Americas Army

Discussion in 'NOD32 version 2 Forum' started by LIW, Feb 7, 2006.

Thread Status:
Not open for further replies.
  1. LIW

    LIW Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    52
    Hi,

    I've just downloaded Americas Army 2.5 program from gamespot.com. After finished downloading my trusty NOD32 prompt saying its "Win95/SK Virus". Yes I have my NOD32 updated (1.1397). I think its a false positive. Should I send the file to ESET (the file is 903MB)? Please advise. Thanks.

    Regards,
    Liw
     
  2. jg88swe

    jg88swe Registered Member

    Joined:
    Jul 1, 2004
    Posts:
    181
    Ehm.. I've plaied Americas Army since the 1.5 version, to todays 2.5 and have never had a false positive with it.

    Hmm.. probably something added in the one you downloaded from Gamespot... Try the Tracker to download from..
     
  3. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    It also found Win95/SK on my puter in Quake 4 & The Movies demo installers.
    Using NOD32 2.51.20 / 1.1397

    (Spil = Games) Quake 4 deleted a few days ago.
    I thought it was fixed by now though.
     

    Attached Files:

    • hmm.gif
      hmm.gif
      File size:
      39.1 KB
      Views:
      239
  4. DonKid

    DonKid Registered Member

    Joined:
    Jun 27, 2004
    Posts:
    566
    Location:
    S?o Paulo, Brazil
    Since database 1.1394, the new heuristic is a little aggresive.
     
  5. Happy Bytes

    Happy Bytes Guest

    This has nothing to do with the heuristic - Win9X/SK is a special detection plugin. Somehow there was a mistake in the File Section Check-Flags for this Detection (a condition which was always true even when it was not)

    This isn't a big problem and will be fixed ASAP. I'm tomorrow at the Information Security 2006 Conference so i'm not sure if it's done 'till tomorrow, but we're already aware of this problem and it will be solved shortly.

    HB.
     
  6. jim28277

    jim28277 Registered Member

    Joined:
    Apr 4, 2005
    Posts:
    64
    Location:
    Charlotte, NC
    On my weekly scan, 4 files that were always on my hard disk suddennly showed as infected today. These files are not new and have been on my D-Drive (protected restore drive) since the PC was new from the store.

    See today's Log Excerpt...
    D:\I386\Apps\APP06277\App06277.exe - Win95/SK virus - quarantined - unable to clean - deleted
    D:\I386\Apps\APP01822\App01822.exe - Win95/SK virus - quarantined - unable to clean - deleted
    D:\System Volume Information\_restore{8F7A5040-9305-4BDA-A5EE-E7EE68E6A93B}\RP400\A0066637.exe - Win95/SK virus - quarantined - unable to clean - deleted
    D:\System Volume Information\_restore{8F7A5040-9305-4BDA-A5EE-E7EE68E6A93B}\RP400\A0066638.exe - Win95/SK virus - quarantined - unable to clean - deleted
    Number of scanned files: 499239
    Number of threats found: 4
    Number of files cleaned: 4



    Note that the problem detected related to "win95/SK Virus"

    I assume this was part of the problem that Happy Bytes referred to above. My guess is that I'll need to remove these files from quaratine and put them back on my D-drive but I'm not really sure. Can someone advise what if anything I should do at this point.
     
    Last edited: Feb 7, 2006
  7. DonKid

    DonKid Registered Member

    Joined:
    Jun 27, 2004
    Posts:
    566
    Location:
    S?o Paulo, Brazil
    Good to know it, HB.:D
     
Thread Status:
Not open for further replies.