Protection ID a Virus?

Discussion in 'GameJackal' started by Crusher, Jun 5, 2007.

  1. Crusher

    Crusher Well-Known Member

    Using Web's advice i went to download Protection ID from the website link provided. When I chose to download the latest version i was given a 108kb .rar file which contained the virus W32/ICRbot.worm . Just a heads up to anyone else wanting to download it and perhaps Web can provide some insight into why i just downloaded a virus... :mad:
     
  2. Webslinger

    Webslinger Retired Moderator

    If you downloaded from http://pid.gamecopyworld.com/ProtectionID_v5.2c.rar
    you didn't get a virus from that file. You got a false positive from whatever antivirus program you're using.

    If you downloaded from somewhere else, then you take your chances.
     
    Last edited: Jun 5, 2007
  3. Crusher

    Crusher Well-Known Member

    OK, yes, sorry, I tried again with McAfee disabled and was able to successfully extract it. Don't know why McAfee didn't like it. As soon as the download had completed I had alerts everywhere! Very strange, but it was indeed a false positive. Thanks for the speedy reply Web! :clap:

    P.S. I did download from the site listed above and in your other threads.
     
    Last edited: Jun 5, 2007
  4. Webslinger

    Webslinger Retired Moderator

    That's odd, because I have McAfee on my laptop (not my choice . . . it came bundled), and McAfee doesn't complain.
     
  5. Crusher

    Crusher Well-Known Member

    I know, It came pre-installed on my PC too, but for some reason it didn't like it :confused:
     
  6. Webslinger

    Webslinger Retired Moderator

    Well, anyway, I'm not getting any viruses from that download no matter what I use to scan with it at the moment, and my virus definitions are all up to date.
     
    Last edited: Jun 5, 2007
  7. Crusher

    Crusher Well-Known Member

    All in all this was a very strange experience. As soon as the download had completed i was told it contained a trojan. Even after deleting it I recieved this message. Later, McAfee changed it's mind and said it was W32/IRCbot.worm in a non existant System 32 file. Just to be safe, I ran the BitDefender Online Scan and it found nothing, but McAfee was still nagging me. After a while it eventually shut up about the so called *virus* and things went back to normal. As you said Web, there is no virus in that file but McAfee doesn't agree with you. All I can say about this is that McAfee is crap. (Although everyone knows this, this experience proves it ;) )
     
  8. Webslinger

    Webslinger Retired Moderator

    The person named "cdkiller" over here seems to be the author.

    "@CDKiller:
    My BitDefender Internet Security v10 (with newest updates) finds since today "Backdoor.Pcclient.GV" in your PID 5.2c EXE-File (fresh downloaded).
    I don't believe it's true, but what can be the reason for the false-alarm?"--GLH

    "could be the packer. i used NSPack to compress the exe."--cdkiller

    "Since the last update of the virus-signatures BD10 don't find a virus in your PID EXE-File anymore."--GLH


    So, it seems that other programs were giving false positives until virus definitions were updated. /shrug
     
  9. Crusher

    Crusher Well-Known Member

    :agree: Agreed. It was just a false alarm. I just don't like to take alerts about a worm in my system files lightly!