HyperKat Support and Tester Forum

Mars Challenger V1.0 => MCO Early Discussions => Topic started by: Tyber1231 on April 26, 2011, 04:22:46 PM

Title: An virus inside game?
Post by: Tyber1231 on April 26, 2011, 04:22:46 PM
Hello
My friend have some problem with the Simulator. When he launches it, it says that it has a virus " PWS-SpyEye!env.a".
Could someone tell me if it happened to anyone lese, or is it normal?
Title: Re: An virus inside game?
Post by: Hyper on April 26, 2011, 05:09:12 PM
When you say simulator which version do you mean? I am very careful about virus being in my code please elaborate.
Title: Re: An virus inside game?
Post by: Tyber1231 on April 26, 2011, 05:33:41 PM
I think it's Alpha 2.37, but it miht be a false alarm , as i didn't got any viruses
Title: Re: An virus inside game?
Post by: profit004 on April 26, 2011, 05:34:49 PM
I have never had my anti-virus catch any of these programs.

Use this website and see which anti virus software packages catch it.   It is almost certainly a false positive with only one or two virus scanning programs likely to go off...  

http://www.virustotal.com/

Title: Re: An virus inside game?
Post by: Tyber1231 on April 26, 2011, 05:39:00 PM
You're right, in my case there was no virus alarm. But my friend asked me to ask on the forum.
Title: Re: An virus inside game?
Post by: Tyber1231 on April 26, 2011, 05:41:34 PM
Ok, i'm going to tell my friend. You can close this thread.
Title: Re: An virus inside game?
Post by: profit004 on April 26, 2011, 05:42:04 PM
MarsColonyDemoII.exe on the website does indeed show up as a trojan on my virus scanner and a spyware program when it is ran...   I cannot say this has never happened but it is very rare.  I think further investigation is warranted.

I am going to run it sandboxed and see what system hooks it is making.
Title: Re: An virus inside game?
Post by: profit004 on April 26, 2011, 05:51:14 PM
Ok, I think it is entirely a false positive for the installer.

The installer makes no odd changes to any files, some very minor registry edits, and only adds the uninstalll information to the windows directory.  Everything appears as it should, the installer is just being detected as a virus.

Once it is installed the program itself runs without problem and is not detected as a virus.