Trojan in Graaleditor.exe

[Nabru]

Avast has never lied to me before.

I have no idea how I contracted this, but stay alert.

[Admins]

I suggest to make a system-wide scan. It seems that virus/trojan is only a few days old and might have also infected other programs on your computer including graal. The graaleditor has been a modification time of "2005-02-09 20:32", has a size of 1034630 and is definitely not containing any virus or trojan when downloaded from the graal server.

[cbk1994]

So how much are they paying you Stefan?
--


Like Stefan said, do a system scan. Maybe try AVG if Avast can't find it.

[Xterminator]

AVG's what i used..I got a bunch of Trojan like 7 but now my computer's fine..But not from Graal :O

[Nabru]

Interesting enough the only thing Avast picked up was that, and Microsoft's malicious software detector didn't find anything after I deleted it.

I'm severely disappointed with SpyBot though, it never found it.

[cbk1994]

Of course Microsoft's malicious software tool didn't find it -- it is far worse than anything else.

Spybot is for spyware, not trojans.

I recommend having AVG (Avast is fine aswell), Ad-Aware, and Spybot: Search & Destroy.

[Nabru]

Originally Posted by cbkbud

Spybot is for spyware, not trojans.

I recommend having AVG (Avast is fine aswell), Ad-Aware, and Spybot: Search & Destroy.

If you've ever read the update descriptions on your spybot, they update trojan detections regularly.

Why? Because trojans/backdoors steal your information(SPYWARE)
Ie: Log your keys.

[cbk1994]

Originally Posted by Nabru

If you've ever read the update descriptions on your spybot, they update trojan detections regularly.

Why? Because trojans/backdoors steal your information(SPYWARE)
Ie: Log your keys.

Then you probably didn't have a true trojan -- just a guess though.

And, spyware is more defined than just stealing information.

[Inverness]

Originally Posted by cbkbud

Of course Microsoft's malicious software tool didn't find it -- it is far worse than anything else.

What a glaring display of ignorance.

Microsoft's tool is designed for checking for "specific prevalent malicious software—including Blaster, Sasser, and Mydoom"

Its not an Anti-Spyware solution like Ad-Aware and the other stuff, its just looks for the common stuff.

[cbk1994]

Originally Posted by Inverness

What a glaring display of ignorance.

Microsoft's tool is designed for checking for "specific prevalent malicious software—including Blaster, Sasser, and Mydoom"

Its not an Anti-Spyware solution like Ad-Aware and the other stuff, its just looks for the common stuff.

That's what I'm saying -- sorry if it didn't come across clearly.

I was trying to say that it doesn't have such a large selection of things that it will check for, so it probably won't find it.

Sorry again for the misunderstanding.

[TSAdmin]

I noticed the same problem, and doing a full scan of the system doesn't seem to show this Trojan anywhere else, so I tried uninstalling the Level Editor completely, scanned the Graal folder, again, (nothing detected) and redownloaded a FRESH copy of the Editor from the Login server - Did another scan, and the same Trojan alert came up, just for the editor :s

[Eranian]

I got this virus too and I formatted and downloaded Graal again and it was still there.
So I formatted again and now I'm too scared to download Graal.

Why did Graal put a virus in level editor??

[Crow]

Most likely false detection. I'm not getting this.

[Admins]

Well then the virus scanner is apparently bugged, like I've said that trojan is very new and the Graal editor already 3 years. False alerts sometimes happen because virus scanners are checking for millions of possible virus signatures, but normally such stuff is fixed quickly (with the next signature update).

[Crow]

I asked TSA what program he used to check, and EC checked aswell, they also both got the report. They both used Avast.

As far as I remember, Avast is known for quite a few false reports, so you shouldn't be worried.

[Nabru]

If other virus scanners aren't picking it up and my loyal Spybot didn't catch it, it is likely a false detection then.

[Programmer]

Originally Posted by Nabru

If other virus scanners aren't picking it up and my loyal Spybot didn't catch it, it is likely a false detection then.

To determine if your scanners are lying, try a small little batch file included in this post. Its risk-free because all it does is use windows-created programs to search for signatures of Win32.Hupigon.


Read the on-screen directions carefully or you won't know what to do.

[Nabru]

According to your batch, It's definitely a false report from Avast, thanks Programmer.

[Admins]

Wondering if there is some way to report the false report to the Avast maker?

[Crow]

Originally Posted by Stefan

Wondering if there is some way to report the false report to the Avast maker?

Might want to try their website, I guess..

[Inverness]

Originally Posted by Eranian

I got this virus too and I formatted and downloaded Graal again and it was still there.
So I formatted again and now I'm too scared to download Graal.

Why did Graal put a virus in level editor??

Formatted?

You place far too much trust in your virus scanner.

[cbk1994]

I feel like posting a 42 pt. font that says "GET MAC LOL" but I know the repercussions. Y'all should congratulate me for resisting the urge.

Anyway, try some other virus scanners, maybe HouseCall from TrendMicro which you don't have to download.

[Programmer]

Originally Posted by cbkbud

Anyway, try some other virus scanners, maybe HouseCall from TrendMicro which you don't have to download.

Personally, I use Clamwin and AdAware SE for my machine, and they both do a very good job. I cannot have a firewall on my machine due to its usage, so the more virus protection I can get, the better.

Clamwin is what I personally suggest to computer-savvy people, mainly because it requires you to remove it yourself (lol!), so thats why I don't suggest it for people who don't know squat about computers.

AdAware SE is very good for detecting adware and various types of trojans.

If I were to suggest a few good anti-virus programs for regular computer users, I would suggest the following:

• Norton 2007/2008
• Avast
• NOD32
• McAfee

All 4 of these are very good, but in specific, Norton and McAfee don't get much credit because they are *very* naggy about your computer's security.

