Curse

Snograt · May 14, 2008, 06:21 AM // 06:21

It's tricky - the false-positive thrown up by TexMod seems to relate to those wtf files in Temp. This seems for whatever reason to be convincing AVG that it's the PWS-Lineage trojan (PWS stands for PassWord Stealer, if you're interested.)

You're using McAffee, and all AVs give viruses different names. Whether the 2006 Heuristic is Mcaffee's mis-diagnosis of TexMod, I can't tell - but a quick google of 2006 heuristic showed that the first page of results were all false positives, mainly from a file compression program.

In any case, if your crapaffee detected it, it would hopefully have healed it too, if in the unlikely event that is was a real trojan.

pumpkin pie · May 14, 2008, 06:22 AM // 06:22

Question about AVG free.

what is the difference of the free version and the pay version, as in can the free version detect the same type of virus the pay version can?

Snograt · May 14, 2008, 06:36 AM // 06:36

No anti-rootkit, and other minor things. Certainly no firewall - that's with the really expensive AVG Internet Security, as is anti-spyware.

Comparison page - http://free.grisoft.com/ww.download-...s-free-edition

The AV component is just the same.

Takeko Nakano · May 14, 2008, 06:40 AM // 06:40

Quote:

Originally Posted by Lykan

I only have the free Avg 7.5, can it be updated to 8.0?

Yes - there is a free version of 8.0.

Personally I like AVG. Sure it might come up with a false positive for some people once in a while, but quite rarely. For a free piece of software it's very good!

pumpkin pie · May 14, 2008, 06:41 AM // 06:41

Thanks

.

.

Rushin Roulette · May 14, 2008, 06:57 AM // 06:57

As the files detected are always in the temp folder it should be safe to quarantine/delete them anyways as those are not part of the running programm, shouldnt it?

ReiNaruto · May 14, 2008, 08:11 AM // 08:11

That the virus my av detected when downloaded texmod from official wiki. My antivirus is Trend Micro Pc Cillin, the last version.

Fril Estelin · May 14, 2008, 09:24 AM // 09:24

I'm not convinced yet there's a problem, as I've seen a few false positives on this lineage trojan, and his little brothers. And textmod is a reputable project, so it means the probability of a trojan getting into it is very low (but not zero). No problem at all with Symantec and Antivir.

Did you make sure you updated your software? (looks like a silly question, but sometimes the update fails and your AV does not have the latest virus signature files)

@pumpkin pie: no AV vendor would be silly to sell different levels of protection at different price, in terms of virus/trojan coverage. Sometimes they offer detection from minor (spyware, phishing) and major (rootkit) threats, for a fee. Most often the fee adds usability to the tool, providing convenient means to manage the AV. These software are under a lot of scrutinity from the security community, so be sure that something like that would not be seen lightly.

Arduin · May 14, 2008, 10:43 AM // 10:43

Hmmm. Five wtf#.tmp too in my Temp-directory. Let's just hope it stays there

.

Thanks for the warning Snograt.

Alexandra-Sweet · May 14, 2008, 10:51 AM // 10:51

1. AVG is junk, AVG is being paid by gaming companies to detect and remove keygenerators and other programs alike.

2. Keyloggers require a connection to a server, a proper firewall can pick this up, so if you see Textmod requiring an internet connection, there's something wrong.

Arduin · May 14, 2008, 11:09 AM // 11:09

Quote:

Originally Posted by Alexandra-Sweet

1. AVG is junk, AVG is being paid by gaming companies to detect and remove keygenerators and other programs alike.

What's bad about that? Most Trojans and other malware only spread because gamers are downloading all those keygens/no-cd/cracks and such.

Fril Estelin · May 14, 2008, 11:15 AM // 11:15

Quote:

Originally Posted by Arduinna

What's bad about that? Most Trojans and other malware only spread because gamers are downloading all those keygens/no-cd/cracks and such.

You're right. Warez, P2P programs are riddled with these, it's one of the prime vector of infection, with non-updated platforms.

AVG is OK, not the best in its category but doing the job.

Pleikki · May 14, 2008, 11:20 AM // 11:20

Ah nice know bout that Virus. Meh in my opinion AVG sucks so i stay with my 100e/month virus program :f

Sarevok Thordin · May 14, 2008, 11:45 AM // 11:45

AVG is fine for what it does at the right price (free :P)

fenix · May 14, 2008, 12:16 PM // 12:16

Better off with Avira if you want a free one (it's heaps better than AVG, faster, less RAM, almost no false positives) or NOD32 if you're paying. Anything less than those is a bad choice.

ProgTes · May 14, 2008, 12:18 PM // 12:18

Quote:

Originally Posted by Pleikki

Ah nice know bout that Virus. Meh in my opinion AVG sucks so i stay with my 100e/month virus program :f

You pay 100 ecto's a month for a virus scanner?

Anyway, scanning computer now. Has anyone had problems with texmod by the way (problems meaning that it contains a virus after downloading from a supposed safe location)?

distilledwill · May 14, 2008, 12:21 PM // 12:21

Hmm... ive been getting these too. I should probably change my password, thanks for the heads-up.

Balan Makki · May 14, 2008, 12:24 PM // 12:24

Most of all, be careful of all your other games with endless MoDs, such as WoW and other evercracked MMOs. These are where you'll pick up a butt load of crap.

Gwmaster · May 14, 2008, 12:25 PM // 12:25

umm interesting..i just did a scan and found nothing, only thing it showed me is the host file in system32..since i changed it lately so i could make servers and stuff.Also ive had textmod for some time now and never had a problem with it.

Shakti · May 14, 2008, 03:45 PM // 15:45

Hey Snog? Just wanted to say thank you for answering my question and not making me feel like a complete dipshit for not knowing about the false positive thing. That's kinda rare at Guru lol so ty

Hubby looked at it when he got home (He's an IT geek professionally lol) and said the same thing you did btw.