FP: Gothic2.exe

[cel12]

Hi,

This one is legit isn't it?

Virustotal

AhnLab-V3 2011.12.19.00 2011.12.19 -

AntiVir 7.11.19.160 2011.12.19 -

Antiy-AVL 2.0.3.7 2011.12.19 -

Avast 6.0.1289.0 2011.12.18 -

AVG 10.0.0.1190 2011.12.19 -

BitDefender 7.2 2011.12.19 -

ByteHero 1.0.0.1 2011.12.07 Trojan.Win32.Heur.012

CAT-QuickHeal 12.00 2011.12.18 -

ClamAV 0.97.3.0 2011.12.19 PUA.Packed.SVKP

Commtouch 5.3.2.6 2011.12.19 -

Comodo 11013 2011.12.19 Heur.Suspicious

DrWeb 5.0.2.03300 2011.12.19 -

Emsisoft 5.1.0.11 2011.12.19 -

eSafe 7.0.17.0 2011.12.18 Suspicious File

eTrust-Vet 37.0.9631 2011.12.19 -

F-Prot 4.6.5.141 2011.12.19 -

F-Secure 9.0.16440.0 2011.12.19 -

Fortinet 4.3.388.0 2011.12.19 -

GData 22 2011.12.19 -

Ikarus T3.1.1.109.0 2011.12.19 -

Jiangmin 13.0.900 2011.12.18 -

K7AntiVirus 9.119.5696 2011.12.15 -

Kaspersky 9.0.0.837 2011.12.19 -

McAfee 5.400.0.1158 2011.12.19 -

McAfee-GW-Edition 2010.1E 2011.12.19 -

Microsoft 1.7903 2011.12.19 -

NOD32 6724 2011.12.19 -

Norman 6.07.13 2011.12.19 -

nProtect 2011-12-19.01 2011.12.19 -

Panda 10.0.3.5 2011.12.18 -

PCTools 8.0.0.5 2011.12.19 -

Prevx 3.0 2011.12.19 -

Rising 23.89.00.01 2011.12.19 -

Sophos 4.72.0 2011.12.19 -

SUPERAntiSpyware 4.40.0.1006 2011.12.17 -

Symantec 20111.2.0.82 2011.12.19 -

TheHacker 6.7.0.1.361 2011.12.18 -

TrendMicro 9.500.0.1008 2011.12.19 WORM_SPYBOT.BMC

TrendMicro-HouseCall 9.500.0.1008 2011.12.19 WORM_SPYBOT.BMC

VIPRE 11275 2011.12.19 -

ViRobot 2011.12.19.4833 2011.12.19 -

VirusBuster 14.1.122.1 2011.12.18 -

Gothic2.exe (Trojan.Agent) -> No action taken. [606da47ccf3146ba6ff14e827789ee12]

mbam-log-2011-12-19 (15-28-37).txt

Gothic2.zip

[shadowwar]

This will be fixed in the next update.

Thanks for reporting.

[cel12]

Hi,

Mbam still detects the file :-P

c:\program files (x86)\JoWooD\gothic ii gold\_backup-2.6_de\System\Gothic2.exe (Trojan.Agent) -> No action taken. [3e9464bcd12f8c74ce1c7f5055ab18e8]

mbam-log-2011-12-20 (12-21-42).txt

[shadowwar]

Sorry about that. It is fixed now. We just uploaded new defs.

[Pesticide]

still detected as of 24th of december scan that i finished just now

[shadowwar]

Please post a scan log. Developer scan please. Instructions are stickied in this forum.

I have scanned here and it is no longer detected. Are you sure u are up to date on defs?

[Pesticide]

sorry should have said it was the steam version, pretty sure valve added some nocd changes changing the md5

Files Infected:

d:\program files\Steam\steamapps\common\gothic ii\system\Gothic2.exe (Trojan.Agent) -> No action taken. [a241148b341ab28406b8aac928d8c13f]

mbam-log-2011-12-25 (14-58-45).txt

[shadowwar]

Ok could u please attach that file from steam? Need to see how they made it to get it properly whitelisted.

OR at least upload it to virustotal.com and post the link from the report?

Thanks.

[Pesticide]

Ok could u please attach that file from steam? Need to see how they made it to get it properly whitelisted.

OR at least upload it to virustotal.com and post the link from the report?

Thanks.

here you go

[Pesticide]

retry

Gothic2.rar

[shadowwar]

Thanks. Fixed in the next update. Figures steam goes and changes the structure of the file.