A problem with the update.exe file

Gwalch · **Joined:** Thu Feb 19, 2009 11:22 am **Posts:** 11

Hi Guys,

I'm not in the beta, but I figured I'd download and install the game, just to be prepared.

To my surprise during the installation of your game my Panda Antivirus came up with an alert that update.exe (that just has been installed) has been detected with a "Malicious Packer" gap and has been deleted. Now, Panda is not as intrusive and reckless as other defence bundles on the market, so I was really taken aback. So what gives?

On the one hand, I have no reason not to trust your company and all, but on the other I have never had any problems with Panda Antivirus and any other games (and I've played a lot of products coming from more or less indy sources). It also seems strange that nobody else had a similar problem - or have they?

So, I just wanted to let you know. Hope to get some feedback on my problem. Thank you.

jabudafar · **Joined:** Thu Feb 05, 2009 8:50 pm **Posts:** 11

I run Trend Micro and had no problems.

Questor · **Joined:** Wed Sep 12, 2007 10:06 pm **Posts:** 157

Gwalch wrote:

To my surprise during the installation of your game my Panda Antivirus came up with an alert that update.exe (that just has been installed) has been detected with a "Malicious Packer" gap and has been deleted.

Thank you so much for bringing this to our attention. We had this problem with Trend Micro also, which has been solved. It is a false positive, and we will contact Panda Security immiediately (would also appreciate it if you could do so also).

centrik · **Joined:** Tue Feb 17, 2009 6:52 pm **Posts:** 3

Gwalch wrote:

Hi Guys,

I'm not in the beta, but I figured I'd download and install the game, just to be prepared.

To my surprise during the installation of your game my Panda Antivirus came up with an alert that update.exe (that just has been installed) has been detected with a "Malicious Packer" gap and has been deleted. Now, Panda is not as intrusive and reckless as other defence bundles on the market, so I was really taken aback. So what gives?

On the one hand, I have no reason not to trust your company and all, but on the other I have never had any problems with Panda Antivirus and any other games (and I've played a lot of products coming from more or less indy sources). It also seems strange that nobody else had a similar problem - or have they?

So, I just wanted to let you know. Hope to get some feedback on my problem. Thank you.

Rest assured, this is fairly commonplace with games in beta, or even post-release.

Bmannion · **Joined:** Tue Feb 10, 2009 7:34 pm **Posts:** 111

My free-av.com antivir was fine with it. No problems.

Questor · **Joined:** Wed Sep 12, 2007 10:06 pm **Posts:** 157

Panda Security has been notified and they are correcting the problem. I will post again when the fix is posted in their definition file update.

Gwalch · **Joined:** Thu Feb 19, 2009 11:22 am **Posts:** 11

Thanks for your feedback.

Looking forward to playing the game.

Bobrowo · **Joined:** Fri Feb 20, 2009 3:50 pm **Posts:** 35

Prevx CSI 3.0 also reports Link realms file Update.exe as a medium threat malware.

Questor · **Joined:** Wed Sep 12, 2007 10:06 pm **Posts:** 157

Bobrowo wrote:

Prevx CSI 3.0 also reports Link realms file Update.exe as a medium threat malware.

Thank you. Contacting them also.

Kris · **Posted:** Mon Mar 09, 2009 4:27 pm

Virustotal is pretty handy for this.
Uploaded the update.exe file for a scan, and out of 39 antivirus programs, 5 detect it as a threat.

Here's the full analisis: http://www.virustotal.com/analisis/3d533a63b4989d53dc020139fa05027c

Gwalch · **Joined:** Thu Feb 19, 2009 11:22 am **Posts:** 11

Panda is unfortunately still on it...

Gand · **Joined:** Mon Feb 23, 2009 4:42 am **Posts:** 13

Kris those are false positives. The only thing im unsure is VBWorm.

Peace,
Gand

Questor · **Joined:** Wed Sep 12, 2007 10:06 pm **Posts:** 157

Kris wrote:

Virustotal is pretty handy for this.
Uploaded the update.exe file for a scan, and out of 39 antivirus programs, 5 detect it as a threat.

Here's the full analisis: http://www.virustotal.com/analisis/3d533a63b4989d53dc020139fa05027c

Wow, I wasn't aware of that site. Thanks! That will make my life easier.

Kris · **Posted:** Mon Mar 09, 2009 9:05 pm

Gand wrote:

Kris those are false positives. The only thing im unsure is VBWorm.

Peace,
Gand

Yes, I know.

It's easy to tell since none of the "major" antivirus detect anything.
I've often seen client updaters and installers having the same "false threat" issues.

Questor wrote:

Wow, I wasn't aware of that site. Thanks! That will make my life easier.

You're welcome. :mrgreen:

Questor · **Joined:** Wed Sep 12, 2007 10:06 pm **Posts:** 157

Bobrowo wrote:

Prevx CSI 3.0 also reports Link realms file Update.exe as a medium threat malware.

Prevx says the problem has now been corrected and published.

Linkrealms

A problem with the update.exe file

Who is online