Graal Forums

Graal Forums (https://forums.graalonline.com/forums/index.php)
-   Tech Support (https://forums.graalonline.com/forums/forumdisplay.php?f=7)
-   -   Trojan in Graaleditor.exe (https://forums.graalonline.com/forums/showthread.php?t=79476)

Nabru 04-20-2008 09:51 AM

Trojan in Graaleditor.exe
 
1 Attachment(s)
Avast has never lied to me before.

I have no idea how I contracted this, but stay alert.

Admins 04-20-2008 01:46 PM

I suggest to make a system-wide scan. It seems that virus/trojan is only a few days old and might have also infected other programs on your computer including graal. The graaleditor has been a modification time of "2005-02-09 20:32", has a size of 1034630 and is definitely not containing any virus or trojan when downloaded from the graal server.

cbk1994 04-20-2008 05:12 PM

So how much are they paying you Stefan?
--


Like Stefan said, do a system scan. Maybe try AVG if Avast can't find it.

Xterminator 04-20-2008 06:09 PM

AVG's what i used..I got a bunch of Trojan like 7 but now my computer's fine..But not from Graal :O

Nabru 04-20-2008 06:36 PM

Interesting enough the only thing Avast picked up was that, and Microsoft's malicious software detector didn't find anything after I deleted it.

I'm severely disappointed with SpyBot though, it never found it.

cbk1994 04-20-2008 07:09 PM

Of course Microsoft's malicious software tool didn't find it -- it is far worse than anything else.

Spybot is for spyware, not trojans. :rolleyes:

I recommend having AVG (Avast is fine aswell), Ad-Aware, and Spybot: Search & Destroy.

Nabru 04-20-2008 07:20 PM

Quote:

Originally Posted by cbkbud (Post 1386957)
Spybot is for spyware, not trojans. :rolleyes:

I recommend having AVG (Avast is fine aswell), Ad-Aware, and Spybot: Search & Destroy.

If you've ever read the update descriptions on your spybot, they update trojan detections regularly.

Why? Because trojans/backdoors steal your information(SPYWARE)
Ie: Log your keys.

cbk1994 04-20-2008 08:03 PM

Quote:

Originally Posted by Nabru (Post 1386960)
If you've ever read the update descriptions on your spybot, they update trojan detections regularly.

Why? Because trojans/backdoors steal your information(SPYWARE)
Ie: Log your keys.

Then you probably didn't have a true trojan -- just a guess though.

And, spyware is more defined than just stealing information.

Inverness 04-20-2008 08:13 PM

Quote:

Originally Posted by cbkbud (Post 1386957)
Of course Microsoft's malicious software tool didn't find it -- it is far worse than anything else.

What a glaring display of ignorance.

Microsoft's tool is designed for checking for "specific prevalent malicious software—including Blaster, Sasser, and Mydoom"

Its not an Anti-Spyware solution like Ad-Aware and the other stuff, its just looks for the common stuff.

cbk1994 04-20-2008 08:16 PM

Quote:

Originally Posted by Inverness (Post 1386979)
What a glaring display of ignorance.

Microsoft's tool is designed for checking for "specific prevalent malicious software—including Blaster, Sasser, and Mydoom"

Its not an Anti-Spyware solution like Ad-Aware and the other stuff, its just looks for the common stuff.

That's what I'm saying -- sorry if it didn't come across clearly.

I was trying to say that it doesn't have such a large selection of things that it will check for, so it probably won't find it.

Sorry again for the misunderstanding.

TSAdmin 04-21-2008 03:47 PM

I noticed the same problem, and doing a full scan of the system doesn't seem to show this Trojan anywhere else, so I tried uninstalling the Level Editor completely, scanned the Graal folder, again, (nothing detected) and redownloaded a FRESH copy of the Editor from the Login server - Did another scan, and the same Trojan alert came up, just for the editor :s

Eranian 04-21-2008 04:05 PM

I got this virus too and I formatted and downloaded Graal again and it was still there.
So I formatted again and now I'm too scared to download Graal.

Why did Graal put a virus in level editor?? :confused::confused::confused:

Crow 04-21-2008 04:20 PM

Most likely false detection. I'm not getting this.

Admins 04-21-2008 04:49 PM

Well then the virus scanner is apparently bugged, like I've said that trojan is very new and the Graal editor already 3 years. False alerts sometimes happen because virus scanners are checking for millions of possible virus signatures, but normally such stuff is fixed quickly (with the next signature update).

