View Full Version : Virus Detected?
atkforce
11-17-2007, 08:08 PM
Twice now (Within the past 3 days) my virus scanner has picked up on a "Virus" during gameplay. After doing a virus scan, it only finds it in one place, and that is the fiesta chatlog.txt file. Is this an actual virus that has implimented itself into the system, or is it the file just goin screwy. Also, even though it registers it as a trojan under the database, it doesnt seem to do anything at all. Is there a solution to this?
Picture of the scan
http://img208.imageshack.us/img208/1191/virusscanpicturebj9.png
(Also, I hope this is the right thread)
Xanthros
11-18-2007, 12:33 AM
I would say that your A/V is producing a false positive... I just ran my chatlog.txt file through a code analysis tool for suspected viruses, with the following results:
File chatlog.txt received on 11.18.2007 09:12:54 (CET)
Result: 0/32 (0%)
Antivirus Version Last Update Result
AhnLab-V3 2007.11.17.0 2007.11.16 -
AntiVir 7.6.0.34 2007.11.16 -
Authentium 4.93.8 2007.11.17 -
Avast 4.7.1074.0 2007.11.18 -
AVG 7.5.0.503 2007.11.17 -
BitDefender 7.2 2007.11.18 -
CAT-QuickHeal 9.00 2007.11.17 -
ClamAV 0.91.2 2007.11.18 -
DrWeb 4.44.0.09170 2007.11.17 -
eSafe 7.0.15.0 2007.11.14 -
eTrust-Vet 31.2.5304 2007.11.17 -
Ewido 4.0 2007.11.17 -
FileAdvisor 1 2007.11.18 -
Fortinet 3.11.0.0 2007.10.19 -
F-Prot 4.4.2.54 2007.11.16 -
F-Secure 6.70.13030.0 2007.11.17 -
Ikarus T3.1.1.12 2007.11.18 -
Kaspersky 7.0.0.125 2007.11.18 -
McAfee 5165 2007.11.16 -
Microsoft 1.3007 2007.11.18 -
NOD32v2 2665 2007.11.17 -
Norman 5.80.02 2007.11.16 -
Panda 9.0.0.4 2007.11.17 -
Prevx1 V2 2007.11.18 -
Rising 20.18.60.00 2007.11.18 -
Sophos 4.23.0 2007.11.18 -
Sunbelt 2.2.907.0 2007.11.17 -
Symantec 10 2007.11.18 -
TheHacker 6.2.9.133 2007.11.17 -
VBA32 3.12.2.5 2007.11.16 -
VirusBuster 4.3.26:9 2007.11.17 -
Webwasher-Gateway 6.0.1 2007.11.16 -
Additional information
File size: 195 bytes
MD5: 6ccb3b34f24e6ca63a6b5731a7754766
SHA1: f08f76c342e59c96a5699183a8cb506b4a5cd23b
It should be noted that this file, if opened in notepad or wordpad under normal usage, should appear as plaintext. It also appears to be a chat buffer log for the client to read/display from. If it's not plaintext like this:
[Starzer] : how many u need
[aznkid] : wait
[aznkid] : 15 more
[XHawkeyeX] : thanks
[Testament13] : dam
[Testament13] : omekey always stuck
[Testament13] : home*
and contains binary code.. your machine is infected, but is not the fault of Fiesta. The software I ran checks clean with every AV listed there, version and date of the update used.
Hope this helps,
X-