Author Topic: Zylom Monopoly virus?  (Read 5730 times)

0 Members and 1 Guest are viewing this topic.

hamsterfish

  • Guest
Zylom Monopoly virus?
« on: April 03, 2010, 12:30:25 PM »
I've had a virus alert for monopolyPromo.exe: this is on a Zylom games CD (a "monopoly" game freebee that came with a daily newspaper) that I've used for many months.

The alert is Win32:Malware-gen, VPS version 100402-1, 2nd April 2010. I've un-installed the monopolyPromo game; but I get the virus alert on re-installation from CD.

I've used this software for months with no apparent problem, maybe this is a false positive?

Any advice welcome.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37644
  • F-Secure user
Re: Zylom Monopoly virus?
« Reply #1 on: April 03, 2010, 12:38:43 PM »
If the file is less then 20mb then you can upload it to VirusTotal      www.virustotal.com
When you have the result copy the URL in the adressbar and post it here

hamsterfish

  • Guest
Re: Zylom Monopoly virus?
« Reply #2 on: April 03, 2010, 06:45:59 PM »
Thanks for the advice.

I tried VirusTotal on monopolypromo.exe and 3 engines (Avast, Avast5, Gdata) reported a virus and 39 did not.

On that basis, and since this has been running on my PC for months and nothing bad has happened, I'm going to assume the file is OK.

Here's the result URL:
http://www.virustotal.com/analisis/136fd393d02d07cca01cc21a852503e3864b59ea29013ea5b35f1b01f2480f8a-1270312480

bong2x

  • Guest
Re: Zylom Monopoly virus?
« Reply #3 on: April 03, 2010, 07:06:12 PM »
Quote
On that basis, and since this has been running on my PC for months and nothing bad has happened, I'm going to assume the file is OK.

now i can conclude that 100% protection is not good!!!!

i don't understand what really want of human.

they are afraid of what they don't see if you protect them from it you become bad

sign off to avast!!!

Offline .: L' arc :.

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1780
  • Thinking with Portals
Re: Zylom Monopoly virus?
« Reply #4 on: April 04, 2010, 05:33:53 PM »
It appears like your suspicion is right. The file is a possible False Positive.

Sending Samples to Virus Lab

There are two ways of sending samples to the virus lab.


1   Send the sample to virus@avast.com zipped and password protected with the password in email body. It would be better if the e-mail has:

  • False Positive or Undetected Malware as the title or heading
  • If you have a topic in the forums regarding the files you want to submit. It would be helpful to add a link to it in the e-mail body.

2  Open avast! > Maintenance > Virus Chest. From there, right click anywhere inside the Virus Chest and click Add... Choose the file(s) you want to be submitted then click Open when done. The file(s) you selected will appear on the chest, highlight it then right click and select Submit to Virus Lab


Quote
now i can conclude that 100% protection is not good!!!!

i don't understand what really want of human.

they are afraid of what they don't see if you protect them from it you become bad

sign off to avast!!!

How did it became a 100% protection? Moreover, the suspicion was highly probable to be true.

Windows 7 (64-bit) Home Premium SP1
avast! 9 RC1