Crow 04-21-2008 04:54 PM

I asked TSA what program he used to check, and EC checked aswell, they also both got the report. They both used Avast.

As far as I remember, Avast is known for quite a few false reports, so you shouldn't be worried.

Nabru 04-21-2008 07:59 PM

If other virus scanners aren't picking it up and my loyal Spybot didn't catch it, it is likely a false detection then.

Programmer 04-21-2008 08:29 PM

1 Attachment(s)
Quote:

Originally Posted by Nabru (Post 1387090)
If other virus scanners aren't picking it up and my loyal Spybot didn't catch it, it is likely a false detection then.

To determine if your scanners are lying, try a small little batch file included in this post. Its risk-free because all it does is use windows-created programs to search for signatures of Win32.Hupigon.


Read the on-screen directions carefully or you won't know what to do. :p

Nabru 04-21-2008 08:35 PM

According to your batch, It's definitely a false report from Avast, thanks Programmer.

Admins 04-21-2008 10:18 PM

Wondering if there is some way to report the false report to the Avast maker?

Crow 04-21-2008 10:21 PM

Quote:

Originally Posted by Stefan (Post 1387110)
Wondering if there is some way to report the false report to the Avast maker?

Might want to try their website, I guess..

Inverness 04-21-2008 10:31 PM

Quote:

Originally Posted by Eranian (Post 1387071)
I got this virus too and I formatted and downloaded Graal again and it was still there.
So I formatted again and now I'm too scared to download Graal.

Why did Graal put a virus in level editor?? :confused::confused::confused:

Formatted?

You place far too much trust in your virus scanner.

cbk1994 04-21-2008 10:58 PM

I feel like posting a 42 pt. font that says "GET MAC LOL" but I know the repercussions. Y'all should congratulate me for resisting the urge.

Anyway, try some other virus scanners, maybe HouseCall from TrendMicro which you don't have to download.

Programmer 04-22-2008 12:25 AM

Quote:

Originally Posted by cbkbud (Post 1387127)
Anyway, try some other virus scanners, maybe HouseCall from TrendMicro which you don't have to download.

Personally, I use Clamwin and AdAware SE for my machine, and they both do a very good job. I cannot have a firewall on my machine due to its usage, so the more virus protection I can get, the better.

Clamwin is what I personally suggest to computer-savvy people, mainly because it requires you to remove it yourself (lol!), so thats why I don't suggest it for people who don't know squat about computers.

AdAware SE is very good for detecting adware and various types of trojans.

If I were to suggest a few good anti-virus programs for regular computer users, I would suggest the following:
  • Norton 2007/2008
  • Avast
  • NOD32
  • McAfee

All 4 of these are very good, but in specific, Norton and McAfee don't get much credit because they are *very* naggy about your computer's security.

All anti-virus software gives false reports every now and then, and thats just something you have to put up with. Just exclude your program from future scans and your anti-virus software won't nag as much.

cbk1994 04-22-2008 03:34 AM

Quote:

Originally Posted by Programmer (Post 1387142)
Personally, I use Clamwin and AdAware SE for my machine, and they both do a very good job. I cannot have a firewall on my machine due to its usage, so the more virus protection I can get, the better.

Clamwin is what I personally suggest to computer-savvy people, mainly because it requires you to remove it yourself (lol!), so thats why I don't suggest it for people who don't know squat about computers.

AdAware SE is very good for detecting adware and various types of trojans.

If I were to suggest a few good anti-virus programs for regular computer users, I would suggest the following:
  • Norton 2007/2008
  • Avast
  • NOD32
  • McAfee

All 4 of these are very good, but in specific, Norton and McAfee don't get much credit because they are *very* naggy about your computer's security.

All anti-virus software gives false reports every now and then, and thats just something you have to put up with. Just exclude your program from future scans and your anti-virus software won't nag as much.

The first version of the Microsoft Spyware Removal Tool or whatever it's called ... when I ran it for the first time, I went to get lunch and when I got back half of my programs were deleted. Apparently Firefox was a trojan back then. Ditto with iTunes.

Funny thing is, it never asked me to remove or whatever, but next time I tried it, it did. Strange ...

Anyway, I recommend Ad-Aware, Spybot: S & D, and AVG Free Anti-Virus.

zokemon 04-22-2008 03:18 PM

Quote:

Originally Posted by Programmer (Post 1387142)
If I were to suggest a few good anti-virus programs for regular computer users, I would suggest the following:
  • Norton 2007/2008
  • Avast
  • NOD32
  • McAfee

In my past experience, Norton and McAfee have not caught jack-crap in comparison to the viruses I've caught with Avast.

