|
06-08-2005, 07:51 PM
|
A Young Mystail Rat
|
|
Join Date: Apr 2005
Server: Antonia Bayle
Posts: 2
|
|
Virus on EQ2MAP Updater? [confirmed no virus]
Donīt want to spoil the fun, but i tried the download several times today and everytime my Scanner (AntiVir. Version 6.31.00.01) warned me about the Trojan Dldr.IstBar.it.1.
The same on the Sourceforge files.
The eq2Interface Main package is unaffected. Only the "EQ2MAP Updater" seems to be infected.
Real problem or is just my scanner telling some weird tales?
|
06-08-2005, 08:00 PM
|
|
EQ2MAP Updater Author
|
|
Join Date: Nov 2004
Server: Antonia Bayle
Posts: 1,349
|
|
I checked the install file and install directory with norton antivirus and spysweeper and niether found anything. i am the author of it though so feel free to wait for a response from someone else.
if you are still scared you could even just compile the program yourself using the source code (Assuming you know how)
also the installer was made using NSIS, which is an open source installation creator found at http://nsis.sourceforge.net/
what antivirus are you using?
Last edited by taco-man : 06-08-2005 at 08:04 PM.
|
06-08-2005, 08:05 PM
|
|
Bacon Eater
|
|
Join Date: Feb 2004
Posts: 2,452
|
|
Scans fine on this windows machine and on the server via clamscan
|
06-08-2005, 08:06 PM
|
|
A Griffon
|
|
Join Date: Jul 2004
Server: The Bazaar
Posts: 338
|
|
I checked it with NOD32, no problems found.
perhaps Fanryan, someone has gotten into your browser and is linking viruses through random downloads. ( do you use IE? )
|
06-08-2005, 08:10 PM
|
|
A Griffon
|
|
Join Date: Dec 2004
Server: Runnyeye
Posts: 1,404
|
|
Not having scanned it myself... But I would say its down to your scanner.. I have 100% trust in the guys that write stuff here inc .exe files... Unless the download has been hacked in some form, Its just gotta be down to the nature of the code it contains.. If you thik about it, It is a high security risk letting an .exe file connect to the net and download / replace files on your system... But then again MS does it all the time lmao!
As long as you got the file from here or the proper map site (sorry dont recall the url offhand =/) All will be fine.. there has been a couple of bugs peeps have reported in the new version but no virus!!
Personaly I would say this is one of very few sites where you can download with no worries... Its down to the nice nature of guys / girls that reside here and also damn good site management by Dolby, Kudane and others
__________________
Laffs UI Mods
I can only please one person per day. Today is not your day. Tomorrow doesn't look to good either !
(Wicann on Runnyeye)
|
06-08-2005, 08:54 PM
|
|
A Griffon
|
|
Join Date: Nov 2004
Server: Toxxulia
Posts: 584
|
|
McAfee Security Suite 8.0 scans it fine. No Problems.
If you have such a virus, maybe the virus is attaching it self to files (.exe) as you run them. The virus is probably in another executeable that you ran and now in your machine. A true trojan virus, as it is masking itself into recently dl'ed ran progies that you are using.
I suggest a FULL scan of your system, AND run HiJack, a program that is free to download and will tell you if anything suspicious is hiding (even beyond virus progs) on your machine.
dn
|
06-08-2005, 10:47 PM
|
A Young Mystail Rat
|
|
Join Date: Feb 2005
Server: Antonia Bayle
Posts: 3
|
|
My Computer and Notebook have found the Trojan Dldr.IstBar.it.1 in the Uninst.exe
|
06-08-2005, 10:53 PM
|
|
Bacon Eater
|
|
Join Date: Feb 2004
Posts: 2,452
|
|
Again no virus here using multiple flavors of scanners. I check every report to make sure.
AVG Free, Norton 2005, Trend Micro (3 different computers)
Its safe.
What Anti-Virus software you guys using?
