• Please note: In an effort to ensure that all of our users feel welcome on our forums, we’ve updated our forum rules. You can review the updated rules here: http://forums.wolflair.com/showthread.php?t=5528.

    If a fellow Community member is not following the forum rules, please report the post by clicking the Report button (the red yield sign on the left) located on every post. This will notify the moderators directly. If you have any questions about these new rules, please contact support@wolflair.com.

    - The Lone Wolf Development Team

Found Trojan In Downloader

Z

Zansha87

Member
Just a heads up to all, I just downloaded the update for 4th edition D&D and received an alert from my Anti-Virus (Avira) which identified a Trojan (TR) in the dandddownloader files. I don't know where it came from, but I have just removed it from my terminal.

It did not do this when I updated the Pathfinder, nor the previous 4th ed update.
 
Hi there,

We've tested the downloader with multiple different antivirus solutions which haven't found any issues with it - we're confident that this is a false positive being reported by Avira. Due to how viruses are detected these days, the chance of a false positive is relatively high, so I assume the latest version of the downloaded just happens to look similar enough to a certain virus for Avira to freak out about it. :(

I've submitted it to their "false positive" update service, so they should be able to remove this from their virus listings soon. I'll post in this forum when we hear back from them.

Thanks for your report!
 
I submitted it to Avira, who quickly replied with the following:

Please find a detailed report concerning each individual sample below:
Filename Result
ddidownloader.exe FALSE POSITIVE

The file 'ddidownloader.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 7.11.41.14.
Click to expand...

So this issue should be fixed once your virus definitions update. Hope this helps!
 
Thanks!

I love Hero Lab and have been touting it every chance I get where I work (a local game & hobby store). Nothing like this has ever come up for me and it scared me that someone could do such a thing. I'm glad it turned out to be such a minor error.

I was surprised when it stated that there was a file, "TR/Spy.738304.17" attached to the downloader file.

Keep up the excellent work! I'll keep sending you more customers! :D

Zansha87
 
Last edited:
You must log in or register to reply here.
Back
Top