Virus Identified on CD ROM - Win32:Trojano-872 [Trj]

Hi,

Avast has identified the executable for Rise of Nations as a trojan (Win32:Trojano-872 [Trj]). I’ve uninstalled, rebooted, and reinstalled the game, but it won’t run. I get small box with the message cannot run rise.exe.

Avast even thinks that the file on the CD ROM is infected. Any idea what’s going on?

Thanks,

Old Runner

submit the file to http://virusscan.jotti.dhs.org/

and see what it says.

BTW did you create the cd rom?

I had the same thing happen after todays virus update. It is finding that same virus in NATIONS.EXE (original CD).

http://www.renntech.org/loren/images/rise_virus.jpg

Hi,

If the file is not to big then send it to virus@asw.cz

The Avast team will take a look and if it is a false positive (Proabaly is but I would check on Jotti scanner as above) then it will be removed in one of the next VPS updates.

Kind Regards

Jlo

I should have said zip it up and password protect the file so it does not get deleted at server level. Don’t forget to tell the avast team what the password is!

Kind Regards

Jlo

This is some sort of stub loader or something and Windows XP will not let you copy it. It is 7.5 MB - part of their copy protection I’ll bet.

Having the same problem with Dungeon Siege/Legends of Aranna . . .

Ditto, must be a microsoft game issue. Prob someone made a virus on some microsoft security flaw, and their games might use it in their program, etc…

Yep, I’m getting this on various files on my HD today. I’m not sure if this is legit…a lot of the files I’m getting warnings for have not been modified in a long time. This all seemed to happen after the latest AVAST update. I’m backing up all critical files now just to be safe.

To answer DukeNukem’s question: The CD ROM in question was made by Microsoft. It seems that Avast! thinks the game’s executable is a trojan. I checked the CD ROM assuming that file wouldn’t be infected. None of the online virus scanners I tried detected anything on my PC. Nor did Trojan Defender.

submit the file to http://virusscan.jotti.dhs.org/ Its probally a False positive, but you can never be too sure

I’m getting really annoyed listening to the virus alert go off on all the computers in here. Is there a way to have Avast ignore or make an exception for certain files?

Same Rise of Nations problem with Trojano-872 but with “Patriots.exe.”

Only way I could run the game was to turn off Avast.

Found this out after deinstalling and reinstalling Rise of Nations and getting the same Avast notiifcation of the “problem:”

1/7/2005 8:03:32 PM SYSTEM 2008 Sign of “Win32:Trojano-872 [Trj]” has been found in “F:\Files\PATRIOTS.EXE” file.
1/7/2005 11:36:31 PM SYSTEM 1864 Sign of “Win32:Trojano-872 [Trj]” has been found in “C:\PROGRAM FILES\MICROSOFT GAMES\RISE OF NATIONS\PATRIOTS.EXE” file.

Same problem here,Zoo Tycoon2 -avast says 872
But it is not infected- the kid is upset that his program is not working-I uninstalled Avast and had to reinstall game.
Now What??? Seems like it is affecting a lot of us!!!
Should I submit the whole CD??? >:(
-max

For now just exclude CD drive and target folder (where you installed the game) so you’ll be able to play it until this issue is solved.
This applies only to original game where you can be 100% that it’s not infected.
If the game is from second source (war-ez :wink: ) you should be more careful…

Happened to me as well, the same game and the same “infection”. Count me into the statistics.

I have the same with both Dungeon Siege AND Dungeon Siege: Legend on Arana, both the files on my harddisk and the files on the CD-ROM get a virus warning

I cant play my game now because avast wont allow me to run the exe, pls fix it! :-X

READ THIS ::slight_smile:

Avast refused to restore file from chest.
Had to use system restore.
Went back to eTrust for now till they get it worked out. ::slight_smile:
-max

That will not work (at least on Rise of Nations) as it uses some files from the CD and some from the install directory. The only way I found to run the program was to totally disable avast.

This really needs to be corrected - I am starting to wonder if the 3 two year Professional subscriptions ($150) I just bought was a mistake.