It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
SiN GoldInstaller is flagged as Malware with Kaspersky Internet Security(18 posts)solved(18 posts)solved
(18 posts)solved
Pages:
1
2
This is my favourite topic
Posted January 31, 2014
Anyone else having this issue?

A particularly problematic "Packed.Win32.PePatch.dk" is detected in the installer and when I was able to install after turning Kaspersky off then relaunched Kaspersky it found it again in the game folder.

I've also tried running the game without Kaspersky and it does not launch so I wonder if it is getting messed with as it is downloading.

PC Specs:

Windows 7 x64 SP1
8GB of RAM
2GB Video Card
AMD 6 Core Processor

Many Thanks for reading
Attachments:
capture.png (88 Kb)
This question / problem has been solved by RawSteelUTimage
Posted January 31, 2014
I have the same problem as you described(also posted own around the same time as you).
No idea how to fix this, even when whitelisted the installer, it won't start.
Posted January 31, 2014
avatar
cube-head: I have the same problem as you described(also posted own around the same time as you).
No idea how to fix this, even when whitelisted the installer, it won't start.
Ah apologies I didn't see your post.

It is very unusual for Kaspersky to have any problems with any of the GOG installers. Lets hope someone can shed some light.
Posted February 01, 2014
I'm having a false positive on SIN.exe in ZoneAlarm as well. Not sure why, but the GOG guys might wanna communicate with the major antivirus companies, because right now, I can't install the game ATM.

EDIT: Ah, I think I can figure out the problem.

http://en.wikipedia.org/wiki/Sin_%28video_game%29

"The game demo was found to have a CIH virus infection in one of its mirror links. Activision has advised gamers only to download the game demo from their website.[1]"

My guess is that Sin.exe is simply being blacklisted as a matter of course because of this. It might require the GOG team to rename the starting EXE and change paths accordingly. Scanning the files on their end might not be a bad idea either.

http://www.zdnet.com/us-report-gamers-believe-activisions-sin-carries-cih-virus-3002068990/

That's an article from 1998, which explains the chaos CIH caused when it was in the SiN demo.
Post edited February 01, 2014 by RawSteelUT
Posted February 01, 2014
avatar
RawSteelUT: I'm having a false positive on SIN.exe in ZoneAlarm as well. Not sure why, but the GOG guys might wanna communicate with the major antivirus companies, because right now, I can't install the game ATM.

EDIT: Ah, I think I can figure out the problem.

http://en.wikipedia.org/wiki/Sin_%28video_game%29

"The game demo was found to have a CIH virus infection in one of its mirror links. Activision has advised gamers only to download the game demo from their website.[1]"

My guess is that Sin.exe is simply being blacklisted as a matter of course because of this. It might require the GOG team to rename the starting EXE and change paths accordingly. Scanning the files on their end might not be a bad idea either.

http://www.zdnet.com/us-report-gamers-believe-activisions-sin-carries-cih-virus-3002068990/

That's an article from 1998, which explains the chaos CIH caused when it was in the SiN demo.
Ah good find, that does sound plausible. Maybe if others chime in as well some of the GOG team can get on the case.
Posted February 01, 2014
avatar
RawSteelUT: I'm having a false positive on SIN.exe in ZoneAlarm as well. Not sure why, but the GOG guys might wanna communicate with the major antivirus companies, because right now, I can't install the game ATM.

EDIT: Ah, I think I can figure out the problem.

http://en.wikipedia.org/wiki/Sin_%28video_game%29

"The game demo was found to have a CIH virus infection in one of its mirror links. Activision has advised gamers only to download the game demo from their website.[1]"

My guess is that Sin.exe is simply being blacklisted as a matter of course because of this. It might require the GOG team to rename the starting EXE and change paths accordingly. Scanning the files on their end might not be a bad idea either.

http://www.zdnet.com/us-report-gamers-believe-activisions-sin-carries-cih-virus-3002068990/

