Page 1 of 1

AntiVirus alert

Posted: April 9th, 2014, 1:32 am
by robert
Hi guys! It's been a long since my last entry. How are you all?

Ok, the thing is, I've downloaded Roomshaker again, and just when I descompressed the .rar my Antivirus detected the POPLM.exe as a Troyan Downloader.Agent2.BLGT

So, I don't know what to do o_o

Maybe it's just a false alert, but is this normal? should I proceed with the antivirus or ignore it?

Bye!

Re: AntiVirus alert

Posted: April 13th, 2014, 7:41 pm
by Norbert
robert wrote:Ok, the thing is, I've downloaded Roomshaker again, and just when I descompressed the .rar my Antivirus detected the POPLM.exe as a Troyan Downloader.Agent2.BLGT
Do you get the same message with the ZIP file here?

Re: AntiVirus alert

Posted: April 14th, 2014, 2:39 am
by robert
Well it also happens if I open roomshaker in the .ZIP file.

Re: AntiVirus alert

Posted: April 14th, 2014, 12:20 pm
by Norbert
Other virus programs also appear to think a trojan is present in POPLM.EXE:
https://www.virustotal.com/en/file/94e2 ... 397470144/

I don't know if it's just some stuff resembling a trojan - a false alert - or not.
I do know that David ran into something similar with the PoP1 Total Pack.
If virus programs (don't know how to) fix files, what are we supposed to do...

Re: AntiVirus alert

Posted: April 14th, 2014, 8:13 pm
by robert
I have AVG. But I'm planning to install another antivirus as AVG is expired. It didn't happen this with Avast.

Maybe it's just a false alert, sometimes happens with emulators and that stuff.

Re: AntiVirus alert

Posted: April 24th, 2014, 4:56 am
by ZBEP
Looks like it's not a fake alert, I actually got a similiar trojan in an old total pack version (2.06) which i downloaded from a russian tracker. And I wonder how do they send this file if the trojan blocks everyhting, even browsers, on PC. That version of the pack, as I remember, includes a roomshaker, which is infected. And the trojan really works - it almost broke my PC, lucky me that I have turned it off before it did a really major damage. When I tried system recovery, it always stopped with the error after a few minutes, but somehow it still worked, and the trojan is gone... I hope. And I also tried to download the latest version of roomshaker from popot.org and their website, and it also contained a similiar trojan.

Re: AntiVirus alert

Posted: April 30th, 2014, 7:38 pm
by Norbert
I've e-mailed Brendon James, the author of RoomShaker, a while back; asked if he can create a new executable after doing a trojan scan. I also mentioned this thread. (I don't think he has ever replied to an e-mail of mine though.) Maybe someone has software to remove trojans? I'm using Linux and I don't know of any trojan removal software I could install and use. I do use ClamAV, but it doesn't give me warnings when I try to use RoomShaker in Wine.

Re: AntiVirus alert

Posted: May 7th, 2014, 1:06 pm
by Norbert
Norbert wrote:(I don't think he has ever replied to an e-mail of mine though.)
Ah, he did now. :)
He's going to look into it!