back door virus warning

BINGO! Mine too, i had to disable it to be able to run ToEE.exe

 

To give an update, my Avast home edition 4.8 just did the same for me finally. I imagine it's a false positive, but I doubt Avast will fix it given the fact that there's not tons of people reporting it as a problem.

 

I too have Avast v 4.8 and it found the GcW file to be infected. I really doubt that it is, and so I have blocked it by going to On Access Protection Control -> Standard Shield -> Customize - > Advanced -> Add at the bottom, and added the toee.exe file directly to that list. That has allowed the game to run without turning off the AVG.

 

I sent the file and a email to avast and got this back.


Sir,
although the file has been patched, it does not contain any malware. avast! is wrong reporting it, and we are sorry for the mistake and all troubles it might cause. It will be fixed by the next avast! update.

David Podracky - equipe de soutien avast!

 

That's great news! Thanks for reporting this here!

 

Just got AVG 8. Seems like the auto-scan feature functions the same as Norton and will probably result in the same problems unless disabled either in the AVF control centre or your version of ToEE doesn't really care any more about copy protection. Anyone having troubles with the Frontend using AVG 8?

 

You don't know what you're getting into, Zeb.

Just disable the "resident shield" feature (it should turn from green to red).
That'll let you work without problems, but you'll get one of those annoying "ME ME ME" pop up from AVG, announcing mayhem, chaos, death and famine cos you resident shield feature is off.

In my case, ToEEFE won't start if you have "resident shield" active, since this feature scans every file you open and/or close, FE detects the usual error of "being used or interferred" and won't open. If it happens once, you need to rebbot, cos FE will still throwing the error even if you disabled the shield.

Also, be careful, and check the vault periodically. AVG 8 has the friendly habit of cropping whatever file thinks it's dangerous and putting straigth there...and after a while it will dissapear if you dont restore it.

It will detect the no-cd crack, (the dev_tep file) and not only will remove the crack itself, but also the .exe AND the .rar file called dev-tep. HA HA :chainsaw:

It also detects certain system files from windows, and guess what? To the vault too. Those files seem to be of some importance (theyre .exe) cos, t'ill i've figured all this, lots of those files had been "vaulted" and lost, and now my install is crap.

Sincerely, i cursed the day ive updated to 8. The previous was annoying, but this one is simply HEINOUS.
*end of rant*

 

I just made Residence Shield exclude C:\Program Files\Atari -- we'll see what happens (burn AVG 8, burn).

--thearioch

 

Thanks for the tips guys I figured something was up when I saw lots of virus warnings for things which I know are totally virus free. I know because I did them :doh:

These permanently active scanners are bad news. Does anyone know if Avast uses them atm because I'm all up for changing my anti-virus now? At least AVG will be easier to remove than norton though :chainsaw:

 

I knew someone had found the problem:

That pretty much explains it. Even when Cuch's search wasn't for AVG, those false positives that mentions are exactly the ones that AVG found. I got those deleted by AVf***G along with other system files.

Just remember to uncheck the box for "resident shield" and you'll be fine, at least to work with FE.
But remember, whenever you do an AVG run, it will detect the system files and all the dev_tep files and throw them to vault (i'm repetitive with this, cos if you let it pass, it will delete ALL the related files, and you wouldn't know what's screwed)

 

Just a head's up....

I've had my no-cd crack since it first came out for ToEE. No changes, no problems, no worries. No viruses.

AVG 8 has been falsely reporting it as virus full ever since it installed itself. That was nonsense.

Yesterday afternoon, someone hacked my wireless network and did put a virus on the no-cd crack. It's trashed my PC. Totally.

I've lost my personalised version of ToEE (2 years of work gone. No back-up because I had the backup HD plugged in at the time heh), plus absolutely everything else.

The malware slowed AVG down so that it couldn't keep up and then proceeded to repartition and reformat my HDs. My OS HD went from 80 gigs to a 600 meg partition. There must have been a flaw in windows firewall that they found, although it could be they malwared it as for the past couple of days it has been a little slow in activating. Impossible to say now.

As I wasn't in at the time (mea culpa) I wasn't able to stop it.

So I won't be using AVG 8 in the future

edit: and the answer is 'yes, I did cry. Like a baby.' :censored:

 

I have been testing the supposedly infected No-cd files.

I configured my AVG to allow them to run and with the Front end the game ran fine. However my Firewall (COMODO Firewall Pro) intercepted a call from TOEE.exe to the Internet using TCPIP.

TOEE.exe was trying to call 131.107.115.28 port 80.

Which is Microsoft according to whatismyipaddress.com.

General Information

Hostname: crl.microsoft.com
ISP: Microsoft Corp
Organization: Microsoft Corp
Proxy: None detected
Type: Cable/DSL

Geo-Location Information

Country: United States
State/Region: WA
City: Redmond
Latitude: 47.6706
Longitude: -122.0685
Area Code: 425


Anyone have a clue about this.

 

I just checked a different version of the file from a different download and TOEE.exe made the same attempt to connect.

 

It might be that some versions of the crack did have a virus? I've just downloaded a safe version and Avast and Spybot have found no problems.

Odd one - because I thought that was the version of the crack I'd had all along. Hmmm. aper: