PDA

View Full Version : Virus positives are not necessarily "Malware"


EMPiRE
13-12-2015, 01:35
The last few days Google Chrome & FireFox are complaining that some files @ GameCopyWorld are "malicious" and that they are blocked by Chrome/FireFox...

Some (crappy) Anti-Virus/Anti-Malware software sometimes find malware in some of the files available @ GameCopyWorld, especially trainers! And this is the reason why this is happening... For now there is no solution for this problem as there are just too many files with false positives!

These are the most common detections:

Hacktool.CheatEngine (trainers made with CheatEngine (http://www.cheatengine.org))
Hacktool.HotKeyHook / Win32/Keylogger.HotKeysHook (older trainers made with the TrainerMakerKit)
Win32/Packed.Themida.*
Win32/Packed.VMProtect.*

All files available @ GameCopyWorld do NOT contain any Malware (or any other crap). ALL these warnings you may see are False Positives, as ALL files are harmless and do no contain any crap!!!

To temporarily bypass this "problem" in Chrome, unset the "Protect you and your device from dangerous sites" option in: Settings (Show advanced settings...) > Privacy

Or just use another browser, like Internet Explorer, to download files!

To be clear: We are totally against malware/crapware of any kind, also in advertising and will do our utmost to run a clean site, as we have done so for the past 17 years!!!

Joe Forster/STA
19-12-2015, 04:22
(Sorry, edited the thread title. Not all people understand what a false positive is and not all know C syntax. :))

False positives are when a virus/malware scanner tells you there's a virus/malware in a file when there's actually none, it just looks like one. This usually occurs with encrypted executables: the more heavily encrypted, the more chance for a false detection. If the scanner can't really find out what's inside, it rather gives a positive, just to be on the safer side of being wrong: false negatives, when no virus/malware is detected in a file but there is one in it, is much riskier.

If you're worried, check your downloads on http://www.virustotal.com. (Yes, it will falsely detect the same "malware" so don't be surprised!)