Hi, I've just downloaded Americas Army 2.5 program from gamespot.com. After finished downloading my trusty NOD32 prompt saying its "Win95/SK Virus". Yes I have my NOD32 updated (1.1397). I think its a false positive. Should I send the file to ESET (the file is 903MB)? Please advise. Thanks. Regards, Liw
Ehm.. I've plaied Americas Army since the 1.5 version, to todays 2.5 and have never had a false positive with it. Hmm.. probably something added in the one you downloaded from Gamespot... Try the Tracker to download from..
It also found Win95/SK on my puter in Quake 4 & The Movies demo installers. Using NOD32 2.51.20 / 1.1397 (Spil = Games) Quake 4 deleted a few days ago. I thought it was fixed by now though.
This has nothing to do with the heuristic - Win9X/SK is a special detection plugin. Somehow there was a mistake in the File Section Check-Flags for this Detection (a condition which was always true even when it was not) This isn't a big problem and will be fixed ASAP. I'm tomorrow at the Information Security 2006 Conference so i'm not sure if it's done 'till tomorrow, but we're already aware of this problem and it will be solved shortly. HB.
On my weekly scan, 4 files that were always on my hard disk suddennly showed as infected today. These files are not new and have been on my D-Drive (protected restore drive) since the PC was new from the store. See today's Log Excerpt... D:\I386\Apps\APP06277\App06277.exe - Win95/SK virus - quarantined - unable to clean - deleted D:\I386\Apps\APP01822\App01822.exe - Win95/SK virus - quarantined - unable to clean - deleted D:\System Volume Information\_restore{8F7A5040-9305-4BDA-A5EE-E7EE68E6A93B}\RP400\A0066637.exe - Win95/SK virus - quarantined - unable to clean - deleted D:\System Volume Information\_restore{8F7A5040-9305-4BDA-A5EE-E7EE68E6A93B}\RP400\A0066638.exe - Win95/SK virus - quarantined - unable to clean - deleted Number of scanned files: 499239 Number of threats found: 4 Number of files cleaned: 4 Note that the problem detected related to "win95/SK Virus" I assume this was part of the problem that Happy Bytes referred to above. My guess is that I'll need to remove these files from quaratine and put them back on my D-drive but I'm not really sure. Can someone advise what if anything I should do at this point.