Avast WEBforum
Other => Viruses and worms => Topic started by: The Maxx on May 20, 2005, 06:17:35 AM
-
I was trying to download the newest Gamespy Arcade and avast! Pro went off saying a virus was in the file. The url is
http:// launch.gamespyarcade.com/software/launch/alaunch.cab\gsda.dll
avast! Pro would not let me download it. Claimed it was this Win32:Adan-055 [Adw]
So a virus/adware or just a FP?
-
Please go back and modify your post so that the link is not active.. you can do so by putting a space after http:
Shouldnt put live links to sites you know set off a virus alert :)
-
Fixed the link. But it shouldn't really matter tho, if you try to use that link it says page cannot be found or something like that. Believe you have to go to the true site and click download like to get it to work.
-
When I clicked on it (yes I did) lol it set off a virus warning.. just as you got :)
thank you for fixing that :)
a google search for Win32:Adan-055 brought up the VPS history for Avast.. see attached screenshot... soooo Im not an expert but Ild say its a virus EDIT scratch that (its late here) Adware
-
Don't even want to open the link even though avast! will protect me. :) It's not a virus but an Adware that is trying to enter your pc. Don't think it's a false positive but the real deal, I suggest not to download what your trying to download. ;)
-
Fixer.. I was feeling brave tonite :P (Plus had just finished a complete backup) lol
it worked before.. but not with the \gsda.dll on the end (that part was not active in his link.. only all before it and it set off the alarm)
-
Fixer.. I was feeling brave tonite :P (Plus had just finished a complete backup) lol
it worked before.. but not with the dll on the end..
I feel like a flame broil turkey when it comes to this. ;D Either take a stand, or take a hike (I choose option two.) :)
-
Don't even want to open the link even though avast! will protect me. :) It's not a virus but an Adware that is trying to enter your pc. Don't think it's a false positive but the real deal, I suggest not to download what your trying to download. ;)
Well thing is GameSpy is a very well know place. It's the main place people people multi-player games on. Games such as CounterStrike, Half Life, Halo, NeverWinters Night, etc. So not sure why theres a nasty in their file you use to play those games.
-
well if nothing else (besides downright foolish) it proved that my Webshield is working great ;D :P I just reinstalled it today.. Ive not been using it as I had too much trouble with it for abit... but have changed OS's and firewalls and decided to give it a shot
-
Don't even want to open the link even though avast! will protect me. :) It's not a virus but an Adware that is trying to enter your pc. Don't think it's a false positive but the real deal, I suggest not to download what your trying to download. ;)
Well thing is GameSpy is a very well know place. It's the main place people people multi-player games on. Games such as CounterStrike, Half Life, Halo, NeverWinters Night, etc. So not sure why theres a nasty in their file you use to play those games.
When you rely on the responsibility of the "people who place these games there" :) it can sometimes bite you in the butt. Be happy Avast caught it :)
edit: do a little Googling and you'll find alot of talk about spyware and adware with Gamespy :)
-
When you rely on the responsibility of the "people who place these games there" :) it can sometimes bite you in the butt. Be happy Avast caught it :)
Well GameSpy Arcade isn't a game, its the program GameSpy makes that allows you to play the multi-player games on. I read under their support page that Norton 2005 claims it's a adware and GameSpy says it not true and they hope Norton will update their definitions soon. So maybe the same for this one.
But I sent GameSpy support a email about it, hopefully they send something back soon.
-
Well I haven't heard nothing from GameSpy nor alwil over this yet. So no idea over GameSpy Arcade. :-\
-
Maxx,
Take a look at this:
http://xforce.iss.net/xforce/xfdb/18252
-
It seems that even popular programs can be a trap full of viruses and adware. :-\ Now the risk of getting a infected file is greater. Thanks for the info connie :)
-
Fixer I also found an older article about a Gamespy Arcade download at Download.com being infected with W32/Nimda.gen@MM (not Adware.. a VIRUS) The file was served by Gamespy... so Download.com was not responsible for this. Upon discovery Download.com removed the program at the time. It just shows this keeps having problems and I really wouldn't want it on my machine.
-
and then there is this one: http://seclists.org/lists/vulnwatch/2003/Jul-Sep/0064.html
Maxx.. the list goes on and on :)
-
And Gamespy didn't do anything about this? :o
-
Well got a reply from GameSpy this morning.
"It comes up because our free software has ads built into it. However it is
not 'adware' or 'spyware' in the true sense of the word."
As for the Download.com thing I recall hearing a few years ago a rumor that state about every file Download.com had had a virus in it. But that didn't stop people from using Download.com
Also GameSpy is now owned by IGN Entertainment one of the biggest internet gaming news sites.
-
Maxx.. what you choose to download, trust, and use on your system is of course up to you :) You asked for an opinion, and you got a couple.. the rest is up to you
-
The latest version of Ewido also picks this up as adware, albeit LOW.
Too many of the security vendors are saying this is a nasty so I'm going to trust them more than the vendor pushing the suspect software. If it was so benign then why not be upfront that it contains adware.
-
Hi Connie,
Well dear Connie, you know you should have some proper in-browser protection, so you have the results on dubious links, before you do any clicking. What do you have: you could install McAfee SiteAdvisor or you could search through www.scandoo.com to have some traffic lights on your search result page (green is OK, yellow not known, red is "do not click this link". Or you can install for IE, FF or Opera the DrWeb's pre-hyperlink scanner plug-in. A red spider coming up, do click this link and you have malware on your machine.
Simply said surf with this "map" and don't get clubbered over the head in some backway alley.
your malware fighting friend polonus
-
Well Polonus, when Connie replied to this over a year ago 20 May 2005, DrWeb, siteadvisor and scandoo didn't exist ;D