Trojan

There are 13 replies in this Thread. The last Post () by Gearhead10.

  • Hi all, its been a long time.


    Ok, started the start up for Crossfire, it started to update files as it normally does when you want to play MP,


    AVG kicked up and detected a Trojan Virus from the server whilst it was updating the files.


    file is called Trojan Horse Agent3.BLJG, it attacks one of freelancers dlls (can't remember which)
    which prevents you activating the mod, and flags up as a serious Virus in AVG.


    This Trojan effects ALL mods be it Crossfire Disco, ect...


    I can't get rid of it, so its a total re-format for me. :(


    Just wanna know if anyone else has had this problem??


    Rgds Cygna

  • It's not a trojan horse. I had the very same issue with my AVG. Select "Ignore Thread" and then add the Freelancer folder on the exceptions list, once the mod is activated. Disabling your AV during the activation is a good move as well.


    Proud member of the Independent Operators' Consortium ever since day 1 in Crossfire. :herz:
    In-game characters: (IOC)Tyrael, (IOC)HimejiFortress


    “The supreme art of war is to subdue the enemy without fighting.” Sun Tzu

  • It's not a trojan horse. I had the very same issue with my AVG. Select "Ignore Thread" and then add the Freelancer folder on the exceptions list, once the mod is activated. Disabling your AV during the activation is a good move as well.


    Cheers bud,


    Wil try that soon, AVG forum says its a type of maleware virus, but i am not sure.


    Ok fresh install of freelancer, then Crossfire, fingers crossed eh!! lol


    Rgds


    Cygna

  • Welcome back LNAW, we really missed you! :)

  • And yes, welcome back mate :)


    Proud member of the Independent Operators' Consortium ever since day 1 in Crossfire. :herz:
    In-game characters: (IOC)Tyrael, (IOC)HimejiFortress


    “The supreme art of war is to subdue the enemy without fighting.” Sun Tzu

  • Had the same problem. Interesting thing though was that a regularly sweep didn't see it but after the PC had been on for a bit I got the same alert for the same thing. The file involved is the libcurl.dll and according to OP it is used for plug-ins. I called AVG and the short of it was dissatisfaction with them on this issue. First person wanted to sell me something before they even looked up my account. Anyway, once placed in the exception folder that is the end of the silliness. :D

    Gearhead10.png


    [size=10]Cooler Master HAF 912 Chassis; ASUS PRIME B660M - A WIFI D4; Intel Core i7-12700F,25MB Cache, LGA1700; Cooler Master Hyper 212 EVO; Corsair 16GB (4x4GB 2000 MHZ DDR3); 1NIVIDIA GeForce RTX 3060 Gaming OG 12G Ti, Corsair RM 1000 PSU, Micron 256GB SSD (Win 11), WD Caviar Black HDD (640GB - Win 11 64), Samsung SyncMaster BX2440 (Digital)


    The Personal World Clock



  • dont they have a report function to tell them that their av is detecting false positives?

    signew.jpg


    cfmoddblogo.png5904.png5904.png
    http://www.moddb.com/scripts/topsite.php?ts=4766


    Only dead fish swim with the stream.
    Don't discuss with idiots. They only drag you down to their level and then beat you with experience there.


    This is ten percent luck,
    Twenty percent skill,
    Fifteen percent concentrated power of will,
    Five percent pleasure,
    Fifty percent pain,
    And a hundred percent reason to remember the name!

  • You really believe someone reads those, lol?


    Proud member of the Independent Operators' Consortium ever since day 1 in Crossfire. :herz:
    In-game characters: (IOC)Tyrael, (IOC)HimejiFortress


    “The supreme art of war is to subdue the enemy without fighting.” Sun Tzu

  • yes... i do
    last time avira was detecting such a crap ive submitted the files to them to do a detailed scan
    after that they patched the av tool so the files were not giving false positives

    signew.jpg


    cfmoddblogo.png5904.png5904.png
    http://www.moddb.com/scripts/topsite.php?ts=4766


    Only dead fish swim with the stream.
    Don't discuss with idiots. They only drag you down to their level and then beat you with experience there.


    This is ten percent luck,
    Twenty percent skill,
    Fifteen percent concentrated power of will,
    Five percent pleasure,
    Fifty percent pain,
    And a hundred percent reason to remember the name!

  • Had the same problem. Interesting thing though was that a regularly sweep didn't see it but after the PC had been on for a bit I got the same alert for the same thing. The file involved is the libcurl.dll and according to OP it is used for plug-ins. I called AVG and the short of it was dissatisfaction with them on this issue. First person wanted to sell me something before they even looked up my account. Anyway, once placed in the exception folder that is the end of the silliness. :D

    libcurl.dll Yup thats the one m8, same here.


    Ok, gonna do a fresh install now of Crossfire and make an exception in AVG for it.
    As we know any dll that gets changed through the mod re-writing/updating it, sometimes AVG
    and other progs think its getting attacked and gives out false warnings ( as Op said :P )


    Just that it alarmed me so because i run a VERY tight ship on my computer, and i am careful
    what i download.


    Anyhow, looking forward (hopefully) seeing you guys online soon. ;)


    Rgds


    Cygna 8).

  • To answer your question OP, yes they do. I have sent two emails to them with the particulars since their tool they sent me while it would run, it indicated that "AVG doesn't seem to be installed on this computer. Install AVG and run again." I sent that to them as well. Haven't heard back form them.

    Gearhead10.png


    [size=10]Cooler Master HAF 912 Chassis; ASUS PRIME B660M - A WIFI D4; Intel Core i7-12700F,25MB Cache, LGA1700; Cooler Master Hyper 212 EVO; Corsair 16GB (4x4GB 2000 MHZ DDR3); 1NIVIDIA GeForce RTX 3060 Gaming OG 12G Ti, Corsair RM 1000 PSU, Micron 256GB SSD (Win 11), WD Caviar Black HDD (640GB - Win 11 64), Samsung SyncMaster BX2440 (Digital)


    The Personal World Clock