Last edited by Dolby : 06-08-2005 at 11:02 PM.
|
06-08-2005, 11:39 PM
|
|
EQ2MAP Updater Author
|
|
Join Date: Nov 2004
Server: Antonia Bayle
Posts: 1,349
|
|
here is the full details of what the installer does. this is the file i have created to make the installer using NSIS
Code:
; HM NIS Edit Wizard helper defines
!define PRODUCT_NAME "EQ2MAP Updater"
!define PRODUCT_VERSION "1.0"
!define PRODUCT_PUBLISHER "Nathan Lockett"
!define PRODUCT_WEB_SITE "http://maps.eq2interface.com"
!define PRODUCT_DIR_REGKEY "Software\Microsoft\Windows\CurrentVersion\App Paths\EQ2MAP_Updater.exe"
!define PRODUCT_UNINST_KEY "Software\Microsoft\Windows\CurrentVersion\Uninstall\${PRODUCT_NAME}"
!define PRODUCT_UNINST_ROOT_KEY "HKLM"
; MUI 1.67 compatible ------
!include "MUI.nsh"
; MUI Settings
!define MUI_ABORTWARNING
!define MUI_ICON "${NSISDIR}\Contrib\Graphics\Icons\modern-install.ico"
!define MUI_UNICON "${NSISDIR}\Contrib\Graphics\Icons\modern-uninstall.ico"
; Welcome page
!insertmacro MUI_PAGE_WELCOME
; Directory page
!insertmacro MUI_PAGE_DIRECTORY
; Instfiles page
!insertmacro MUI_PAGE_INSTFILES
; Finish page
!define MUI_FINISHPAGE_RUN "$INSTDIR\EQ2MAP_Updater.exe"
!insertmacro MUI_PAGE_FINISH
; Uninstaller pages
!insertmacro MUI_UNPAGE_INSTFILES
; Language files
!insertmacro MUI_LANGUAGE "English"
; MUI end ------
Name "${PRODUCT_NAME} ${PRODUCT_VERSION}"
OutFile "EQ2MAP-Updater-1.0.0-Setup.exe"
InstallDir "$PROGRAMFILES\EQ2MAP Updater"
InstallDirRegKey HKLM "${PRODUCT_DIR_REGKEY}" ""
ShowInstDetails show
ShowUnInstDetails show
Section "MainSection" SEC01
SetOutPath "$INSTDIR"
SetOverwrite ifnewer
File "EQ2MAP_Updater.exe"
CreateDirectory "$SMPROGRAMS\EQ2MAP Updater"
CreateShortCut "$SMPROGRAMS\EQ2MAP Updater\EQ2MAP Updater.lnk" "$INSTDIR\EQ2MAP_Updater.exe"
CreateShortCut "$DESKTOP\EQ2MAP Updater.lnk" "$INSTDIR\EQ2MAP_Updater.exe"
CreateShortCut "$SMPROGRAMS\EQ2MAP Updater\EQ2MAP Updater Test Server.lnk" "$INSTDIR\EQ2MAP_Updater.exe /testserver"
File "stop_button.png"
File "update_button.png"
File "AxInterop.SHDocVw.dll"
File "Interop.SHDocVw.dll"
SectionEnd
Section -AdditionalIcons
WriteIniStr "$INSTDIR\${PRODUCT_NAME}.url" "InternetShortcut" "URL" "${PRODUCT_WEB_SITE}"
CreateShortCut "$SMPROGRAMS\EQ2MAP Updater\Website.lnk" "$INSTDIR\${PRODUCT_NAME}.url"
CreateShortCut "$SMPROGRAMS\EQ2MAP Updater\Uninstall.lnk" "$INSTDIR\uninst.exe"
SectionEnd
Section -Post
WriteUninstaller "$INSTDIR\uninst.exe"
WriteRegStr HKLM "${PRODUCT_DIR_REGKEY}" "" "$INSTDIR\EQ2MAP_Updater.exe"
WriteRegStr ${PRODUCT_UNINST_ROOT_KEY} "${PRODUCT_UNINST_KEY}" "DisplayName" "$(^Name)"
