Username:    Password:       Signup |  Forgot Password?
Forums
Swat 3 Reunited :: Forums :: Swat 3 :: Mods
 
<< Previous thread | Next thread >>
Last Resort Mod Virus?
Go to page       >>  
Moderators: Copy-Cat, Slippery_Jim, Beckett, Junkyard_Dawg
Author Post
Cookie
Mon Jun 25 2012, 08:01pm
Registered Member #883
Joined: Sun Jun 24 2012, 08:12pm

Posts: 1
After installing the Last Resort Mod, Kaspersky reported that the installer place a malicious object named "jpeg.dll" in my AppData directory.

Is this a false positive? Even if it is, why would it place an object there with a sketchy name.
Back to top
Lord_Beckett
Tue Jun 26 2012, 04:40am
Guest
Maybe when last resort installed kaspersky was inclined to check the folder and found a virus from somewhere else. I've had Last Resort 0.6 installed on this computer for nearly a year and I've never gotten any virus warnings from it.

[ Edited Tue Jun 26 2012, 04:43am ]
Back to top
Copy-Cat
Tue Jun 26 2012, 04:43am

Registered Member #1
Joined: Wed Nov 10 2010, 06:11am

Posts: 220
Where did you get your LastResort installer from?

Back to top
P0V3RTY
Tue Jun 26 2012, 04:57am
Registered Member #5
Joined: Thu Nov 11 2010, 04:11am

Posts: 49
Cookie, where did you get your Last Resort mod? The original hosting website for Last Resort is currently down. If you downloaded it from there, there is a slim chance that the hosting website had been compromised. Please delete all downloads from that site if you feel that you do not trust them. You can download a clean version of Last Resort from this website. Before installing, scan it your AV scanner, also try using www.virustotal.com as a second opinion.
I have never had any issues with our download nor has any guest other then yourself bring this issue to our attention.
If you had downloaded Last Resort from our website, please post a screen shot of Kaspersky's findings.
Keep in mind that since Kaspersky's AV scanner works really well, sometimes too well and identifies many as a false positive especially game files. I use COMODO and a full version of Malwarebytes and haven't have Last Resort identified as malicious. Keep us informed. Thanks.
Back to top
Copy-Cat
Wed Jul 11 2012, 08:06am

Registered Member #1
Joined: Wed Nov 10 2010, 06:11am

Posts: 220
There has been another occurance of this false postive detection.

This file was uploaded to the FTP server on: February 13, 2010 7:22pm

I feel it is necessary to document the steps we are taking to assure you, members of DnC and members of Swat3Reunited community that the file is safe to download and use.

We have submitted a False Positive report to Kaspersky and also to Norton Antivirus. We will post their findings here.

WE STAND BEHIND OUR MODDERS AND MAPPERS.
If you ask me I think this is BS, given the date it was uploaded and the many members that use Last Resort (including myself); members that add up to an array of Antivirus programs, virus definitions updates, and countless antivirus updates and full system scans. If you want to download the file let me know, I have no problem giving you the direct link, I sent to Kaspersky and Norton.
Back to top
Copy-Cat
Wed Jul 11 2012, 08:21am

Registered Member #1
Joined: Wed Nov 10 2010, 06:11am

Posts: 220
Norton has recieved the False Positive submission.

We would like to inform you that your submission has been received successfully by Symantec Security Response and a tracking number has been created for it.

The incident number for your submission is: 2850893

Back to top
Slippery_Jim
Thu Jul 12 2012, 06:51am

Registered Member #30
Joined: Wed Nov 24 2010, 06:40pm

Posts: 159
I have made mods for the Swat 3 community for years and have always been extremely careful to ensure that they are malware/virus free (and that my machines at home are clean).

Nothing should be installed in the app folder. Everything that is installed is placed in the Swat 3 folder (other than shortcuts to the mod).

The installer software that we use is called Installer Vice. I don't think it would install anything temporarily to aid in the install process.

I suspect they are false positives because scanning the install file on my HD shows it to be clean with Avast and with Spybot S&D.


Where did you download the file?



[ Edited Thu Jul 12 2012, 07:06am ]
Back to top
Copy-Cat
Thu Jul 12 2012, 11:43pm

Registered Member #1
Joined: Wed Nov 10 2010, 06:11am

Posts: 220
No response from Norton yet. I am guessing either they are too busy taken care of real threats and/or it's a false positive.

Look people it's simple.
1. Update you antivirus Software, virus definitions and such and do a full system scan.
2. Download install Malwarebytes and update it and do a full system scan.
3. Install Last Resort. And if you get an alert let us know.

If you don't want to install it, don't. Remember 90% of members here use Last Resort "ON" so you will not be able to join the reunions and games hosted within.
Back to top
P0V3RTY
Fri Jul 13 2012, 07:10am
Registered Member #5
Joined: Thu Nov 11 2010, 04:11am

Posts: 49
OMG Slippery Jim......you need better anti malware protection LMAO Great to hear from again ! Don't be a stranger.

And FYI, Comodo Internet Security Premium, Malwarebytes, and Hitman Pro has yet to flag any files of SWAT3 : Last Resort as malicious.

[ Edited Fri Jul 13 2012, 07:13am ]
Back to top
Slippery_Jim
Fri Jul 13 2012, 08:13am

Registered Member #30
Joined: Wed Nov 24 2010, 06:40pm

Posts: 159
I use other packages too but I worked 12 hours yesterday and was too tired to scan with more than a few.

The file that is linked to from the mod's website seems clean.

Strange that they drop a bomb like that and then run.
Back to top
Go to page       >>   

Jump:     Back to top

Syndicate this thread: rss 0.92 Syndicate this thread: rss 2.0 Syndicate this thread: RDF
Powered by e107 Forum System
Swat 3 and Swat 4 are registered trademarks © 2001 Activision Publishing, Inc.
All other trademarks are property of their respective owners.