Found trojon virus in FS file!!!!

[cavity]

I discovered a trojon virus in a file that I downloaded a while back.  It was in the Xtreme lightning package that  came out a few months ago.  My antivirus just picked it up for the first time.  It inserts in the default lightning package.  Has anyone else come across this?  Todd

[Hagar]

Are you sure it was in the zipfile? Many of these trojans attach themselves to files already on your computer, specifically certain types of file like EXE files. The reason they're called trojans is that they can lie dormant for some time after you pick them up & activate themselves on a specific date, sometimes months later.

[cavity]

It says it was in the Xtreme Real Life Lightning installer exe, so Im not sure.  I have never had a virus so I dont know that much about them.  I moved it to the vault, but it says that the fiel has embedded into the default lightning setup, and cannot be healed.  What now?  Todd

[Hagar]

I suggest you report this in the Site Feedback forum or send Pete a PM so he can check it out for you. It's possible but all files posted here are carefully checked for known viruses with more than one anti-virus application before being posted for download.

[cavity]

I just posted to the the feedback site.  I just hope no one else has this problem.  Any advice on the best way to handle it now, should I do anything special to prrevent it from damaging things?  Todd

[Hagar]

Sorry but I'm no great authority on viruses. Providing you have recognised anti-virus software installed & update it regularly that should be able to handle it. If you can find out the name of the trojan do a search for it on one of the anti-virus software sites, like McAfee or Symantec, or even Google. They might have software that you can download to deal with it.

[cavity]

It is called Dopper.generic.WF.  Look it up at MS but they didnt have anything about it.  Ill try AVG next and see what they say.  Thanks, Todd

[GA_Pilot]

I am running AVG, and mine picked up a virus in the XTreme lighting file a few months ago, but it also picked up viruses in some of my Dreamfleet EXE's and also the Christen Eagle by LIC. So I am not forsure what was going on, but just figured it was a problem on AVG's part  ???

[expat]

It is called Dopper.generic.WF.  Look it up at MS but they didnt have anything about it.  Ill try AVG next and see what they say.  Thanks, Todd

Hi Cavity

I run McAfee online virus software and it picked nothing up. I even ran the name and variations of the name through their virus library and it also came up blank. Could be an anomaly with your anti virus software.

Matt

[Tom_M]

Could be a false positive on AVG's part. Try Avast!

[MattNW]

That's what it sounds like, false positive. Since others aren't picking it up. You may want to redownload the file to make sure. You shouldn't be in any danger as long as you don't run the file until you get it checked out. A virus like this can't run it'self.

Advanced AV products use heuristic scanning to look for unknown or modified viruses so they are prone to false positives at times. They look for .exe files that are capable of certain things like modifying the registry or attaching to other files so if the .exe cand do these things then you may get a warning out of your AV program when it scans them.

I'd suggest also contacting the author of the package. They might have had this reported before and know what is happening with this file.

[cavity]

Thanks for all of the info.  I have it vaulted and have not noticed any changes in the performance of my computer as of yet.  I was just hoping that if it truly was a virus, I could give others a heads up to avoid any problems.  Todd