Virus found in cbp-vol2-uninstall.exe

[lecie]

I play all there maps and I've used the zip and exe files and have NEVER had issues with anything... so it's where you downloaded it from because they don't include viruses in there work..

[Raz]

Hum...Kami and Neo are 2 big virus absolutely, plus i am the mascott but no...i dont see any virus into our installer or zip file

[VACkillers]

im glad this all got sorted out for those that had virus warnings come up.

[Zoë(Co30)]

As an aside... Antivir is a very good program, I use it myself. It's heuristics can go a little overboard sometimes, and it'll detect virus' that aren't there. That's why it's important to know the source of your downloads, and try to get even well known programs off the authors site, or recommended mirrors. You can double check files through several scanners at virustotal.com http://www.virustotal.com/

[Spoondog]

Glad to see this sorted out. Could you please stick a "[solved]" or something in the subject line for this thread?

[DrFish]

happy end.. that's what counts

[MyOwnShadow]

Haarg, I can verify your results.
The new VDF and search engine that was released today (i.e. your files) reports the quarantained files not as a virus anymore, but as "suspicious".
So probably after all it was nothing.
Sorry, everyone, I did not mean to start any panic. But if it had been a real threat, not warning you would have been worse, I think.

[Haarg]

I put together in the installer, so I've been checking into this.
I downloaded Avira AntiVir Personal, configured it to high detection level, and had it update its definition files.
Product version: 8.2.0.337
Search engine version: 8.02.00.71
Virus definitions version: 7.01.01.216

Then, I downloaded CBP3 Volume 2 from BeyondUnreal using the FileFront mirror, verified that it had the correct MD5 hash, and installed it.

Scanning the installer, the installed files, and the uninstaller didn't detect any viruses.

[DrFish]

One can never be too careful

[drewtral]

I don't know if this will help ease your mind any, but over the last few days I've been getting false positives out the butt from a wide variety of programs, including Trojan Droppers. The .gen means generic, which means it probably isn't a virus but it is getting picked up by your Heuristic detection for having virus like tendencies.

It's not just you and I and none of us are using the same anti-virus software (though a shared resource of definitions could be possible.) All the same, it's probably nothing.

[evilmrfrank]

If there is a virus in the CBP installers I can assure you it was not of our doing.

[commiecat]

Maybe, but I scanned my computer and it was clean. Except for the uninstaller. Additionally: During this scan the antivirus also scanned the packed EXE and found it again only in the uninstaller within that package (being an EXE for itself). So I am quite sure, that file is the origin. IF it is a real virus.

The easiest way to solve this would be to compare your file to one that is known to be clean. If the checksums are equal then it's a false positive and you should either let the AV company know, or the CBP people know so that they can at least provide a warning.

If the checksums are different then it could be a legitimate vulnerability and, again, I'm sure that the CBP folk would like to be aware.

[FragTastic]

you can check any files you find suspicious at www.virustotal.com . They will run them thru 22 anti virus programs and give you the results for free. Ive used them when my AV has given me an infected msg i thought was untrue. However I download about 90% of community maps and I have never had an issue with viruses in maps, not even a false warning. Same holds for my large UT2K4 collection.

[VACkillers]

Well i just thought i would test my files aswell just to give some clarification to some. I scanned both uninstall.exes for cbp1 & cbp2 and both scans Avast+Spybot have found nothing with them.

I'd be interested to know where you downloaded the CBPs from? and which servers you have been playing online aswell, they've obviously been modified somehow while you've been online is my guess, as i've never taken my UT3 online.

[MyOwnShadow]

Maybe, but I scanned my computer and it was clean. Except for the uninstaller. Additionally: During this scan the antivirus also scanned the packed EXE and found it again only in the uninstaller within that package (being an EXE for itself). So I am quite sure, that file is the origin. IF it is a real virus.