Print Page - DEAGLE's Century Name Mod Has A Trojan Virus

Title: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: Phobos on April 29, 2011, 06:38:58 PM

This file http://www.gamefront.com/files/16648375/Century_Name_zip

is just like the swbf nick changer made by battlebelk except german. I do not know what program was used to make century name or nick changer mod I am wondering.

But when you scan it with this http://virusscan.jotti.org

It comes up as Trojan.Win32.Buzus.etbf!A2
While battlebelk's nick changer scans clean.

That must mean then, that Deagle has uploaded a virus disguised as a nick changer. BE CAREFUL DO NOT DOWNLOAD THIS MALICIOUS FILE.

Title: Re: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: Led on April 30, 2011, 04:24:33 AM

Thanks, I will remove it from the downloads section and contact Deagle.

Title: Re: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: Phobos on April 30, 2011, 09:54:50 AM

[12:43] DEAGLE: you know why this is happening? because it's scripted with auto it and the memory read function, so the program is searching for a running process (battlefront.exe) and is overwriting a memory region, cause the nick is saved there. those functions are often used for viruses 'cause they're try to hack in running windows processes to make the pc crash or what ever. my anti vir is not detecting this and I bet avast! or so don't do it. anyway, ask someone who used this tool, no one has any problems with the pc or with anything after downloading this. it's clean, I can't say more.
ModTester: you might be right about it i am just saying what the scanners show
ModTester: and if battlebelk used the same thing why doesnt his show up that way
[12:45] DEAGLE: I've no idea, maybe he used another memory read function.

Title: Re: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: Jamman on April 30, 2011, 12:19:05 PM

Im not really sure about virus scanners or much about this, but I use it daily. The one that they have on their site, and my virus scanner is norton. the yellow circle. it works fine for me.

Title: Re: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: Bamdur on April 30, 2011, 12:49:42 PM

Ever heard of false positives?

Title: Re: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: Fire on April 30, 2011, 01:44:46 PM

I've used Century name and i had no problems from it

Title: Re: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: Syyy on April 30, 2011, 01:52:00 PM

Like Fire, i didnt have problems with it, but i'll delete it and download Battlebelk's file, so ;)

Title: Re: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: Ruffy on April 30, 2011, 02:04:13 PM

it's not a Trojaner!
I play with this file everytime if i play swbf1!

so shut up and play!

Title: Re: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: DEAGLE on April 30, 2011, 02:13:10 PM

@ModTester, I tested the file myself on your site, and Emsisoft dedected the trojan horse. But after pressing the "Scan Again" button, it shows that the file is clean.

http://picupload.org/i/f30ab280da80.jpg

Now in the time I wrote this I uploaded the file again and scanned, and after the first scan there were no results.
But as Bamdur said:

Quote from: Bamdur on April 30, 2011, 12:49:42 PM
Ever heard of false positives?

right, nothing more to say.

Title: Re: DEAGLE's Century Name Mod Has A Trojan Virus
Post by: Led on April 30, 2011, 04:31:58 PM

OK, this topic is closed.

SWBFGamers

Gaming for the Original SWBF1 and SWBF2/other games => Star Wars Battlefront (2004 Original) => Topic started by: Phobos on April 29, 2011, 06:38:58 PM