It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
Temple of Elemental EvilNorton claim that toee.exe is a trojan(57 posts) (57 posts) 
(57 posts) 
Pages:
1
2
3
4
This is my favourite topic
Posted October 14, 2010
Same problem here with macafree it would quarantine file even if active scan is turned off. Even playing the game within 1 min i et booted and file is re quarantined getting annoying .
Posted October 14, 2010
avatar
inktomi: I use mIcrosoft security essentials and removed it also as identified as BUMA!RTS trojan virus. I am going through with installation and see whats up.

Have anyone had a problem with getting the game to run>:?
MSE should tell you about the file and give you the option to let it through. Did for me. After this, there are no problems.
Post edited October 14, 2010 by chautemoc
Posted October 14, 2010
If all these anti-virus programs are saying that it has a virus...maybe they're RIGHT? It's certainly possible (and not unheard of) that gog's site was infected and the exe actually DOES contain a virus.
Posted October 14, 2010
The reason these false positives are happening is that the EXE is a NoCD crack that originated from the warez scene. These guys are highly protective of their cracking skills, so they run code obfuscaters on the executables. This makes them extremely difficult to decompile and reverse-engineer. It just so happens that Trojan writers typically do the same thing with their EXEs, and this is why virus programs will flag them as "Generic Trojans." Really, it's just a program it can't effectively scan so it errors on the side of caution.
Post edited October 14, 2010 by Vesper
Posted October 14, 2010
I can't get this to work :mad:

I have the CD Version and just bought this for digital convenience, so this is slightly annoying. Will GOG fix this or will we have to find our own work around?
Posted October 14, 2010
For what it's worth:

For MSE antivirus users, update your definitions and scan it again. For me, it's no longer showing up as a trojan. I did submit the file to the MSE site last night, provided some information, and explained that I believed it to be a false positive. Perhaps others did the same. They eventually e-mailed me back saying that they determined it was not malware. I then updated my definition files, scanned toee.exe again, and sure enough, it scanned clean this time around. I have to say, the MSE crew is quick.
Post edited October 14, 2010 by Nomad_Soul
Posted October 14, 2010
avatar
raven555: I have McAfee and it deletes the file the moment the game is installed.
I tried disabling Real-Time Scanning, and I could launch the game, however for some reason the game crashed about 30 seconds into the intro movie. When I tried to launch it again, the file was gone (My guess is McAfee deleted the file again, although I don't know how since Real-Time Scanning was off, and this caused the crash).

I haven't found any way to add an exception to McAfee, at least not with my edition of the program. So we need a fix, and fast.
avatar
voltan: I have exactly the same problem with McAfee.
Me too. This is getting ridiculous, I just want to play for fuck sake. I tried googling this problem (with McAfee specifically) and all I found was that you have to zip the "infected" file and send it to them. Then anywhere from 1-5 days later they send you a .dat file that gets McAfee to stop quarantining your stuff.

This is uber aggravating, and something needs to be done about it.
Posted October 14, 2010
avatar
voltan: I have exactly the same problem with McAfee.
avatar
GorgorothX: Me too. This is getting ridiculous, I just want to play for fuck sake. I tried googling this problem (with McAfee specifically) and all I found was that you have to zip the "infected" file and send it to them. Then anywhere from 1-5 days later they send you a .dat file that gets McAfee to stop quarantining your stuff.

This is uber aggravating, and something needs to be done about it.
Agreed, exact same situation as you with McAfee and have done this before with the game RISEN (Its .exe had the same problem with McAfee)...and they never sent a DAT.
Posted October 14, 2010
I have sent two files to McAfee in the past. With the first file, they updated their .DAT files on the same day. In second case (Original War exe from GOG) it took them much longer time (but it works now).
Unfortunately, in both cases, I did not receive any message from McAfee about correction of DAT files. So, I guess, we have to wait (and check after each new antivirus definitions update).

I am really considering changing to Norton or some other antivirus software, at least you can exclude directories there (in McAfee it is impossible - a major drawback).
Posted October 14, 2010
I've used Norton (and also Symantec) in the past, and I've also used McAfee. I found both to be problematic, annoying, and ultimately ineffective. I would strongly recommend upgrading to a better AV program. Considering the number of people on GOG.com, it should be easy to get feedback regarding AV software.

In fact, I think I'll go and start that topic, right now.


-Khalaq
Posted October 14, 2010
Avast has no problems with this file.
Lavasoft's Ad-Aware does, but an exception is easy to set up.

Given that malware is pretty much a field guaranteed that various companies share data on across the board, if one false positive doesn't get recognized as a false-positive, those definition files will be shared and implemented across the spectrum of scanners.

Getting a false-positive removed is much, much harder.

I've ran 3 or 4 scanners and Trend's HouseCall online scanner on my system, before and after installing and running, and the only infection is the game executable...pretty sure that's a safe file, and not really a virus.
Posted October 14, 2010
Don't worry, guys, there's no trojan there. :) Pretty much all anti-virus software nowadays uses heuristic (a.k.a. "smart", "intelligent" etc.) scanners, which sometimes detect code that resembles that of a virus, but actually isn't one. This is called a "false positive" and is most definitely the case with ToEE's executable. Please ignore any warning messages and, preferably, whitelist the file or disable your anti-virus software before launching the game.

Now, if you can't find the executable after installing the game, then your anti-virus software most likely deleted or quarantined that file. In that case, reinstall the game, but this time make sure your anti-virus software is disabled during the installation so that this doesn't happen again. Disabling real-time scanning while you play the game may be needed as well.

We apologize for the trouble and we'll see what we can do about making those scanners stop panicking... ;)

Update: We have released a new version of the installer, which includes a modified executable. This should minimize the number of anti-virus scanners that throw false positive warnings to a few less popular ones. Depending on the user feedback, we may make some further modifications to the executable.
Post edited October 15, 2010 by Firek
Pages:
1
2
3
4
This is my favourite topic
Community
Temple of Elemental EvilNorton claim that toee.exe is a trojan(57 posts) (57 posts) 
(57 posts)