|
another Lingon trainer, another trojan...
People are just trying to be safe and it is unreasonable for the community to accept that Lingon's trainers will always give a 'false' positive -- is someone really trying to make the argument that this guy can code complex trainers but he is unable to do so without setting off everyone's AV? gamecopyworld should step up and tell Lingon that they arent going to post his trainers until he can learn to submit code that passes AV's. The problem is that Lingon is the *only* trainer maker who is getting flagged by eset, sophos, and other antivirus' as having a serious trojan. This has been going on for some time, see jarfin's post above regarding Win32/Packed.VMProtect.AAH trojan back in June. The longer he waits to change his code to prevent this, the more and more people are going to post on forums all over the place, these sites will get indexed by google, which will strengthen the tie between Lingon's name with trojan/viri.
+ TR/Black.Gen2 is not h0tkeys, it is WAY more serious of a threat.
+ eset is regularly rated as an extremely good AV with low false positives.
+ I submitted his Deus Ex: HR trainer to both sophos and eset, NEITHER is willing to whitelist it because, while it may (or may not) be malicious, the implementation is both unorthodox and extremely dangerous.
+ Give the community a choice between choosing a +12 trainer that gives a virus warning and a +10 trainer that doesnt -- which do you think is going to get used, and which do you think is going to get flamed?
worse, since his trainers already flag as TR/Black.Gen2, how easy would it be for someone to download his trainers, infect them with a "real" TR/Black.Gen2 trojan and then repost them to a forum as Lingon's? imagine the storm that would ensue then -- youd have a bunch of forum posts saying 'his trainers are fine, dont worry' and lingon's website would say 'hey they are false positives, go ahead' and idiots who believe it would execute the code and *poof* there goes someones pc along with Lingon's reputation.
+ the ONLY reason Lingon is packing his exe's like this is to prevent reverse engineering. For someone skilled enough to code a trainer with more features than anyone else, it is simple laziness to not find another way to protect their code, minus the virus alerts.
Lingon needs to choose:
1. stay lazy, keep your exe's packed the way they are, and accept that people everywhere will associate Lingon and 'malicious trojan.' [in which case, quit your whining about it]
2. change your code so that you arent the only freaking trainer-maker who is getting TR/Black.Gen2 trojan alerts on your releases.
'my releases are clean, i promise.' is an idiotic argument. fix your code or live with the rep.
|