Win32/Mkar virus

Hello

I was scanning with my backup av (avg) and he found 2 files with the Win32/Mkaar virus

AVG has found it in

C:\Program Files\EA games\Catwoman\Support\Catwoman_EZ.exe
C:\Program Files\EA games\Harry Potter en de gevangene van Azkaban\Support\Harry Potter and the prisoner of Azkaban_EZ.exe

Is this i false postive

He deleted the 2 files

 

This is not a false positive, the virus exists. Couldn't find any description though. Its a low risk virus which means its nothing much to worry about.

 

Is this what you've got? http://www.sophos.com/virusinfo/analyses/w32mkare.html

Just because there is a virus of this name does not mean you have, or have not, got a FP. But since these are unimportant games files I would certainly wish to delete them!

 

Why should EA Games be infected with Mkar? There should have been many more such infected files too right?

 

no

I got it today that virus with the new virus signature.

 

Do you mean that the virus was detected only today, after you downloaded today's update?

 

He was only using AVG as a backup, so perhaps the resident AV dealt with the rest??

 

Possibly. Maybe he can shed some light.

 

yes i have that stupid virus after the virus update of yesterday

 

So did you check the Sophos description? What'd you get?

P.S. :- Whats your resident AV?

 

Unfortunately there are several variants of this thing and each AV company has its own nomenclature; it could be that this is the latest variant that AVG is finding as W32/Mkar.K. Perhaps Stephan could provide a little more info?

 

https://www.wilderssecurity.com/showthread.php?t=67323

Topper,

AVG is finding that virus as Mkar.K, mikel108 says so, maybe you can find some info.

It seems all the EA Games are being detected with Mkar virus...I'm inclined to believe its a false positive.

 

TopperID and Stephan123,

I have confirmed that the name of this virus is Mkar.K and mikel108 is experiencing the same except that he has it in Need for Speed_EZ.exe

All the EA games system information tool files are being detected with Mkar.K by AVG, it seems obvious its a false positive, because mike checked with Jotti's and said that only AVG is detecting that exe file.

 

Stephen123

Scan the file at Jottis and you will see that only AVG will pick it up. I have AVG Pro and have contacted support. I would suggest to just leave the file in the Virus Vault for now. Otherwise it will just keep picking it up. Your game will still play well.

 

Wow! Thanks for that thread Firecat and Mike; I had missed it, but it completely answers the question!

 

You're welcome!

 

Hi all, I was so relieved to find this site last night. I got the same thing in my daughter's Harry Potter, Prisoner of Azkaban game, using AVG.

Only I'm not very knowledgable with computers, but I'm learning. Anyway, I was desperate to get rid of said virus, so I decided in the end to uninstall the game. I now cannot install it again. It gets to the _EZ.exe file and says unable to copy file, thats with AVG turned off while installing. (I've unintalled AVG too now after reading mike108's thread about it.).

I guess I might be too hasty deleting things from my system before thinking?

Can anyone help?? Hope I havn't ruined the game now.

Ta in advance

 

You've got yourself into a pickle here! The best solution would probably be to use system restore to go back to a point when all was OK.

If you delete a file with your AV it will usually keep a copy in Backup/Quarantine, with most AVs you can access this through the GUI and restore the file easily; with others you need to go into program files and hunt out the backup folder. But if you have uninstalled the AV you probably would have lost the backups then anyway! (I'm assuming you used AVG to delete the file).

If it is possible to download a fresh copy of the game, then that would be another solution.

 

Thanks for your reply topper.

Oh dear. Yes I did use AVG to delete the file, so can that acctually delete the file from the CD-ROM, making it then unusable?

Sorry to sound thick!

Maybe I should try EA Games support for help replacing it, don't want to fork out another 20 quid unless I have to.

 

I meant deleting from the hard drive rather than the CD-ROM! If you've got the CD you should be able to reinstall from that. Probably you have a conflict with bits of the program still on your HD. Have you tried fully unintalling the game (using Start/Control Panel/Add-Remove Progs) then doing a reboot, before attempting to reinstall from the CD?

 

Maybe wormbat should try removing the reg entries?

 

Yay!

Thanks so much.

I found some files that hadn't been deleted, got rid of them and now the game has installed ok.

Thanks very much for your help