False positive: NOX game.exe (Gog.com)

Hello Avast! forum,

My name is Sean, I recently purchased a game called NOX from a website called gog.com (gog being good old games) (http://www.gog.com/gamecard/nox Direct link for those who don’t know what i’m going on about). This is a very well known and trusted site, I highly doubt they would have put on a virus on any of the games.

Down to my Issue, I run a win 7 x64 system, when I install the game I get the pop up “game.exe is a trojan horse” (or something of that extent). The same thing happens when launching the game, I am forced to turn off avast for a set period of time- which I’m never comfortable with. I have reported this as a false positive but nothing was done to fix the problem.

I have also added both the folder (i.e E:\games\gog\Nox*) and several of the executables (i.e E:\games\gog\Nox\game.exe) as exclusions but it simply won’t give up trying to report it as a virus.

If anything can be done to sort out this issue, it would be much appreciated.

have you tested the .exe file(s) at www.virustotal.com ?..if scanned before, click new scan

when done, post link to test result(s) here

https://www.virustotal.com/file/b77315104d95ce9ae34e809fd2570d956d0e2bda3bdbd7973e0dfc326020b886/analysis/

There you go, I assume this is what you wanted.

Thanks for the quick reply!

I would say that is a False Positive yes :wink:

First seen by VirusTotal
2011-10-08 20:11:42 UTC ( 1 år, 2 måneder ago )

you can report FP here http://www.avast.com/contact-form.php

you may add a link to this topic in case they want to reply here

Once again, thanks for the quick reply! I’ll add a link to this post. Hopefully it gets sorted out :slight_smile:

Edit: it might be my fault, but when I try to send in the ticket I end up with a “413 request entity too large” error.

I have uploaded the executable onto our server. The ZIP is not password-protected - I hope that’s not a problem.

http://files.gog.com/support/Game.zip

I have uploaded the file to avast lab :wink:

still detected
https://www.virustotal.com/file/82aa28a5112e9e5f7116e4bfc359bde7c59b3ae257e24be1693c696a7399da7d/analysis/1357314482/

Thank you very much :slight_smile: My fingers are crossed it won’t be a false positive in the future!