Virus found after latest update

hi guys,

after the last update yesterday my antivirus keeps find a trojan in a folder called Buawd, the file with the virus in this folder is dated the same as the date on the version number at final fantasy 14. its TR/Crypt.ZPACK.5402

my avira antivirus keeps putting this file in quarantine but the file keeps getting back on my pc, i guess when i play the game. i have send these file to avira lab and they have confirmed this is malware.

here is there report
File ID Filename Size (Byte) Result
27758061 p183ki117n2591uoc...b4.vir 343.71 KB MALWARE
27758061 p183ki17s6cev10lc...f6.vir 343.71 KB MALWARE
27758061 p183ki1b1m8nj19bi...m8.vir 343.71 KB MALWARE
27758061 p183ki1eqd3g21qej...p9.vir 343.71 KB MALWARE
27758061 p183ki1iob1noh1gm...eb.vir 343.71 KB MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
p183ki117n2591uoc...b4.vir MALWARE

The file 'p183ki117n2591uoce8cg5o5b4.vir' has been determined to be 'MALWARE'. Our analysts named the threat TR/Crypt.ZPACK.5402. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system. Detection is added to our virus definition file (VDF) starting with version 7.11.95.246.

can anyone help please

Quote:

---

Originally Posted by markshim

hi guys,

after the last update yesterday my antivirus keeps find a trojan in a folder called Buawd, the file with the virus in this folder is dated the same as the date on the version number at final fantasy 14. its TR/Crypt.ZPACK.5402

my avira antivirus keeps putting this file in quarantine but the file keeps getting back on my pc, i guess when i play the game. i have send these file to avira lab and they have confirmed this is malware.

here is there report
File ID Filename Size (Byte) Result
27758061 p183ki117n2591uoc...b4.vir 343.71 KB MALWARE
27758061 p183ki17s6cev10lc...f6.vir 343.71 KB MALWARE
27758061 p183ki1b1m8nj19bi...m8.vir 343.71 KB MALWARE
27758061 p183ki1eqd3g21qej...p9.vir 343.71 KB MALWARE
27758061 p183ki1iob1noh1gm...eb.vir 343.71 KB MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
p183ki117n2591uoc...b4.vir MALWARE

The file 'p183ki117n2591uoce8cg5o5b4.vir' has been determined to be 'MALWARE'. Our analysts named the threat TR/Crypt.ZPACK.5402. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system. Detection is added to our virus definition file (VDF) starting with version 7.11.95.246.

can anyone help please

---

It's a false positive.

Avira is known to be the worst Anti-Virus on the market.

Don't worry about it.

EDIT: I read that Avira themselves confirmed it to be malware. Just goes to show they are just horrible.

Noone else has this issue, then again, i guess not everyone uses that horrible Anti-Virus software Avira :p

change your av

http://www.av-test.org/no_cache/en/t...t_no%5D=132313 for example

I prefer

http://www.av-test.org/no_cache/en/t...t_no%5D=132331

restart your computer go into safe mode. Safe mode will only run things on your PC that absolutely need to be running. Run your anti virus in safe mode and it should take care of it. Let me know if you have any other questions I may be able to help.



NOTE:Also I see some people talking anti virus. Microsoft essentials is a great anti virus. Its free and made from microsoft. I use it and would suggest trying it

I suspect you got it from somewhere else because I dont have that folder or that file.

Quote:

---

Originally Posted by svann

I suspect you got it from somewhere else because I dont have that folder or that file.

---

Hmmmm now that you mention it... Websites who sell gil/gold etc for mmorpgs do give players keyloggers and are classified as malware, and they usually install themselves into the gamefolders afaik. :eek:

Quote:

---

Originally Posted by Lotuslo

restart your computer go into safe mode. Safe mode will only run things on your PC that absolutely need to be running. Run your anti virus in safe mode and it should take care of it. Let me know if you have any other questions I may be able to help.



NOTE:Also I see some people talking anti virus Microsoft essentials is a great anti virus. Its free and made from microsoft. I use it and would suggest trying it

---

it used to be good but the recent tests shows that it can't even catch the most normal viruses so I'd say no

Quote:

---

Originally Posted by MisaCeliousa

it used to be good but the recent tests shows that it can't even catch the most normal viruses so I'd say no

---

Yeah, it used to be good when it came out, but viruses evolve, Microsoft does not.

Either a false positive, or something else installed the malware.

Quote:

---

Originally Posted by MisaCeliousa

it used to be good but the recent tests shows that it can't even catch the most normal viruses so I'd say no

---

I actually beg the differ. But I'm not here to talk about whats the best anti virus because there isn't one.

(OP) Look at it this way. The best way to keep from getting trojans or almost any anti virus (malware, spyware etc.) is stop clicking on pop ups. Even better get ad block plus. I haven't got a virus in years. It's easy I don't download anything from a shady site. I don't click on pop blockers. IMO easy to stay away from this kind of stuff *shrugg

Quote:

---

Originally Posted by Lotuslo

NOTE:Also I see some people talking anti virus. Microsoft essentials is a great anti virus. Its free and made from microsoft. I use it and would suggest trying it

---

Common Sense = Best Anti-Virus Ever

http://ts3.mm.bing.net/th?id=H.45649...57674&pid=15.1

Quote:

---

Originally Posted by Facespasm

Common Sense = Best Anti-Virus Ever

http://ts3.mm.bing.net/th?id=H.45649...57674&pid=15.1

---

Herp derp not reading my last post. VERY SMART YOU ARE!!!

Quote:

---

Originally Posted by Lotuslo

Herp derp not reading my last post. VERY SMART YOU ARE!!!

---

You posted while i was writing. I just can't be bothered re-editing my post!

Quote:

---

Originally Posted by Keiraen

Either a false positive, or something else installed the malware.

---

I would say this about wraps it up best. It could very well be genuine, had the OP absorbed malware from elsewhere. Maybe download a trial version of a reputable AV and scan it for peace of mind I suppose. :)

Quote:

---

Originally Posted by markshim

hi guys,

after the last update yesterday my antivirus keeps find a trojan in a folder called Buawd, the file with the virus in this folder is dated the same as the date on the version number at final fantasy 14. its TR/Crypt.ZPACK.5402

my avira antivirus keeps putting this file in quarantine but the file keeps getting back on my pc, i guess when i play the game. i have send these file to avira lab and they have confirmed this is malware.

here is there report
File ID Filename Size (Byte) Result
27758061 p183ki117n2591uoc...b4.vir 343.71 KB MALWARE
27758061 p183ki17s6cev10lc...f6.vir 343.71 KB MALWARE
27758061 p183ki1b1m8nj19bi...m8.vir 343.71 KB MALWARE
27758061 p183ki1eqd3g21qej...p9.vir 343.71 KB MALWARE
27758061 p183ki1iob1noh1gm...eb.vir 343.71 KB MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
p183ki117n2591uoc...b4.vir MALWARE

The file 'p183ki117n2591uoce8cg5o5b4.vir' has been determined to be 'MALWARE'. Our analysts named the threat TR/Crypt.ZPACK.5402. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system. Detection is added to our virus definition file (VDF) starting with version 7.11.95.246.

can anyone help please

---

Avira is the best anti-virus that helps you install virus into your PC :)

guys avira isn`t the only antivirus to say this is a trojan and this is the first virus i have had using avira and i have used it for 6 years.

https://www.virustotal.com/en/file/2...4013/analysis/

hi guys,

just letting you know i found the virus, it was from a email that i thought was a scam i got last week. i had deleted the email but i forgot to delete it from the deleted emails folder aswell so it stayed on my pc.

Avira will false positive on the word "The". it's crap