AntiVirus alert

Modern Prince of Persia 1 and 2 level editors for Windows.
Post Reply
User avatar
robert
Sultan
Sultan
Posts: 194
Joined: August 27th, 2011, 7:16 pm
Location: Argentina

AntiVirus alert

Post by robert »

Hi guys! It's been a long since my last entry. How are you all?

Ok, the thing is, I've downloaded Roomshaker again, and just when I descompressed the .rar my Antivirus detected the POPLM.exe as a Troyan Downloader.Agent2.BLGT

So, I don't know what to do o_o

Maybe it's just a false alert, but is this normal? should I proceed with the antivirus or ignore it?

Bye!
Image
This will be my face if you can't win any of my mods
User avatar
Norbert
The Prince of Persia
The Prince of Persia
Posts: 5743
Joined: April 9th, 2009, 10:58 pm

Re: AntiVirus alert

Post by Norbert »

robert wrote:Ok, the thing is, I've downloaded Roomshaker again, and just when I descompressed the .rar my Antivirus detected the POPLM.exe as a Troyan Downloader.Agent2.BLGT
Do you get the same message with the ZIP file here?
User avatar
robert
Sultan
Sultan
Posts: 194
Joined: August 27th, 2011, 7:16 pm
Location: Argentina

Re: AntiVirus alert

Post by robert »

Well it also happens if I open roomshaker in the .ZIP file.
Image
This will be my face if you can't win any of my mods
User avatar
Norbert
The Prince of Persia
The Prince of Persia
Posts: 5743
Joined: April 9th, 2009, 10:58 pm

Re: AntiVirus alert

Post by Norbert »

Other virus programs also appear to think a trojan is present in POPLM.EXE:
https://www.virustotal.com/en/file/94e2 ... 397470144/

I don't know if it's just some stuff resembling a trojan - a false alert - or not.
I do know that David ran into something similar with the PoP1 Total Pack.
If virus programs (don't know how to) fix files, what are we supposed to do...
User avatar
robert
Sultan
Sultan
Posts: 194
Joined: August 27th, 2011, 7:16 pm
Location: Argentina

Re: AntiVirus alert

Post by robert »

I have AVG. But I'm planning to install another antivirus as AVG is expired. It didn't happen this with Avast.

Maybe it's just a false alert, sometimes happens with emulators and that stuff.
Image
This will be my face if you can't win any of my mods
ZBEP
Scholar Scribe
Scholar Scribe
Posts: 2
Joined: April 23rd, 2014, 9:01 pm

Re: AntiVirus alert

Post by ZBEP »

Looks like it's not a fake alert, I actually got a similiar trojan in an old total pack version (2.06) which i downloaded from a russian tracker. And I wonder how do they send this file if the trojan blocks everyhting, even browsers, on PC. That version of the pack, as I remember, includes a roomshaker, which is infected. And the trojan really works - it almost broke my PC, lucky me that I have turned it off before it did a really major damage. When I tried system recovery, it always stopped with the error after a few minutes, but somehow it still worked, and the trojan is gone... I hope. And I also tried to download the latest version of roomshaker from popot.org and their website, and it also contained a similiar trojan.
User avatar
Norbert
The Prince of Persia
The Prince of Persia
Posts: 5743
Joined: April 9th, 2009, 10:58 pm

Re: AntiVirus alert

Post by Norbert »

I've e-mailed Brendon James, the author of RoomShaker, a while back; asked if he can create a new executable after doing a trojan scan. I also mentioned this thread. (I don't think he has ever replied to an e-mail of mine though.) Maybe someone has software to remove trojans? I'm using Linux and I don't know of any trojan removal software I could install and use. I do use ClamAV, but it doesn't give me warnings when I try to use RoomShaker in Wine.
User avatar
Norbert
The Prince of Persia
The Prince of Persia
Posts: 5743
Joined: April 9th, 2009, 10:58 pm

Re: AntiVirus alert

Post by Norbert »

Norbert wrote:(I don't think he has ever replied to an e-mail of mine though.)
Ah, he did now. :)
He's going to look into it!
Post Reply