Found Trojan In Downloader

[Zansha87]

Just a heads up to all, I just downloaded the update for 4th edition D&D and received an alert from my Anti-Virus (Avira) which identified a Trojan (TR) in the dandddownloader files. I don't know where it came from, but I have just removed it from my terminal.

It did not do this when I updated the Pathfinder, nor the previous 4th ed update.

[Colen]

Hi there,

We've tested the downloader with multiple different antivirus solutions which haven't found any issues with it - we're confident that this is a false positive being reported by Avira. Due to how viruses are detected these days, the chance of a false positive is relatively high, so I assume the latest version of the downloaded just happens to look similar enough to a certain virus for Avira to freak out about it.

I've submitted it to their "false positive" update service, so they should be able to remove this from their virus listings soon. I'll post in this forum when we hear back from them.

Thanks for your report!

[Colen]

I submitted it to Avira, who quickly replied with the following:

Please find a detailed report concerning each individual sample below:
Filename Result
ddidownloader.exe FALSE POSITIVE

The file 'ddidownloader.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 7.11.41.14.

So this issue should be fixed once your virus definitions update. Hope this helps!

[tkarn]

Yes, it is fixed.

[Zansha87]

I love Hero Lab and have been touting it every chance I get where I work (a local game & hobby store). Nothing like this has ever come up for me and it scared me that someone could do such a thing. I'm glad it turned out to be such a minor error.

I was surprised when it stated that there was a file, "TR/Spy.738304.17" attached to the downloader file.

Keep up the excellent work! I'll keep sending you more customers!

Zansha87