Discovery Gaming Community

Full Version: FL Companion & viruses
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
I've recently heard about this utility to help determine profitable trade routes and decided to give it a try. When I downloaded it I got a ws.generator threat and it was immediately quarantined. I restored it believing this was just a heuristics glitch, but when I went to open the .exe I got a high risk warning and it said the file name was really "ihelp.exe" and that it contained the threat "Trojan.Gen.8!cloud" where it was auto blocked. Which begs the question, did I accidentally download a virus or is there something else going on?
Where did you download the file from?
That is the legitimate download. It's possible your antivirus picked up a false positive because the file is uncommon. My AV often mistakenly identifies obscure little programs like that as threats not because it has found actual malicious code, but simply because it is not "rated" or "recognised" and then quarantines it.
DO NOT CLICK LINKS HERE, IF YOU DO NOT KNOW THE RISKS!
I guess you clicked on Download latest version (downloaded 76378 times) link on that page, that leads to: http://wiz0u.free.fr/prog/flc/latest.php then to: FLCompanion_2_02.exe

I scanned it using onlime AV engines: https://www.virustotal.com/#/file/38873d.../detection
http://r.virscan.org/report/474a1977e0c3...b823eb243e


Just to compare, the link on https://sourceforge.net/projects/flcompanion/ containing FLCompanion_3_00.exe shows these results:
https://www.virustotal.com/#/file/f6065c.../detection
http://r.virscan.org/report/cf46fc79d428...ce8ab1e75a

Edit:
Since both versions claim to be able to read information from game, which is often done by using dirty tricks, it might be a reason why some AV marks it as something bad. Note that the name of the infection can be just a guess if it does not match some known code 100%.
Probably a false positive because the program it access another memory process..
Anyways it's as safe as it can be and you've downloaded from the official site, but you need the 3.0 version for our mod
It seems the SourceForge version is newer so I'm going with that one. Besides I doubt SF allows viruses to be hosted on their site. Thanks.