It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussionTrojan horse in GOG game file...?(70 posts)solved(70 posts)solved
(70 posts)solved
Pages:
1
2
3
4
5
This is my favourite topic
Posted March 29, 2014
Happy Saturday, everybody. :)

My AVG AntiVirus (free edition) popped up a window a few minutes ago saying that the latest scan pulled up two severe threats. I opened up the report to find that they were Trojans:

Threat: Trojan horse Generic35.CLSC
Object Name: C:\GOG Games\Disciples 2 Gold\Disciples 2 - Dark Prophecy and Gallean's Return\ConfigEditor.exe
Severity: High
State: Secured

^That's from the actual report of one of them, and the other lists a Trojan as being in the Disciples 2 - Rise of the Elves ConfigEditor.exe file.

I've had very few run-ins with viruses and the like in the past, so I have to admit I'm a bit ignorant to how they work and such. I have a few questions about this...first, does this mean the Trojan came from GOG? Second, will this affect my ability to play the game? I'm not really sure what AVG does to "secure" these files. And thirdly, should I be leery of other downloads from GOG, or let them know that this happened? I've never had this happen before, so I'm really at a loss as to what my next steps are, if any.

I did try finding answers to my questions by searching the forums, but I found few that mentioned Trojans at all, and those didn't really give me the info I needed. So I do apologize if this has been covered somewhere I haven't found.

Thanks for any help or guidance you guys can give me on this. :)
This question / problem has been solved by HypersomniacLiveimage
Posted March 29, 2014
I have AVG and I'm guessing it's a false positive.
Posted March 29, 2014
yeah false positive.
Posted March 29, 2014
False Positive, I trust GOG its one of the most reliable download sites there is.
Posted March 29, 2014
Before I opened this thread, I was expecting to see "Hi, I use AVG and...yada yada". :P
Posted March 29, 2014
Are these files you downloaded directly from GOG, or were they created during installation?
Post edited March 29, 2014 by Ivory&Gold
Posted March 29, 2014
If there is a option to put your gaming side of your computer in "exceptions" in your AV software, i suggest doing that. This way you will avoid this annoying false-positive messages. If gog started infecting it's user base with viruses that would be silly :)
Posted March 29, 2014
avatar
LovingLife139: Happy Saturday, everybody. :)

My AVG AntiVirus (free edition) popped up a window a few minutes ago saying that the latest scan pulled up two severe threats. I opened up the report to find that they were Trojans:

Threat: Trojan horse Generic35.CLSC
Object Name: C:\GOG Games\Disciples 2 Gold\Disciples 2 - Dark Prophecy and Gallean's Return\ConfigEditor.exe
Severity: High
State: Secured

^That's from the actual report of one of them, and the other lists a Trojan as being in the Disciples 2 - Rise of the Elves ConfigEditor.exe file.

I've had very few run-ins with viruses and the like in the past, so I have to admit I'm a bit ignorant to how they work and such. I have a few questions about this...first, does this mean the Trojan came from GOG? Second, will this affect my ability to play the game? I'm not really sure what AVG does to "secure" these files. And thirdly, should I be leery of other downloads from GOG, or let them know that this happened? I've never had this happen before, so I'm really at a loss as to what my next steps are, if any.

I did try finding answers to my questions by searching the forums, but I found few that mentioned Trojans at all, and those didn't really give me the info I needed. So I do apologize if this has been covered somewhere I haven't found.

Thanks for any help or guidance you guys can give me on this. :)
A happy Saturday to you too - no worries, it's still a happy Saturday inspite AVG saying otherwise

First off, GOG is trustworthy and it's highly unlikely that the files are actually infected, AVG only thinks that GOG's files have a Trojan - when an A/V reports a file as being infected while in reality it's not, it's called a false positive.

Depending on the size of the file (there's a limit), you can check it online on a site like VirusTotal to ease your mind.

Also, depending on how AVG handles files that are infected or it thinks are infected, it may very well affect your ability to play the game (I don't have Desciples 2 so I don't know if the specific file is necessary to be in the game folder in order to be able to play the game). There's where the "secured" pat comes into play. According to this page here, AVG puts them into the Virus Vault.
You should follow the instructions to restore the file.

Lastly, if there's an option to submit the file to AVG for further analysis, you should also do this so that they can update their database/ algorithms and stop detecting it as infected.

Good luck.
Posted March 29, 2014
We got to help out GOGs image here people. Virus scans hate the files, they have a foreign Cyprus bank account that most banks hate and will lock your card up and say its 'stolen'.


