Author Topic: False Positive related to Lord of the Rings game?  (Read 2509 times)

0 Members and 1 Guest are viewing this topic.

apass

  • Guest
False Positive related to Lord of the Rings game?
« on: July 28, 2008, 07:19:47 AM »
using Avast 4.8.1229 with VPS v.080727-0 on WinXP SP2.

Pick up the following virus warnings while doing a weekly scan.
Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\Installer\34acdd5.msp\PCW_CAB_Family0\Fellowship.exe\[Embedded#202e0b]" file. 
Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\Installer\34ace08.msp\PCW_CAB_Family0\Fellowship.exe\[Embedded#202e0b]" file. 

Both files cannot be moved to the virus chest probably because the size is too big, about 20MB each.  Nevertheless using 7-zip, I manage to extract the offending file, Fellowship.exe which is related to the Lord of the Rings: The Fellowship of the Ring game I've uninstalled a long time ago, and upload to virustotal with the following results.
http://www.virustotal.com/analisis/ffb8807f7f74d0300f7eb17719125a12
http://www.virustotal.com/analisis/ffb8807f7f74d0300f7eb17719125a12
I also did a SUPERAntiSpyware scan which showed no virus warning.

Please advise on the next course of action. Should I send the 20MB msp files to virus@avast.com or the 2MB Fellowship.exe instead? Is it safe to delete the 'infected' msp files from my Windows' Installer folder since I've uninstalled the game a long time ago? Thank for the help.

Jtaylor83

  • Guest
Re: False Positive related to Lord of the Rings game?
« Reply #1 on: July 28, 2008, 09:26:09 AM »
False positive. Yes, you can send it to avast!



apass

  • Guest
Re: False Positive related to Lord of the Rings game?
« Reply #2 on: July 28, 2008, 02:00:45 PM »
file sent, awaiting result