It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussionavira detecting lots of trojans among gog files(47 posts) (47 posts) 
(47 posts) 
Pages:
1
2
3
4
This is my favourite topic
Posted November 19, 2019
avatar
nightcraw1er.488: So, just installed Pathfinder - I have only 2.0m - scanned unis000.exe, no problems. Its possible that later patches may have changed that of course, I haven't time to download the latest 30gb version. Or it could be galaxy.

As mentioned, if there are any specific games, I can check the version I have. I don't use galaxy, hence have not gwent.
avatar
BlueInMotion: Has there been a recent update of Galaxy or Pathfinder Kingmaker? (with recent I mean yesterday or today) Because I got the game on my oc for at least two weeks now and this is the first time the unins000.exe was adressed by Avira as containing a trojan.
Latest I can see from changelog is 18September. Can't help with Galaxy.
Posted November 19, 2019
avatar
BlueInMotion: Has there been a recent update of Galaxy or Pathfinder Kingmaker? (with recent I mean yesterday or today) Because I got the game on my oc for at least two weeks now and this is the first time the unins000.exe was adressed by Avira as containing a trojan.
avatar
nightcraw1er.488: Latest I can see from changelog is 18September. Can't help with Galaxy.
Well, I could get rid of Avira, but once I lost three weeks of work due to a virus, and I had a very expensive Antivirus program (i'm not gonna name it) running. Avira detected the virus in 2 minutes, so since then I'm rather alarmed when Avira tells me that there is something going on on my PC that isn't supposed to be going on.

Cheers
blueinmotion

P.S. I didn't have Galaxy running when the message popped up.
Post edited November 19, 2019 by BlueInMotion
Posted November 19, 2019
avatar
nightcraw1er.488: Latest I can see from changelog is 18September. Can't help with Galaxy.
avatar
BlueInMotion: Well, I could get rid of Avira, but once I lost three weeks of work due to a virus, and I had a very expensive Antivirus program (i'm not gonna name it) running. Avira detected the virus in 2 minutes, so since then I'm rather alarmed when Avira tells me that there is something going on on my PC that isn't supposed to be going on.

Cheers
blueinmotion

P.S. I didn't have Galaxy running when the message popped up.
I would never suggest you run without AV. Always better to be far more cautious than regretful I find. Yes, can't help with galaxy, don't use it, but it is different, downloads things, updates games etc. Ther may have been a new patch which us non-galaxy people haven't got yet.
Lets see if the OP can suggest some other games this happens on.
Its most likely a false positive, but you can always check by uploading the file to virustotal to be sure. I have had a fair few false positives with Avira, its byu no means the best out there.
Posted November 19, 2019
avatar
ConsulCaesar: Avast is another known offender.
I can't confirm that. I've never had a false positive on GOG with Avast. YMMV.
Posted November 19, 2019
avatar
BlueInMotion: Has there been a recent update of Galaxy or Pathfinder Kingmaker? (with recent I mean yesterday or today) Because I got the game on my oc for at least two weeks now and this is the first time the unins000.exe was adressed by Avira as containing a trojan.
More likely that Avira added or changed a definition is those update daily.
Posted November 19, 2019
Free antivirus is good because it's reliable, you get exactly what you pay for.
Posted November 19, 2019
low rated
What inspecting of files does GoG do?


Most of the time it probably is a false result but that doesn't mean they're always wrong or that anti virus or malware programs catch harmful files. Here is one example.
ESEA, a multiplayer eSports network, was found to contain malware in its anti-cheat client. Customers were complaining that their GPU usage was unconventionally high, making ESEA confirmed that the client was mining Bitcoin on users' GPUs. ESEA co-founder Erik Thunberg initially responded to user's complaints with "Lol that got aggressive quickly." ( # )
https://www.imperica.com/en/invasion-of-the-invasion-the-most-absurd-and-invasive-tech-screw-ups-and-contraventions-of-recent-years
Posted November 19, 2019
Am i the only one in here who isn't using the Galaxy client and has Windows Defender ?
Posted November 19, 2019
I submitted Suspected False Positive file to Avira.
Probably fixed in a few days.
Post edited November 20, 2019 by TOOTT
Posted November 20, 2019
Conspiracy theory:
GOG inserted the (harmless) suspect code deliberately to get AV programs to delete the GOG uninstallers, making it impossible for the poorly skilled users to remove the games from their system. "Muhahahhaaa! There is no escaping our influence! You're stuck with us FOREVER!"
Posted November 20, 2019
low rated
avatar
Leszek38: The pattern of 'TR/AD.Swrort.gedwq [trojan]' detected in file 'GalaxyClient\Games\Gwent\unins000.exe. Action performed: Move file to quarantine

I am just getting lots and lots of such a warnings. All of them concern unins000.exe files of various gog games. What to do?
As the others have said it is likely a false positive.....try running the files through another scanner(online or offline) and re-verify.

Also if you play many older games that use dosbox/etc you might get more false positives as sometimes gog used virus free cracked exes/etc to get games to run, and many AV see such exes as viruses/malware.
Posted November 20, 2019
avatar
Braggadar: Conspiracy theory:
GOG inserted the (harmless) suspect code deliberately to get AV programs to delete the GOG uninstallers, making it impossible for the poorly skilled users to remove the games from their system. "Muhahahhaaa! There is no escaping our influence! You're stuck with us FOREVER!"
That they did. But only for Jack Keane.
Posted November 20, 2019
low rated
avatar
nightcraw1er.488: What game specifically? I have Avira and not had this with any of my games. I don’t use galaxy, that could be one possibility, but if you mention a game or two I can try if I own it.
The game is listed in their reply(folder names)...it's Gwent.

==================

avatar
Randalator: The correct thing to do is to get rid of Avira or any other third party snake oil.
Not all AV are snake oil....some are quite decent with their free versions.

avatar
BlueInMotion: Well, I could get rid of Avira, but once I lost three weeks of work due to a virus, and I had a very expensive Antivirus program (i'm not gonna name it) running. Avira detected the virus in 2 minutes, so since then I'm rather alarmed when Avira tells me that there is something going on on my PC that isn't supposed to be going on.
No need to say, but i'm gonna guess Norton or McAffee.

As for AV, one should never stick to an AV forever if they keep doing stupid things in their new builds like using too much resources/marking too many false positives/etc.

===================

avatar
i_hope_you_rot: Am i the only one in here who isn't using the Galaxy client and has Windows Defender ?
Nope

Although I also use MWB.
Post edited November 20, 2019 by GameRager
Posted November 20, 2019
avatar
GameRager: Not all AV are snake oil....
Brain 1.0 is really the best protection there is.
Posted November 20, 2019
low rated
avatar
toxicTom: Brain 1.0 is really the best protection there is.
Maybe, but for some AV is an easier solution.
Pages:
1
2
3
4
This is my favourite topic
Community
General discussionavira detecting lots of trojans among gog files(47 posts) (47 posts) 
(47 posts)