That's an article from 1998, which explains the chaos CIH caused when it was in the SiN demo.
avatar
ch108: Ah good find, that does sound plausible. Maybe if others chime in as well some of the GOG team can get on the case.
Well, I sent a support inquiry their way. You might want to do so as well, just in case Kaspersky and ZoneAlarm are reacting in ways that require different solutions.
Posted February 01, 2014
avatar
RawSteelUT: Well, I sent a support inquiry their way. You might want to do so as well, just in case Kaspersky and ZoneAlarm are reacting in ways that require different solutions.
Don't forget you can also submit the false positive to your A/V provider.
Posted February 01, 2014
avatar
RawSteelUT: Well, I sent a support inquiry their way. You might want to do so as well, just in case Kaspersky and ZoneAlarm are reacting in ways that require different solutions.
avatar
Gydion: Don't forget you can also submit the false positive to your A/V provider.
Thanks for the tip.
Posted February 02, 2014
Same here. Already submitted the Problem to GOG Support, no solution yet.
But it seems Kaspersky is the Problem. I also cannot accsess the singold.exe data, dunno if Kaspersky is blocking that too.
Posted February 02, 2014
Well, I've sent the installer to Kaspersky, so hopefully that'll do the job. It'll be interesting to see what happens.
Posted February 03, 2014
avatar
RawSteelUT: Well, I've sent the installer to Kaspersky, so hopefully that'll do the job. It'll be interesting to see what happens.
Good man :)

Sent the fault I was having to Gog support, which they said it would be a false positive (as we thought it would be) and to turn off Kaspersky and internet when installing/playing the game.

So it will be up to Kaspersky/Zone Alarm to remove it from their hotlist so we can play this in peace.
Posted February 04, 2014
Well, Kaspersky checked it, and it's a false positive after all. Should be fixed in the next update.
Posted February 04, 2014
avatar
RawSteelUT: Well, Kaspersky checked it, and it's a false positive after all. Should be fixed in the next update.
Of course it is a false positive. GOG do extensive checks before they release any game for download.

It isn't the first time this has happened though, and the reason it happens is because old games, having not been originally for digital distribution, have to be cracked for them to run without any CD check and such, and those cracks get picked up as false positives as what they are doing is bypassing some part of the game code (the copy protection element) which is seen by some virus scanners as suspect behaviour, and hence flagged up.

Once the AVs have updated their definitions to ignore it, though, it shouldn't be an issue.
Posted February 04, 2014
avatar
RawSteelUT: Well, Kaspersky checked it, and it's a false positive after all. Should be fixed in the next update.
avatar
korell: Of course it is a false positive. GOG do extensive checks before they release any game for download.

It isn't the first time this has happened though, and the reason it happens is because old games, having not been originally for digital distribution, have to be cracked for them to run without any CD check and such, and those cracks get picked up as false positives as what they are doing is bypassing some part of the game code (the copy protection element) which is seen by some virus scanners as suspect behaviour, and hence flagged up.

Once the AVs have updated their definitions to ignore it, though, it shouldn't be an issue.
Heh, I guess so. As I mentioned earlier, the SIN demo was used as a delivery vector for the CIH virus by rogue sites, and it's probably safe to assume that similar things happened with cracks when the game came out.

Hopefully this won't be an issue tomorrow.
Posted February 04, 2014
avatar
korell: Of course it is a false positive. GOG do extensive checks before they release any game for download.

It isn't the first time this has happened though, and the reason it happens is because old games, having not been originally for digital distribution, have to be cracked for them to run without any CD check and such, and those cracks get picked up as false positives as what they are doing is bypassing some part of the game code (the copy protection element) which is seen by some virus scanners as suspect behaviour, and hence flagged up.

Once the AVs have updated their definitions to ignore it, though, it shouldn't be an issue.
avatar
RawSteelUT: Heh, I guess so. As I mentioned earlier, the SIN demo was used as a delivery vector for the CIH virus by rogue sites, and it's probably safe to assume that similar things happened with cracks when the game came out.

Hopefully this won't be an issue tomorrow.
Good, thanks for the submission to Kaspersky : ) (I didn't get round to it in the end)

Now on to getting the game to run in my desired resolution etc.
Pages:
1
2
This is my favourite topic
Community
SiN GoldInstaller is flagged as Malware with Kaspersky Internet Security(18 posts)solved(18 posts)solved
(18 posts)solved