Simviation Forum - Found trojon virus in FS file!!!!

Oct 7^th, 2005 at 8:31pm

cavity Offline
Colonel
I love YaBB 1G - SP1!

Posts: 388

I discovered a trojon virus in a file that I downloaded a while back. It was in the Xtreme lightning package that came out a few months ago. My antivirus just picked it up for the first time. It inserts in the default lightning package. Has anyone else come across this? Todd

Back to top

IP Logged

Reply #1 - Oct 7^th, 2005 at 8:36pm

Hagar Offline
Colonel
My Spitfire Girl
Costa Geriatrica

Posts: 33159

Are you sure it was in the zipfile? Many of these trojans attach themselves to files already on your computer, specifically certain types of file like EXE files. The reason they're called trojans is that they can lie dormant for some time after you pick them up & activate themselves on a specific date, sometimes months later.

Founder & Sole Member - Grumpy's Over the Hill Club for Veteran Virtual Aviators
Member of the Fox Four Group

Need help? Try Grumpy's Lair

My photo gallery

Back to top

IP Logged

Reply #2 - Oct 7^th, 2005 at 8:41pm

cavity Offline
Colonel
I love YaBB 1G - SP1!

Posts: 388

It says it was in the Xtreme Real Life Lightning installer exe, so Im not sure. I have never had a virus so I dont know that much about them. I moved it to the vault, but it says that the fiel has embedded into the default lightning setup, and cannot be healed. What now? Todd

Back to top

IP Logged

Reply #3 - Oct 7^th, 2005 at 8:52pm

Hagar Offline
Colonel
My Spitfire Girl
Costa Geriatrica

Posts: 33159

I suggest you report this in the Site Feedback forum or send Pete a PM so he can check it out for you. It's possible but all files posted here are carefully checked for known viruses with more than one anti-virus application before being posted for download.

Founder & Sole Member - Grumpy's Over the Hill Club for Veteran Virtual Aviators
Member of the Fox Four Group

Need help? Try Grumpy's Lair

My photo gallery

Back to top

IP Logged

Reply #4 - Oct 7^th, 2005 at 9:02pm

cavity Offline
Colonel
I love YaBB 1G - SP1!

Posts: 388

I just posted to the the feedback site. I just hope no one else has this problem. Any advice on the best way to handle it now, should I do anything special to prrevent it from damaging things? Todd

Back to top

IP Logged

Reply #5 - Oct 7^th, 2005 at 9:09pm

Hagar Offline
Colonel
My Spitfire Girl
Costa Geriatrica

Posts: 33159

Sorry but I'm no great authority on viruses. Providing you have recognised anti-virus software installed & update it regularly that should be able to handle it. If you can find out the name of the trojan do a search for it on one of the anti-virus software sites, like McAfee or Symantec, or even Google. They might have software that you can download to deal with it.

Founder & Sole Member - Grumpy's Over the Hill Club for Veteran Virtual Aviators
Member of the Fox Four Group

Need help? Try Grumpy's Lair

My photo gallery

Back to top

IP Logged

Reply #6 - Oct 7^th, 2005 at 9:11pm

cavity Offline
Colonel
I love YaBB 1G - SP1!

Posts: 388

It is called Dopper.generic.WF. Look it up at MS but they didnt have anything about it. Ill try AVG next and see what they say. Thanks, Todd

Back to top

IP Logged

Reply #7 - Oct 7^th, 2005 at 9:32pm

Fly In Ex Member

I am running AVG, and mine picked up a virus in the XTreme lighting file a few months ago, but it also picked up viruses in some of my Dreamfleet EXE's and also the Christen Eagle by LIC. So I am not forsure what was going on, but just figured it was a problem on AVG's part ???

Back to top

IP Logged

Reply #8 - Oct 8^th, 2005 at 2:45am

expat Offline
Colonel
Deep behind enemy lines!

Gender:
Posts: 8499

Quote:

It is called Dopper.generic.WF. Look it up at MS but they didnt have anything about it. Ill try AVG next and see what they say. Thanks, Todd

Hi Cavity

I run McAfee online virus software and it picked nothing up. I even ran the name and variations of the name through their virus library and it also came up blank. Could be an anomaly with your anti virus software.

Matt

PETA People Eating Tasty Animals.

B1 Boeing 737-800 and Dash8 Q-400

Back to top

IP Logged

Reply #9 - Oct 9^th, 2005 at 4:56am

Tom_M Offline
Colonel
Local airport EGSX

Posts: 397

Could be a false positive on AVG's part. Try Avast!

-Games PC-&&AMD 3200+ (due for replacement)&&1GB RAM&&256MB 7600GS Overclocked

Back to top

IP Logged

Reply #10 - Oct 9^th, 2005 at 5:21pm

MattNW Offline
Colonel
Indiana

Gender:
Posts: 1762

That's what it sounds like, false positive. Since others aren't picking it up. You may want to redownload the file to make sure. You shouldn't be in any danger as long as you don't run the file until you get it checked out. A virus like this can't run it'self.

Advanced AV products use heuristic scanning to look for unknown or modified viruses so they are prone to false positives at times. They look for .exe files that are capable of certain things like modifying the registry or attaching to other files so if the .exe cand do these things then you may get a warning out of your AV program when it scans them.

I'd suggest also contacting the author of the package. They might have had this reported before and know what is happening with this file.

In Memory of John Consterdine (FS Tipster)1962-2003

Back to top

IP Logged

Reply #11 - Oct 9^th, 2005 at 7:57pm

cavity Offline
Colonel
I love YaBB 1G - SP1!

Posts: 388

Thanks for all of the info. I have it vaulted and have not noticed any changes in the performance of my computer as of yet. I was just hoping that if it truly was a virus, I could give others a heads up to avoid any problems. Todd

Back to top

IP Logged

	Search the archive: