I have a report of a virus (Maltule) in:
http://dianneandpaul.net/CSBwin/Games/D ... 151213.zip
I cannot duplicate this observation.
I scanned the zip file, its contents, and my entire computer.
Could some kind soul see if they can detect a virus in this file?
Reported virus in CSBwin
Moderator: Zyx
Forum rules
Please read the Forum rules and policies before posting.
Please read the Forum rules and policies before posting.
- Paul Stevens
- CSBwin Guru
- Posts: 4318
- Joined: Sun Apr 08, 2001 6:00 pm
- Location: Madison, Wisconsin, USA
- Paul Stevens
- CSBwin Guru
- Posts: 4318
- Joined: Sun Apr 08, 2001 6:00 pm
- Location: Madison, Wisconsin, USA
Re: Reported virus in CSBwin
Thanks, zyx. I am using AVG. Anyone else using a third anti-virus program?
- Gambit37
- Should eat more pies
- Posts: 13718
- Joined: Wed May 31, 2000 1:57 pm
- Location: Location, Location
- Contact:
Re: Reported virus in CSBwin
I can check with Eset NOD32 when I'm back from holiday next week.
- ChristopheF
- Encyclopedist
- Posts: 1540
- Joined: Sun Oct 24, 1999 2:36 pm
- Location: France
- Contact:
Re: Reported virus in CSBwin
I just scanned with Windows Defender on Windows 10, and indeed it detects "Trojan:Win32/Maltule.C!cl" in this archive.
The same is true for CSB_Windows_x86-32_20151213.zip and Conflux_Windows_x86-32_20151214.zip
As the other antivirus do not detect anything, this is probably a false positive with the latest virus definitions. Still annoying, though...
The same is true for CSB_Windows_x86-32_20151213.zip and Conflux_Windows_x86-32_20151214.zip
As the other antivirus do not detect anything, this is probably a false positive with the latest virus definitions. Still annoying, though...
Christophe - Dungeon Master Encyclopaedia
- Paul Stevens
- CSBwin Guru
- Posts: 4318
- Joined: Sun Apr 08, 2001 6:00 pm
- Location: Madison, Wisconsin, USA
Re: Reported virus in CSBwin
Thanks much, Christophe.
Is it possible to determine if the reported virus is confined to
the .exe file? If so, I could re-compile with different
options (optimizations, perhaps?) that might make
Windows Defender happier. Perhaps I can find someone
else who can compile the program and see if they get
the same result. Or did the virus get added during
the process of creating the zip file.
Any idea how to determine if this is indeed a false
positive? I have no idea how these things work. Is there
anywhere to go to verify such things? To report them?
This is a pretty ugly situation, whether it be true or false.
Is it possible to determine if the reported virus is confined to
the .exe file? If so, I could re-compile with different
options (optimizations, perhaps?) that might make
Windows Defender happier. Perhaps I can find someone
else who can compile the program and see if they get
the same result. Or did the virus get added during
the process of creating the zip file.
Any idea how to determine if this is indeed a false
positive? I have no idea how these things work. Is there
anywhere to go to verify such things? To report them?
This is a pretty ugly situation, whether it be true or false.
- Paul Stevens
- CSBwin Guru
- Posts: 4318
- Joined: Sun Apr 08, 2001 6:00 pm
- Location: Madison, Wisconsin, USA
Re: Reported virus in CSBwin
I just asked 'VirusTotal' to check the .zip file.
It ran 56 different virus checkers and they all reported
the file to be clean. Windows Defender was not one of them.
Hmmmmm....
I reported this as a false positive to:
https://www.microsoft.com/en-us/securit ... ubmit.aspx
with a few comments.
It ran 56 different virus checkers and they all reported
the file to be clean. Windows Defender was not one of them.
Hmmmmm....
I reported this as a false positive to:
https://www.microsoft.com/en-us/securit ... ubmit.aspx
with a few comments.
- ChristopheF
- Encyclopedist
- Posts: 1540
- Joined: Sun Oct 24, 1999 2:36 pm
- Location: France
- Contact:
Re: Reported virus in CSBwin
Yes the "virus" is confined to csbwin.exe.
Christophe - Dungeon Master Encyclopaedia