All anti-virus software gives false reports every now and then, and thats just something you have to put up with. Just exclude your program from future scans and your anti-virus software won't nag as much.

[cbk1994]

Originally Posted by Programmer

Personally, I use Clamwin and AdAware SE for my machine, and they both do a very good job. I cannot have a firewall on my machine due to its usage, so the more virus protection I can get, the better.

Clamwin is what I personally suggest to computer-savvy people, mainly because it requires you to remove it yourself (lol!), so thats why I don't suggest it for people who don't know squat about computers.

AdAware SE is very good for detecting adware and various types of trojans.

If I were to suggest a few good anti-virus programs for regular computer users, I would suggest the following:

• Norton 2007/2008
• Avast
• NOD32
• McAfee

All 4 of these are very good, but in specific, Norton and McAfee don't get much credit because they are *very* naggy about your computer's security.

All anti-virus software gives false reports every now and then, and thats just something you have to put up with. Just exclude your program from future scans and your anti-virus software won't nag as much.

The first version of the Microsoft Spyware Removal Tool or whatever it's called ... when I ran it for the first time, I went to get lunch and when I got back half of my programs were deleted. Apparently Firefox was a trojan back then. Ditto with iTunes.

Funny thing is, it never asked me to remove or whatever, but next time I tried it, it did. Strange ...

Anyway, I recommend Ad-Aware, Spybot: S & D, and AVG Free Anti-Virus.

[zokemon]

Originally Posted by Programmer

If I were to suggest a few good anti-virus programs for regular computer users, I would suggest the following:

• Norton 2007/2008
• Avast
• NOD32
• McAfee

In my past experience, Norton and McAfee have not caught jack-crap in comparison to the viruses I've caught with Avast.

I tried both of those for many years (keep in mind this was many many years ago) but eventually found my computer to be much more sluggish, my bandwidth was being used a a really high rate when my computer was idle, etc. As soon as I was turned on to Avast an installed it, there were about 25 different viruses on my machine that neither Norton or McAfee could detect. The funny part was that some of them were worms that has infected 95% of the .exe files on my computer that had to all be deleted. Why couldn't they detect anything, ehh? (Granted Norton and McAfee found stuff on occasion but I find Avast to be much stronger)

[Admins]

Hmmmmmm I recommend getting Linux (or mac) I've not spent any time on anti-virus stuff in the last few years. For Graal.exe we have made it so that it's signed and can be easily verified, may be we can also update the other tools to be signed, and preventing such kind of false detections (you can right-click on the program to see if the signature is correct or broken).

[Inverness]

I use NOD32 and love it.

[cbk1994]

Originally Posted by Stefan

Hmmmmmm I recommend getting Linux (or mac)

Classic gold.

I don't mean to sound like a jackass, which I know I will, but I sometimes just can't believe people spending so much time and sometimes money dealing with viruses.

I'm not saying Mac is virus-free or invulnerable, there have been viruses (patched quickly though). Mac is generally more secure, however I do agree that once (or if) people start using Mac more, there will be more viruses.

[Nabru]

Originally Posted by Stefan

may be we can also update the other tools to be signed.

While you're at it, make said tools support gs2 please?


I think this has been resolved, I'll look around Avast's site and see if I can find a place to report false reports.

[Horrified]

Seriously, not even to be mean.

Mac's users are the 99% of the people with the "iLife" style in which they have full respect for everything by Apple and feel too pampered to actually make viruses.

So I guess there is an upside to it...sort of.

[cbk1994]

Originally Posted by Nabru

While you're at it, make said tools support gs2 please?


I think this has been resolved, I'll look around Avast's site and see if I can find a place to report false reports.

I hope we don't waste time making the tools GS2 -- just make in-game tools, and make them good.

Originally Posted by Horrified

Seriously, not even to be mean.

Mac's users are the 99(percent) of the people with the "iLife" style in which they have full respect for everything by Apple and feel too pampered to actually make viruses.

So I guess there is an upside to it...sort of.

'iLife' is the name of a software suite. I don't exactly get what you're trying to say.

I certainly don't have respect for everything Apple makes. I think the iPod Touch is just a waste of money -- it doesn't provide much extra functionality. I think the MacBook Air is just bull****. These are just two off the top of my head.

However, I do love my MacBook Pro, but not just because of the Apple logo. I also love my iPhone, but not just because of the Apple logo. While some say that it doesn't have things other phones have, it's worth it to me to have an easy-to-use interface. I can't wait for the SDK to come out.

I'm also not a Windows (or Microsoft) hater. Would I have three Windows in my room and one running my server if I did? In general, a lot of OEMs sell cheap hardware that make people see Mac as "expensive". This isn't Microsoft's fault, and it is nice that Windows is more open than Mac (meaning of course you can install it on most computers; not that the OS is open). However, does bug me that people see a $400 Dell as good as a $1000 MacBook. But again, not Microsoft's fault.

My main problem with Windows/Microsoft is the OS. I admit I haven't tried Vista much, and I didn't see a ton of the things people complain about as giant problems, but it wasn't much different to me than XP, which is okay, I just prefer Mac.

^-- Big long post, for some reason. Don't read it if you don't want to.

[Admins]

Originally Posted by Nabru

While you're at it, make said tools support gs2 please?

Not planned, just meant to sign the exes so that it can easily be proven that it's the original file.

[kia345]

I took the precaution, yet according to the Pokemon survey I took a few minutes ago, I'm very curious, which was proven when I read your post.


I assumed correctly. You always need to have your input when the word Mac is slung around.