more customizable than any variety of Windows. You could waste years in Linux and never touch an application because you were customizing your GUI. OH! On my machine I can pick KDE or Gnome on bootup. Heh, heh, heh. You are totally confused.

Yup, I was too. No biggie. You know how to learn to swim: just jump in over your head and if you survive, you'll find yourself having fun! Installing Ubuntu is also the best remedy for that obsolete laptop that is breathing its last. Suddenly a marginal machine becomes a workhorse.

PM me if you need help getting it up and running. We've shredded this thread enough I think.:rock:

My Ubuntu Linux desktop:

http://i196.photobucket.com/albums/aa293/RockinRobbins13/Screenshot.png

No I wasn't able to get SH4 to run. It tried but a couple of routines just weren't available in the WINE emulator. It DID install though, as you can see!

OrangeYoshi

06-07-09, 06:16 PM

@RR: I sent you a pm, but I'm not sure if it went through or not. I sent it twice, but nothing is showing up in my sent folder.

Webster

06-07-09, 11:34 PM

Wow. I'm surprised to see so many people having problems with Norten. I've had to uninstall Norten several times (for upgrading purposes, and a mess up with my new computer), and I've never had a problem with my computer starting or anything.

I'll ask again, other than having to pay, business practices, etc., has anyone ever gotten a virus while using Norten?

Another question, where do you guys find these free programs? If they are free, wouldn't they be worse? Do they update all the time to recognize the latest threats? Have you always been virus free while using these programs? Which one would you recommend for me to possible switch to? I see Avast is popular.

no, free doesnt mean worse because the free versions are there show you how good the software is and thats all you ever need for the average person but they all have upgrades to pay versions that offer extra protection and added features if you feel you need better than average security for your system. they make money from advertising on their websites and by selling the upgrades.

i got lots of viruses with norton anti-virus (the name must be a joke) in fact the only thing norton ever did for me was to tell me when i had already been infected (gee thanks guys) but it never stopped anything from infecting me and the BS you go through downloading tools to remove stuff ended up corrupting my OS 50% of the time so i just started reformating when infected because THAT was easier than nortons methods of repair and the results of the repair methods often caused a reformat being necessary anyway.

i have been know to frequent some off colored sites that have viruses (it wasnt the porn, i was reading the articles lol) and i have never had anything infect me when using the avast 4 home free version anti-virus but it was hard to get used to the computer talking to me when it updates lol.

heres the link for avast: http://www.avast.com/eng/download-avast-home.html