Trojan detected in RVS Community Map Pack 3 & others.
Posted: 18 Mar 2004, 06:40
Several maps and map packs are coming up as being infected with a trojan called Unone with mcafee and the latest DAT files out last night; I suspect that it is a false positive as I can not find information about any such virus in the Virus Information Library on NAI's website:
http://vil.nai.com/vil/default.asp
or anywhere else on the net.
I downloaded clean, and rescanned on a linux pc to make sure it wasn't somehow infected after I had downloaded it; and it did come up infected as well, so I took one of the smaller ones and sent it off to NAI to be analyzed. If past experience is anything to go by I imagine I will hear back from them by the end of the day, as this is not the first false positive I've managed to discover...
[root@xxx mods]# /opt/mcafee/uvscan rvc_map_blackstar_1a.exe rvc_pack_v3.exe rvc_pack_wof2.exe rvc_pack_wof.exe
/opt/mcafee/infected/var/www/html/mods/rvc_map_blackstar_1a.exe
Found the Unone trojan !!!
/opt/mcafee/infected/var/www/html/mods/rvc_pack_v3.exe
Found the Unone trojan !!!
/opt/mcafee/infected/var/www/html/mods/rvc_pack_wof2.exe
Found the Unone trojan !!!
/opt/mcafee/infected/var/www/html/mods/rvc_pack_wof.exe
Found the Unone trojan !!!
http://vil.nai.com/vil/default.asp
or anywhere else on the net.
I downloaded clean, and rescanned on a linux pc to make sure it wasn't somehow infected after I had downloaded it; and it did come up infected as well, so I took one of the smaller ones and sent it off to NAI to be analyzed. If past experience is anything to go by I imagine I will hear back from them by the end of the day, as this is not the first false positive I've managed to discover...
[root@xxx mods]# /opt/mcafee/uvscan rvc_map_blackstar_1a.exe rvc_pack_v3.exe rvc_pack_wof2.exe rvc_pack_wof.exe
/opt/mcafee/infected/var/www/html/mods/rvc_map_blackstar_1a.exe
Found the Unone trojan !!!
/opt/mcafee/infected/var/www/html/mods/rvc_pack_v3.exe
Found the Unone trojan !!!
/opt/mcafee/infected/var/www/html/mods/rvc_pack_wof2.exe
Found the Unone trojan !!!
/opt/mcafee/infected/var/www/html/mods/rvc_pack_wof.exe
Found the Unone trojan !!!