Trojan in Graaleditor.exe

[Nabru]

Avast has never lied to me before.

I have no idea how I contracted this, but stay alert.

[Admins]

I suggest to make a system-wide scan. It seems that virus/trojan is only a few days old and might have also infected other programs on your computer including graal. The graaleditor has been a modification time of "2005-02-09 20:32", has a size of 1034630 and is definitely not containing any virus or trojan when downloaded from the graal server.

[cbk1994]

So how much are they paying you Stefan?
--


Like Stefan said, do a system scan. Maybe try AVG if Avast can't find it.

[Xterminator]

AVG's what i used..I got a bunch of Trojan like 7 but now my computer's fine..But not from Graal :O

[Nabru]

Interesting enough the only thing Avast picked up was that, and Microsoft's malicious software detector didn't find anything after I deleted it.

I'm severely disappointed with SpyBot though, it never found it.

[cbk1994]

Of course Microsoft's malicious software tool didn't find it -- it is far worse than anything else.

Spybot is for spyware, not trojans.

I recommend having AVG (Avast is fine aswell), Ad-Aware, and Spybot: Search & Destroy.

[Nabru]

Originally Posted by cbkbud

Spybot is for spyware, not trojans.

I recommend having AVG (Avast is fine aswell), Ad-Aware, and Spybot: Search & Destroy.

If you've ever read the update descriptions on your spybot, they update trojan detections regularly.

Why? Because trojans/backdoors steal your information(SPYWARE)
Ie: Log your keys.

[cbk1994]

Originally Posted by Nabru

If you've ever read the update descriptions on your spybot, they update trojan detections regularly.

Why? Because trojans/backdoors steal your information(SPYWARE)
Ie: Log your keys.

Then you probably didn't have a true trojan -- just a guess though.

And, spyware is more defined than just stealing information.

[Inverness]

Originally Posted by cbkbud

Of course Microsoft's malicious software tool didn't find it -- it is far worse than anything else.

What a glaring display of ignorance.

Microsoft's tool is designed for checking for "specific prevalent malicious software—including Blaster, Sasser, and Mydoom"

Its not an Anti-Spyware solution like Ad-Aware and the other stuff, its just looks for the common stuff.

[cbk1994]

Originally Posted by Inverness

What a glaring display of ignorance.

Microsoft's tool is designed for checking for "specific prevalent malicious software—including Blaster, Sasser, and Mydoom"

Its not an Anti-Spyware solution like Ad-Aware and the other stuff, its just looks for the common stuff.

That's what I'm saying -- sorry if it didn't come across clearly.

I was trying to say that it doesn't have such a large selection of things that it will check for, so it probably won't find it.

Sorry again for the misunderstanding.

[TSAdmin]

I noticed the same problem, and doing a full scan of the system doesn't seem to show this Trojan anywhere else, so I tried uninstalling the Level Editor completely, scanned the Graal folder, again, (nothing detected) and redownloaded a FRESH copy of the Editor from the Login server - Did another scan, and the same Trojan alert came up, just for the editor :s

[Eranian]

I got this virus too and I formatted and downloaded Graal again and it was still there.
So I formatted again and now I'm too scared to download Graal.

Why did Graal put a virus in level editor??

[Crow]

Most likely false detection. I'm not getting this.

[Admins]

Well then the virus scanner is apparently bugged, like I've said that trojan is very new and the Graal editor already 3 years. False alerts sometimes happen because virus scanners are checking for millions of possible virus signatures, but normally such stuff is fixed quickly (with the next signature update).

[Crow]

I asked TSA what program he used to check, and EC checked aswell, they also both got the report. They both used Avast.

As far as I remember, Avast is known for quite a few false reports, so you shouldn't be worried.