WriteRegStr ${PRODUCT_UNINST_ROOT_KEY} "${PRODUCT_UNINST_KEY}" "UninstallString" "$INSTDIR\uninst.exe"
WriteRegStr ${PRODUCT_UNINST_ROOT_KEY} "${PRODUCT_UNINST_KEY}" "DisplayIcon" "$INSTDIR\EQ2MAP_Updater.exe"
WriteRegStr ${PRODUCT_UNINST_ROOT_KEY} "${PRODUCT_UNINST_KEY}" "DisplayVersion" "${PRODUCT_VERSION}"
WriteRegStr ${PRODUCT_UNINST_ROOT_KEY} "${PRODUCT_UNINST_KEY}" "URLInfoAbout" "${PRODUCT_WEB_SITE}"
WriteRegStr ${PRODUCT_UNINST_ROOT_KEY} "${PRODUCT_UNINST_KEY}" "Publisher" "${PRODUCT_PUBLISHER}"
SectionEnd
Function un.onUninstSuccess
HideWindow
MessageBox MB_ICONINFORMATION|MB_OK "$(^Name) was successfully removed from your computer."
FunctionEnd
Function un.onInit
MessageBox MB_ICONQUESTION|MB_YESNO|MB_DEFBUTTON2 "Are you sure you want to completely remove $(^Name) and all of its components?" IDYES +2
Abort
FunctionEnd
Section Uninstall
Delete "$INSTDIR\${PRODUCT_NAME}.url"
Delete "$INSTDIR\uninst.exe"
Delete "$INSTDIR\Interop.SHDocVw.dll"
Delete "$INSTDIR\AxInterop.SHDocVw.dll"
Delete "$INSTDIR\update_button.png"
Delete "$INSTDIR\stop_button.png"
Delete "$INSTDIR\EQ2MAP_Updater.exe"
Delete "$SMPROGRAMS\EQ2MAP Updater\Uninstall.lnk"
Delete "$SMPROGRAMS\EQ2MAP Updater\Website.lnk"
Delete "$SMPROGRAMS\EQ2MAP Updater\EQ2MAP Updater Test Server.lnk"
Delete "$DESKTOP\EQ2MAP Updater.lnk"
Delete "$SMPROGRAMS\EQ2MAP Updater\EQ2MAP Updater.lnk"
RMDir "$SMPROGRAMS\EQ2MAP Updater"
RMDir "$INSTDIR"
DeleteRegKey ${PRODUCT_UNINST_ROOT_KEY} "${PRODUCT_UNINST_KEY}"
DeleteRegKey HKLM "${PRODUCT_DIR_REGKEY}"
SetAutoClose true
SectionEnd
|
06-08-2005, 10:36 PM
|
A Coastal Crab
|
|
Join Date: Mar 2005
Server: Antonia Bayle
Posts: 1
|
|
Got Virus Warning on Uninstaller
I got after an update of my virus scanner a warning, telling me, the uninstaller of EQ2 Map Auto Updater would contain the trojan "TR/Dldr.IstBar.it.1".
(The setup file showed the same infection after opening the folder.)
As I don't feel safe enough to use the updater right now, I'd ask if anyone else got warnings -with fresh anti virus signatures-, or if I should check my scanner.
Somehow hoping it's false alarm, but better safe than sorry.
You may close this thread, I found another one here
Last edited by Leon : 06-08-2005 at 10:39 PM.
|
08-04-2006, 07:20 AM
|
A Coastal Crab
|
|
Join Date: Aug 2006
Server: Lucan DLere
Posts: 1
|
|
Tried with 2 different computers. One running WinXP Pro SP2 and McAfee Enterprise 8.0, the other running WinXP Pro (no SP at all) with Avast 4.7; each one with all the virus database updates. Neither computer found a virus in the installer or the app.