GOG is the best digital platform on the internet, represent! Tired of all this oppression against this noble site, even if I still hold ill will for the fake site closure a few years ago.....

but still, better than Steam and the rest. Only thing that comes even close is Humble Bundle and its an ugly setup.
Posted March 29, 2014
Although in theory any file on any computer could become infected with a virus, I would bet on this being a false positive.
GOG would not do very well if they began loading their installers with viruses, trojans or spyware as the community would pick up on it and go nuts. You got a report and posted! It is something I really like about this community, everyone puts in a little.


My suggestion would be to let GOG support know that this has happened, they should then take a look to double check themselves. As well as filing a report with AVG, even if you use the free version they should be informed so that they can check the file themselves and then teach their program not to panic when it sees this file or type by adding it to their whitelist.

Using AVG myself I know that it can be a little erratic at times - mine hated Flatout and Death to Spies - for quite a while, then stopped making such a fuss after a few months.

http://www.gog.com/support/contact -- contact support.
http://www.avg.com/submit-sample -- contact AVG. Takes them months to do anything, but I always try.
Posted March 29, 2014
avatar
011284mm: snip

As well as filing a report with AVG, even if you use the free version they should be informed so that they can check the file themselves and then teach their program not to panic when it sees this file or type by adding it to their whitelist.

Using AVG myself I know that it can be a little erratic at times - mine hated Flatout and Death to Spies - for quite a while, then stopped making such a fuss after a few months.

snip
http://www.avg.com/submit-sample -- contact AVG. Takes them months to do anything, but I always try.
That's an odd way to handle this. I'm using Avast and when it reports a file as infected, there's a button to submit the file in question to their lab for further analysis. Simpler and more convenient.
Posted March 29, 2014
GOG doesn't have infected files. If they did, they would be out of business by now. It's most likely a false positive.

AVs have a tendency to pick up game files as being malware when in fact they are not. Yesterday, for example, i had an issue when updating Everquest because Kaspersky (my AV) wouldn't let it download the files. Until a few months ago Kaspersky used to report Left 4 Dead 2 as being a Keylogger, when in fact it isn't.

Let me give you one piece of advice: stay away from AVG. It's one of the worst free AVs out there. Avira and Avast are also free and are MUCH better than AVG. I was an AVG user in the past, but after 2 incidents with viruses that managed to slip past AVG's detection (one of them was so nasty that required me to format the drive) i switched to Kaspersky and never had any issues with malware anymore (Kaspersky is a paid AV, though, and i don't recommend it for people who are not experienced with PCs).
Post edited March 29, 2014 by Neobr10
Posted March 29, 2014
low rated
avatar
Neobr10: GOG doesn't have infected files.
No, just infected people! :D
Posted March 29, 2014
avatar
Neobr10: Let me give you one piece of advice: stay away from AVG. It's one of the worst free AVs out there. Avira and Avast are also free and are MUCH better than AVG. I was an AVG user in the past, but after 2 incidents with viruses that managed to slip past AVG's detection (one of them was so nasty that required me to format the drive) i switched to Kaspersky and never had any issues with malware anymore.
Wow...thanks to everybody for responding to this. Wasn't expecting so many responses when I came back to check, so thanks. :)

Although I've used AVG for years, I'll look into the anti-virus programs you listed here. It seems like you all are pretty clear on the whole GOG and AVG not mixing thing. I wasn't aware of that, so I'll definitely be looking for something different. I don't want this to happen again.

Sorry if this issue seemed so immediately obvious to you all. Haha. I've never had this issue so it kind of caught me by surprise. So I'll get busy restoring the files and finding a new anti-virus, because when it comes to choosing between that and this site, GOG > AVG. Sorry AVG. :P

Thanks guys! :)
Posted March 29, 2014
avatar
LovingLife139: Wow...thanks to everybody for responding to this. Wasn't expecting so many responses when I came back to check, so thanks. :)

Although I've used AVG for years, I'll look into the anti-virus programs you listed here. It seems like you all are pretty clear on the whole GOG and AVG not mixing thing. I wasn't aware of that, so I'll definitely be looking for something different. I don't want this to happen again.

Sorry if this issue seemed so immediately obvious to you all. Haha. I've never had this issue so it kind of caught me by surprise. So I'll get busy restoring the files and finding a new anti-virus, because when it comes to choosing between that and this site, GOG > AVG. Sorry AVG. :P

Thanks guys! :)
Just to be absolutely clear - no A/V has a 0% false positives rate, it has to do with their detection function & analysis (mostly the heuristic part). It's important to submit false positives so that they improve these functions thus lower their related rate.

So, regardless of the A/V you choose, be prepared to stumble upon this issue from time to time. The important thing is to not panic and research & double check it with an online or on demand scanner.
Good supplements to your real-time A/V are Hitman Pro and Malwarebutes for on demand scans when in doubt.
Pages:
1
2
3
4
5
This is my favourite topic
Community
General discussionTrojan horse in GOG game file...?(70 posts)solved(70 posts)solved
(70 posts)solved