DaJ Trojan?

[buzzkill]

I ran a rotuine scan last night and Malwarebytes Anti-Malware detected a "Trojan Agent" in DaJAngband121/DaJAngband.exe. I've never had a problem with Malwarebytes and flase positives before so I'm a little nervous. Can anyone else scan DaJ with thier favorite scanner and confirm/deny this?

[Pete Mack]

Originally Posted by buzzkill

I ran a rotuine scan last night and Malwarebytes Anti-Malware detected a "Trojan Agent" in DaJAngband121/DaJAngband.exe. I've never had a problem with Malwarebytes and flase positives before so I'm a little nervous. Can anyone else scan DaJ with thier favorite scanner and confirm/deny this?

I hadn't downloaded this one yet. Did it find the same one in DaJ 1.20?

[Matthias]

antivir didn't complain when I started it

[buzzkill]

Originally Posted by Pete Mack

I hadn't downloaded this one yet. Did it find the same one in DaJ 1.20?

Not that I'm aware of. It (malwarebytes) found 3 "trojan agent" items in the recycle bin on a previous "quick scan", but the path was long and I didn't bother to scroll to see actual the infected object, though the (recently deleted) DaJ120 may have been in the bin at the time. Prior to this incident, I've never had a false positive with any roguelike, and I run a pretty clean system in general.

EDIT: Upon reviewing the log, it was indeed DaJangband.exe (presumably 120) that caused the 3 previous hits.

[JohnCW9]

Originally Posted by buzzkill

I ran a rotuine scan last night and Malwarebytes Anti-Malware detected a "Trojan Agent" in DaJAngband121/DaJAngband.exe. I've never had a problem with Malwarebytes and flase positives before so I'm a little nervous. Can anyone else scan DaJ with thier favorite scanner and confirm/deny this?

My Norton 360 has marked the site as unsafe for a awhile so I have never downloaded from it

[zaimoni]

Originally Posted by JohnCW9

My Norton 360 has marked the site as unsafe for a awhile so I have never downloaded from it

Said site has relocated to GoogleCode from Awardspace...which one are you referring to (or are we thinking about the even older one?)

[Arralen]

If in doubt, upload the file on http://www.virustotal.com/

If the result is inconclusive -but only then!!- upload it to http://analysis.avira.com/samples/index.php

[Matthias]

virustotal returns 0/41. Wow I've had exes of commercial programs with more false positivs than that Buzzkill's scanner isn't on the list of scanners used btw

[JohnCW9]

Originally Posted by zaimoni

Said site has relocated to GoogleCode from Awardspace...which one are you referring to (or are we thinking about the even older one?)

It probally was Awardspace, I just checked the latest The google and there was no problem.

John

[will_asher]

My virus software gave me warnings about Awardspace, but never about a DaJAngband file. I don't know how the file would get infected with anything (even a false warning) just by being linked to on Awardspace.
Actually, I just noticed you're talking about DJA 1.2.1 which was released after I had moved to Google sites and quit using Awardspace. I just opened the virus software on this computer (McAfee) to check it out, but I can't see a way to tell it to scan one particular file. If anyone finds out why it's saying this, let me know. I don't know how the file could've gotten infected with anything.