Author Topic: Sad News  (Read 2514 times)

Offline powerrave

  • Giga Heavyweight
  • Posts: 5372
  • Rep: 2
    • View Profile
    • Awards
  • See profile for gamer tags: Yes
Re: Sad News
« Reply #20 on: November 12, 2010, 05:53:29 PM »
now it makes me wonder. why , on a certain amount of systems, is it being detected as a virus? it's no biggy, i can get into that. but this is just something that bugs me.

and before asuming, i didn't get my RA2 from Sage his sig. i had found the installer i use 3 years ago ;]
"Always be yourself, unless you're a loser"


Offline Serge

  • *
  • Posts: 1530
  • Rep: 13
    • View Profile
    • http://www.q3k.org/
    • Awards
Re: Sad News
« Reply #21 on: November 12, 2010, 05:58:29 PM »
Because it depends on the antivirus software?
home | twitter | yt | gmf de/compiler | component freedom | xmpp: q3k@q3k.org | email: q3k@q3k.org

Offline 70 CUDA

  • *
  • Posts: 758
  • Rep: 2
  • Epic skulls= Epic win
  • Awards BOTM Winner
    • View Profile
    • Awards
Re: Sad News
« Reply #22 on: November 12, 2010, 11:36:30 PM »
ok then what the heck is wrong with my DL? i just had to re export it cause it did it twice today. i know it isnt a virus but what is causing it?
Holy crap they do exist!!!! :Rob2

Offline Serge

  • *
  • Posts: 1530
  • Rep: 13
    • View Profile
    • http://www.q3k.org/
    • Awards
Re: Sad News
« Reply #23 on: November 13, 2010, 03:40:31 AM »
ok then what the heck is wrong with my DL? i just had to re export it cause it did it twice today. i know it isnt a virus but what is causing it?

It's the infogrames registration tool. False positive.

And it's not because it's Sage's download, or because it was hosted on GTM, or because it was hosted when the moon was in it first quarter phase. The same utility is on the original RA2 CD that you bought from a store. Recent antivirus software has something called heuristics, which means that viruses are not only checked by signatures, but also unknown programs are being disassembled and their code is being reviewed to see whether it could be malicious. Here it is detected as one, since it does place itself in the CurrentVersion\Run\ key (which can be later easily deleted), which is kind of worm-y, but I don't really know when. I remember running that utility a long time ago and nothing like that happened.
home | twitter | yt | gmf de/compiler | component freedom | xmpp: q3k@q3k.org | email: q3k@q3k.org