virus in runescape.exe

[jimv]

I just did a virus scan and there was a win32:trojan-gen in runescape[Caution: Executable File]. Wasn't there 2 weeks ago on my last thorough scan.

 

 

 

Everyone might want to at least scan the runescape[Caution: Executable File] file.

[Sy_Accursed]

Runescape doesn't have an exe file.

 

 

 

It has random java cached files, and a few cahced text documents to store settings.

 

 

 

But no exe

[jackjonson]

the downloadable client is runescape[Caution: Executable File]

[r4ngewarlord]

i think i had one in there but i figured it must be some moving virus that jumps from place to place.

 

ok i dont know computers

[PrevDharockslayer]

This may come from a virus called Virut. It infects all the exe files it can get. If you have killed the virus and click on an infected exe, the mayhem starts all over again.

 

 

 

Just make sure it doesn't wreck your computer like it did with mine.

[@Dan3HitU]

No such virus: http://www.virustotal.com/analisis/ad98cdb7207f7edc66c6baf8e86c46ecf3ad77869d3f3323aa3270ad9f203954-1246267995

 

 

 

http://www.uplo4d.com/viewe/343864393result.gif <-- image is below, this is the same image but a view-link.

 

 

 

[hide=image is big][/hide]

[warrierlord9]

This may come from a virus called Virut. It infects all the exe files it can get. If you have killed the virus and click on an infected exe, the mayhem starts all over again.

 

 

 

This seams like a feasible answer to me.

 

 

 

Here is a description of "virut"

 

 

 

"Virut" is a family of polymorphic memory-resident appending file infectors that have Entry Point Obscuring (EPO) capabilities.

 

 

 

Viruses belonging to this family infect files with EXE and .SCR extensions. All viruses belonging to the Virut family also contain an IRC-based backdoor that provides unauthorized access to infected computers.

[Kiriyama]

I think anti-viruses sometimes pick up some [Caution: Executable File]s as viruses.

 

 

 

Personally, I downloaded an AoE II patch (anyone who has played knows the most annoying bug) and I somehow obtained a trojan. Considering that was the only thing I downloaded at that time, and I only download from trusted sources, I had nothing else to blame.

 

 

 

My Dad reckoned that it was just AVG picking it up and there was no real problem.

 

 

 

What AV are you using?

[jimv]

I use Avast and use thorough scan option. Here is a link to the screenshot I took when it detected the virus:

 

 

 

http://img34.imagevenue.com/img.php?ima ... 378lo.jpeg

 

 

 

I did a scan 2 weeks ago and this did not show up. I have had that runescape[Caution: Executable File] file for over a year.

 

 

 

This was the only infected file that the scan turned up. Also I posted this in the Runescape forums and someone else has it too.

[Denismage]

Well, try redownloading it from runescape.com and if avast still picks it up as generic trojan, it's a false positive. Pretty much everything that silently starts downloading/dropping things on your computer is considered as a trojan to avast.

[Sbrideau]

In that case, it's probably a false trojan, like the poster above me posted. Avast has so many false positives that I recommend getting Avira.

[Jard_Y_Dooku]

Upload your copy of RuneScape[Caution: Executable File], the one that your antivirus says there's a Trojan in, and send me the link. I'll find out if anything's wrong with it.