I tried both of those for many years (keep in mind this was many many years ago) but eventually found my computer to be much more sluggish, my bandwidth was being used a a really high rate when my computer was idle, etc. As soon as I was turned on to Avast an installed it, there were about 25 different viruses on my machine that neither Norton or McAfee could detect. The funny part was that some of them were worms that has infected 95% of the .exe files on my computer that had to all be deleted. Why couldn't they detect anything, ehh? (Granted Norton and McAfee found stuff on occasion but I find Avast to be much stronger)

Admins 04-22-2008 04:04 PM

Hmmmmmm I recommend getting Linux (or mac) :D I've not spent any time on anti-virus stuff in the last few years. For Graal.exe we have made it so that it's signed and can be easily verified, may be we can also update the other tools to be signed, and preventing such kind of false detections (you can right-click on the program to see if the signature is correct or broken).

Inverness 04-22-2008 10:31 PM

I use NOD32 and love it.

cbk1994 04-22-2008 10:51 PM

Quote:

Originally Posted by Stefan (Post 1387198)
Hmmmmmm I recommend getting Linux (or mac)

Classic gold.

I don't mean to sound like a jackass, which I know I will, but I sometimes just can't believe people spending so much time and sometimes money dealing with viruses.

I'm not saying Mac is virus-free or invulnerable, there have been viruses (patched quickly though). Mac is generally more secure, however I do agree that once (or if) people start using Mac more, there will be more viruses.

Nabru 04-22-2008 11:11 PM

Quote:

Originally Posted by Stefan (Post 1387198)
may be we can also update the other tools to be signed.

While you're at it, make said tools support gs2 please?


I think this has been resolved, I'll look around Avast's site and see if I can find a place to report false reports.

Horrified 04-22-2008 11:13 PM

Seriously, not even to be mean.

Mac's users are the 99% of the people with the "iLife" style in which they have full respect for everything by Apple and feel too pampered to actually make viruses.

So I guess there is an upside to it...sort of.

cbk1994 04-22-2008 11:26 PM

Quote:

Originally Posted by Nabru (Post 1387273)
While you're at it, make said tools support gs2 please?


I think this has been resolved, I'll look around Avast's site and see if I can find a place to report false reports.

I hope we don't waste time making the tools GS2 -- just make in-game tools, and make them good.
Quote:

Originally Posted by Horrified (Post 1387274)
Seriously, not even to be mean.

Mac's users are the 99(percent) of the people with the "iLife" style in which they have full respect for everything by Apple and feel too pampered to actually make viruses.

So I guess there is an upside to it...sort of.

'iLife' is the name of a software suite. I don't exactly get what you're trying to say.

I certainly don't have respect for everything Apple makes. I think the iPod Touch is just a waste of money -- it doesn't provide much extra functionality. I think the MacBook Air is just bull****. These are just two off the top of my head.

However, I do love my MacBook Pro, but not just because of the Apple logo. I also love my iPhone, but not just because of the Apple logo. While some say that it doesn't have things other phones have, it's worth it to me to have an easy-to-use interface. I can't wait for the SDK to come out.

I'm also not a Windows (or Microsoft) hater. Would I have three Windows in my room and one running my server if I did? In general, a lot of OEMs sell cheap hardware that make people see Mac as "expensive". This isn't Microsoft's fault, and it is nice that Windows is more open than Mac (meaning of course you can install it on most computers; not that the OS is open). However, does bug me that people see a $400 Dell as good as a $1000 MacBook. But again, not Microsoft's fault.

My main problem with Windows/Microsoft is the OS. I admit I haven't tried Vista much, and I didn't see a ton of the things people complain about as giant problems, but it wasn't much different to me than XP, which is okay, I just prefer Mac.

^-- Big long post, for some reason. Don't read it if you don't want to.

Admins 04-23-2008 03:25 AM

Quote:

Originally Posted by Nabru (Post 1387273)
While you're at it, make said tools support gs2 please?

Not planned, just meant to sign the exes so that it can easily be proven that it's the original file.

kia345 04-23-2008 03:59 AM

I took the precaution, yet according to the Pokemon survey I took a few minutes ago, I'm very curious, which was proven when I read your post.


I assumed correctly. You always need to have your input when the word Mac is slung around.


All times are GMT +2. The time now is 06:19 AM.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2025, vBulletin Solutions Inc.
Copyright (C) 1998-2019 Toonslab All Rights Reserved.