Iron Warriors: T72 Tank Command game "core.exe", False Positive?

Viruses and worms
1

So I purchased this game off Steam but I can’t play it because Avast thinks the games main executable is a trojan virus.

Avast recognizes it as “Win32:Trojan-gen {Other}”.

Steam store link:
http://store.steampowered.com/app/1670/

Is this a false positive or can there be virus infected software on sale in Steam? If it’s a false positive how can I make the game work?

2

To know if it’s a false positive, upload the file to VirusTotal and post the results.

If indeed a false positive, send the file in a password-protected zip folder to virus@avast.com with false positive in subject and the password in the email body.

3

Can you inform the file as being a false positive? (click on the bottom right of the virus warning message).

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button…
You can use wildcards like * and ?. But be careful, you should ‘exclude’ that many files that let your system in danger.

This link is a tutorial on how to help correct a virus detection that you believe to be false:
http://forum.avast.com/index.php?topic=25009.msg204838#msg204838
or http://forum.avast.com/index.php?topic=7779.msg62586#msg62586

4

I used the Avast programs own function, it said the file will be uploaded during next update.

5

You can do a manual update which would save waiting for the next auto update, right click the avast ‘a’ icon, select Updating, iAVS Update.

6

Thanks for helping improving detection accuracy.

7

Hmmm… Avast didn’t send anything when I did the manual update. How can I pack a file in virus chest to Zip so I can send it via email?

8

Strange…
You can use www.izarc.org to zip with a password.
Send an email to virus@avast.com informing also the password used.

9

How do you know this and what were you expecting to happen ?

Check the C:\Program Files\Alwil Software\Avast4\DATA\log\setup.log file using notepad it should show what was uploaded.

Look at the bottom of the log, search for “package Submit:” without the quotes, there should be something like this (quote) obviously I had nothing to submit so no files.

12.01.2009 14:28:41.000 1231770521 package Submit: files 0, bytes 0, time 0 ms 12.01.2009 14:28:41.000 1231770521 package Submit success: files 0, bytes 0, time 0 ms
10

I sent it manually via email. I returned the file from virus chest to where it belongs and now Avast thinks there’s no virus in it.

11

Looks like the file you sent has been analysed and the virus signatures corrected.

12

Thanks!

So it was a false alarm and not a real virus?

13

You’re welcome, looks like it was a false positive. This is why there were the suggestion to check it at virustotal as there are currently 38 different scanners and from the results you/we can get a good idea about the detection from the results.