maxellgun Posted March 18, 2019 Share Posted March 18, 2019 Hello . it never happened. virus in mod, can you explain me? thank you Quote Link to comment
Moderator Quaksen Posted March 18, 2019 Moderator Share Posted March 18, 2019 It's a false positive. This note is from WoT, but it still applies. It's just Windows Defender being stupid. (Overly aggressive with their heuristics most likely) Quote Link to comment
Administrator Aslain Posted March 18, 2019 Administrator Share Posted March 18, 2019 Doesn't matter if it not happened before, and it's a false-positive in your antivirus like Quaksen said. Quote Link to comment
12_Gauge Posted March 18, 2019 Share Posted March 18, 2019 I am getting a trojan virus, when I try to update WOW, on any of the options provided such black box etc. HELP Quote Link to comment
Administrator Aslain Posted March 18, 2019 Administrator Share Posted March 18, 2019 2 minutes ago, 12_Gauge said: I am getting a trojan virus, when I try to update WOW, on any of the options provided such black box etc. HELP Update what and how? Show a screenshot with any proof. @12_Gauge moved your post here Quote Link to comment
maxellgun Posted March 18, 2019 Author Share Posted March 18, 2019 thx friends !! Quote Link to comment
Moderator Quaksen Posted March 18, 2019 Moderator Share Posted March 18, 2019 Read the above posts.. it's a false positive. Quote Link to comment
Administrator Aslain Posted March 18, 2019 Administrator Share Posted March 18, 2019 I concur that. https://www.virustotal.com/#/file/5475e5c0933d47bc5ab241c7a6b1204f7fd0b007671e4384a106aee86f45738a/detection Quote Link to comment
Iceman Posted March 24, 2019 Share Posted March 24, 2019 When Windows Defender was saying the same thing about past versions I still had I knew something was wrong. This started right after the latest Windows update I got. I had to exclude the folder I stick the installer in. Quote Link to comment
wade_gaskins Posted March 25, 2019 Share Posted March 25, 2019 Funny thing I never had any kind of issue/virus warning using the direct download link. Guess I have been lucky all these years of using the mods from here. Quote Link to comment
Moderator Quaksen Posted March 25, 2019 Moderator Share Posted March 25, 2019 5 minutes ago, wade_gaskins said: Funny thing I never had any kind of issue/virus warning using the direct download link. Guess I have been lucky all these years of using the mods from here. Not lucky, just using better software than Windows Defender most likely Quote Link to comment
Administrator Aslain Posted March 25, 2019 Administrator Share Posted March 25, 2019 4 hours ago, wade_gaskins said: Funny thing I never had any kind of issue/virus warning using the direct download link. Guess I have been lucky all these years of using the mods from here. it TOTALY DOESN'T MATTER if someone had no such issues before, seriously, it's not a factor. It's like Quaksen said. Various antivirs throws a false-positives from time to time and it's totaly normal too. They are simply using a heuristics which is known from a false-positives. Imagine it like you are having similar face to a thief, the police is searching for him and since your face is similar they will keep harrasing you nonstop or even try to lock you up ;) The installer has a new "face" with every update, and sometimes that face is matching a malware in av's definition database. So basicaly with every update of modpack the AV may stop thinking of it as a virus or trojan or whatever, but also with each modpack update it may start to throw a false-positives too. Quote Link to comment
wade_gaskins Posted March 25, 2019 Share Posted March 25, 2019 18 hours ago, Quaksen said: Not lucky, just using better software than Windows Defender most likely Nope defender only. Quote Link to comment
Moderator Quaksen Posted March 25, 2019 Moderator Share Posted March 25, 2019 2 minutes ago, wade_gaskins said: Nope defender only. Maybe you just didn't download while Defender was being idiotic then. :) There's no luck involved though. Quote Link to comment
torsitch Posted March 26, 2019 Share Posted March 26, 2019 (edited) I have had a lot of experience in removing viruses... And it was very common to see an *already (currently) infected* machine, download additional trojans by attaching to EXE files you may download, that are otherwise clean from the source, but become tainted by a current infection on the machine. It is also possible that if you do not have Windows Update/Java/Flash/Browser up-to-date but have a clean machine, various scripts on webpages and/or a compromised browser installation (addons with security holes too) often are used to attach to any downloaded EXEs as the primary method of initial infection. Which of course then opens up more security holes and makes way for more substantial infections. You can sometimes see that that behavior from that browser will go away once the cache is cleared, the browser is simply restarted clearing the RAM where a script can lurk, or the machine is rebooted (again, clearing RAM). And lastly, I strongly suggest staying far, far away from Google Chrome. It is the most actively targeted browser in terms of exploits and IMO does not deserve its popularity & widespread usage. Use Mozilla Firefox instead, and if you also decide to stick with Chrome as well, always install the UBlock addon so you can avoid alot of those malicious scripts and websites. Consider using a custom HOSTS file to further bolster the security of your machine (Stephen Black's is decent). That probably makes the biggest of impact in my experience, aside from staying on top of machine updates. Edited March 26, 2019 by torsitch Quote Link to comment
NewbieD Posted March 28, 2019 Share Posted March 28, 2019 Same issue here. Download direct link 1/3 were both intercepted by Windows defender, stating a Trojan:Win32/Azden.A!cl virus. Dunna if this a new feature or is the file actually corrupted Quote Link to comment
Administrator Aslain Posted March 28, 2019 Administrator Share Posted March 28, 2019 2 hours ago, NewbieD said: Same issue here. Download direct link 1/3 were both intercepted by Windows defender, stating a Trojan:Win32/Azden.A!cl virus. Dunna if this a new feature or is the file actually corrupted Merged with this topic, you posted in wrong one without even reading what it was about. Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.