DaJ Trojan?

[buzzkill]

I ran a rotuine scan last night and Malwarebytes Anti-Malware detected a "Trojan Agent" in DaJAngband121/DaJAngband.exe. I've never had a problem with Malwarebytes and flase positives before so I'm a little nervous. Can anyone else scan DaJ with thier favorite scanner and confirm/deny this?

[Pete Mack]

I ran a rotuine scan last night and Malwarebytes Anti-Malware detected a "Trojan Agent" in DaJAngband121/DaJAngband.exe. I've never had a problem with Malwarebytes and flase positives before so I'm a little nervous. Can anyone else scan DaJ with thier favorite scanner and confirm/deny this?

I hadn't downloaded this one yet. Did it find the same one in DaJ 1.20?

[Matthias]

antivir didn't complain when I started it

[buzzkill]

I hadn't downloaded this one yet. Did it find the same one in DaJ 1.20?

Not that I'm aware of. It (malwarebytes) found 3 "trojan agent" items in the recycle bin on a previous "quick scan", but the path was long and I didn't bother to scroll to see actual the infected object, though the (recently deleted) DaJ120 may have been in the bin at the time. Prior to this incident, I've never had a false positive with any roguelike, and I run a pretty clean system in general.

EDIT: Upon reviewing the log, it was indeed DaJangband.exe (presumably 120) that caused the 3 previous hits.

[JohnCW9]

I ran a rotuine scan last night and Malwarebytes Anti-Malware detected a "Trojan Agent" in DaJAngband121/DaJAngband.exe. I've never had a problem with Malwarebytes and flase positives before so I'm a little nervous. Can anyone else scan DaJ with thier favorite scanner and confirm/deny this?

My Norton 360 has marked the site as unsafe for a awhile so I have never downloaded from it

[zaimoni]

My Norton 360 has marked the site as unsafe for a awhile so I have never downloaded from it

Said site has relocated to GoogleCode from Awardspace...which one are you referring to (or are we thinking about the even older one?)

[Arralen]

If in doubt, upload the file on http://www.virustotal.com/

If the result is inconclusive -but only then!!- upload it to http://analysis.avira.com/samples/index.php

[Matthias]

virustotal returns 0/41. Wow I've had exes of commercial programs with more false positivs than that Buzzkill's scanner isn't on the list of scanners used btw

[JohnCW9]

Said site has relocated to GoogleCode from Awardspace...which one are you referring to (or are we thinking about the even older one?)

It probally was Awardspace, I just checked the latest The google and there was no problem.

John

[will_asher]

My virus software gave me warnings about Awardspace, but never about a DaJAngband file. I don't know how the file would get infected with anything (even a false warning) just by being linked to on Awardspace.
Actually, I just noticed you're talking about DJA 1.2.1 which was released after I had moved to Google sites and quit using Awardspace. I just opened the virus software on this computer (McAfee) to check it out, but I can't see a way to tell it to scan one particular file. If anyone finds out why it's saying this, let me know. I don't know how the file could've gotten infected with anything.

[zaimoni]

My virus software gave me warnings about Awardspace, but never about a DaJAngband file. I don't know how the file would get infected with anything (even a false warning) just by being linked to on Awardspace.

Agreed.

The ad servers are a completely different problem; it's likely that Norton 360 is reacting to the risk of ads being converted to malware.

[buzzkill]

I choses to ignore the original hit, and since have been unable to reproduce it with any virus or malware scanner. Sorry about the scare.

[Pete Mack]

I just realized that for me anyway, it was definitely a false alarm. Viruses are a lot harder to pick up when you recompile from the source...