+- Discovery Gaming Community (https://discoverygc.com/forums)
+-- Forum: The Community (https://discoverygc.com/forums/forumdisplay.php?fid=4)
+--- Forum: Freelancer Forum (https://discoverygc.com/forums/forumdisplay.php?fid=11)
+--- Thread: FL Companion & viruses (/showthread.php?tid=153778)
FL Companion & viruses - Templar2000 - 09-20-2017
I've recently heard about this utility to help determine profitable trade routes and decided to give it a try. When I downloaded it I got a ws.generator threat and it was immediately quarantined. I restored it believing this was just a heuristics glitch, but when I went to open the .exe I got a high risk warning and it said the file name was really "ihelp.exe" and that it contained the threat "Trojan.Gen.8!cloud" where it was auto blocked. Which begs the question, did I accidentally download a virus or is there something else going on?
RE: FL Companion & viruses - SnakThree - 09-20-2017
Where did you download the file from?
RE: FL Companion & viruses - Templar2000 - 09-20-2017
From this place. http://wiz0u.free.fr/prog/flc/
RE: FL Companion & viruses - Mephistoles - 09-20-2017
That is the legitimate download. It's possible your antivirus picked up a false positive because the file is uncommon. My AV often mistakenly identifies obscure little programs like that as threats not because it has found actual malicious code, but simply because it is not "rated" or "recognised" and then quarantines it.
RE: FL Companion & viruses - ronillon - 09-20-2017
DO NOT CLICK LINKS HERE, IF YOU DO NOT KNOW THE RISKS!
I guess you clicked on Download latest version (downloaded 76378 times) link on that page, that leads to: http://wiz0u.free.fr/prog/flc/latest.php then to: FLCompanion_2_02.exe
I scanned it using onlime AV engines: https://www.virustotal.com/#/file/38873dbc297d26bae7a2a0fb0f74d37e0068d8e46f1bec2e5ddb482037473c1b/detection
http://r.virscan.org/report/474a1977e0c3ccc8d8e2c2b823eb243e
Just to compare, the link on https://sourceforge.net/projects/flcompanion/ containing FLCompanion_3_00.exe shows these results:
https://www.virustotal.com/#/file/f6065ca78bea8cea8f629a5fda77980972097f871fcb27d06b9122f494d26b48/detection
http://r.virscan.org/report/cf46fc79d42886fc2d65aace8ab1e75a
Edit:
Since both versions claim to be able to read information from game, which is often done by using dirty tricks, it might be a reason why some AV marks it as something bad. Note that the name of the infection can be just a guess if it does not match some known code 100%.
RE: FL Companion & viruses - Hannibal - 09-20-2017
Probably a false positive because the program it access another memory process..
Anyways it's as safe as it can be and you've downloaded from the official site, but you need the 3.0 version for our mod
RE: FL Companion & viruses - Templar2000 - 09-20-2017
It seems the SourceForge version is newer so I'm going with that one. Besides I doubt SF allows viruses to be hosted on their site. Thanks.