Thank you for writing a great program
|
08-04-2006, 01:16 PM
|
|
A man among men
|
|
Join Date: Dec 2004
Server: Nagafen
Posts: 934
|
|
I use Avast 4.7 Anti-Virus Pro. on 1 computer and Kaspersky Anti-Virus 6 on the other, both computers have EQII on them, both run EQIIMap.
The only FALSE problem I have encountered with Avast, was whence installing BLP2 Viewer it says that it is a trojan, when it's not...it's false labeling a .exe, a virus. You must have that problem with yours
__________________
May Jesus Have Mercy On Us
|
10-07-2007, 07:54 PM
|
A Coastal Crab
|
|
Join Date: Oct 2007
Server: Antonia Bayle
Posts: 1
|
|
Just want 2 re assure u guys
|
11-28-2021, 12:27 PM
|
A Young Mystail Rat
|
|
Join Date: May 2005
Server: Antonia Bayle
Posts: 4
|
|
Virus
I use AVG Antivirus and it has put everything in quarantine.
|
11-28-2021, 11:35 PM
|
|
A Coastal Crab
|
|
Join Date: Aug 2021
Server: Barren Sky
Posts: 1
|
|
Avast antivirus flags the Updater 1.3.0 as malware and quarantines it. Malwarebytes flags it as well.
Here's the link to Virustotal with the scan:
https://www.virustotal.com/gui/file/...ddff?nocache=1
|
11-29-2021, 02:36 PM
|
|
Bacon Eater
|
|
Join Date: Feb 2004
Posts: 2,452
|
|
Avast, AVG and Microsoft Defender have all came back saying the file is clean and they will update their signatures. I have put version 1.3.0 back.
This is certainly a false positive and like I said those three have updated their definitions and no longer alert on eq2map
https://www.virustotal.com/gui/file/...ddff/detection
There are still a few more to contact but going to wait a little bit to see if the other AVs follow suit.
Last edited by Dolby : 11-29-2021 at 02:41 PM.
|
12-01-2021, 01:44 PM
|
A Brown Bear
|
|
Join Date: Feb 2006
Server: Antonia Bayle
Posts: 9
|
|
avast still sees the updater as a virus as of 130 est on december 1st. tried doing an exception but that didnt work. keep getting an error message that the file cant be found.
|
12-01-2021, 04:04 PM
|
A Brown Bear
|
|
Join Date: Feb 2006
Server: Antonia Bayle
Posts: 9
|
|
Quote:
Originally Posted by Dolby
Avast, AVG and Microsoft Defender have all came back saying the file is clean and they will update their signatures. I have put version 1.3.0 back.
This is certainly a false positive and like I said those three have updated their definitions and no longer alert on eq2map
https://www.virustotal.com/gui/file/...ddff/detection
There are still a few more to contact but going to wait a little bit to see if the other AVs follow suit.
|
avast still thinks the updater is a virus
|
12-01-2021, 05:13 PM
|
|
EQ2MAP Developer
|
|
Join Date: Jan 2006
Server: Splitpaw
Posts: 1,670
|
|
If you follow the link you see avast clears the file.
__________________
Pimigo / Splitpaw
|
12-01-2021, 05:27 PM
|
A Brown Bear
|
|
Join Date: Feb 2006
Server: Antonia Bayle
Posts: 9
|
|
Quote:
Originally Posted by jnils
If you follow the link you see avast clears the file.
|
it does not clear it. it is still in quarantine every time i try to download and install. i get a bunch of empty boxes when i try to load eq2 maps.
Last edited by mryankee : 12-01-2021 at 05:32 PM.
|
12-02-2021, 05:10 AM
|
|
EQ2MAP Developer
|
|
Join Date: Jan 2006
Server: Splitpaw
Posts: 1,670
|
|
If its up to date it should clear it.
Else i have no clue how to solve it, i don't use Avast.
__________________
Pimigo / Splitpaw
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 01:00 PM.
|
|