I decided to uninstall some GOG games so I could reinstall them with Galaxy features. While uninstalling DN3d Atomic, I got an alert from Kaspersky and thought it was a false positive. Unfortunately, Kasperky popped up again but this time, it found Trojan.Win32.Generic in one of the games files and was disenfecting it. While the file was being destroyed, I tried to look up the malware to check out how big the damage was, only to find that the trojan wiped out ALL paths to EVERY program.

Thankfully, the trojan was removed and the computer was restored, but I'm now worried that it could happen to other users. I really like GOG and how they check everything for problems but sadly, even one or two bad apples can end up in the grocery store.

If it will help, the virus was detected at the following if it will help you guys eliminate this problem:

c:\gog games\duke nukem 3d\unins000.exe

Some old DOS programs are recognized as this "generic trojan" / malware, because they basically function as a keylogger. They do capture every keyboard input and therefore some anti-virus programs assume that they are a keylogger or malware, because they share the same libraries that some "mean" keyloggers used back in the days.

So, this is a false positive, I'm 99% sure about that. Had the same problem with a lot of games back in the early 2000-era. ;)

That "all paths to every program were wiped" (what do you mean by this?) is more likely from the "removal" by Kaspersky. Basically, I assume while "fixing" the files it seems to have messed up something in the file system. Wouldn't be the first time an anti-virus software trashed lots of "good" files.

If you really want to make sure, upload the file in question to www.virustotal.com ;)


/edit
I know I shouldn't start this discussion but ... I work in IT, and Kaspersky and Norton are imho the WORST anti-virus tools you could use, really. I hate them "on a professional basis", so to say :o)

I think its a false positive, that or another program could have infected the uninstaller file. I certainly doubt that GOG's version of Duke Nukem 3D would be infected, because the title is just too grand to overlook a virus such as this.

Nothing says at the point it was found that the file was originally affected. That malware could've affected that particular file at any point along your use from any possible other source.

Only other people scanning and installing (and scanning the install DIR again) their copies will confirm this for a fact.