Lingon trainers..

[Joe Forster/STA]

Confirmed, NOD32 gives a warning, also see VirusTotal: http://www.virustotal.com/file-scan/...a7a-1309962545 . That's too much for me, too. I suggest that you don't use the trainer and, if LinGon has a contact address, tell him to use a different EXE compressor/encryptor/whatever.

[EMPiRE]

All trainers from LinGon generate an ESET virus warning, nothing new... and nothing to worry about!

[rkaye]

People are just trying to be safe and it is unreasonable for the community to accept that Lingon's trainers will always give a 'false' positive -- is someone really trying to make the argument that this guy can code complex trainers but he is unable to do so without setting off everyone's AV? gamecopyworld should step up and tell Lingon that they arent going to post his trainers until he can learn to submit code that passes AV's. The problem is that Lingon is the *only* trainer maker who is getting flagged by eset, sophos, and other antivirus' as having a serious trojan. This has been going on for some time, see jarfin's post above regarding Win32/Packed.VMProtect.AAH trojan back in June. The longer he waits to change his code to prevent this, the more and more people are going to post on forums all over the place, these sites will get indexed by google, which will strengthen the tie between Lingon's name with trojan/viri.

+ TR/Black.Gen2 is not h0tkeys, it is WAY more serious of a threat.

+ eset is regularly rated as an extremely good AV with low false positives.

+ I submitted his Deus Ex: HR trainer to both sophos and eset, NEITHER is willing to whitelist it because, while it may (or may not) be malicious, the implementation is both unorthodox and extremely dangerous.

+ Give the community a choice between choosing a +12 trainer that gives a virus warning and a +10 trainer that doesnt -- which do you think is going to get used, and which do you think is going to get flamed?

worse, since his trainers already flag as TR/Black.Gen2, how easy would it be for someone to download his trainers, infect them with a "real" TR/Black.Gen2 trojan and then repost them to a forum as Lingon's? imagine the storm that would ensue then -- youd have a bunch of forum posts saying 'his trainers are fine, dont worry' and lingon's website would say 'hey they are false positives, go ahead' and idiots who believe it would execute the code and *poof* there goes someones pc along with Lingon's reputation.

+ the ONLY reason Lingon is packing his exe's like this is to prevent reverse engineering. For someone skilled enough to code a trainer with more features than anyone else, it is simple laziness to not find another way to protect their code, minus the virus alerts.

Lingon needs to choose:
1. stay lazy, keep your exe's packed the way they are, and accept that people everywhere will associate Lingon and 'malicious trojan.' [in which case, quit your whining about it]
2. change your code so that you arent the only freaking trainer-maker who is getting TR/Black.Gen2 trojan alerts on your releases.

'my releases are clean, i promise.' is an idiotic argument. fix your code or live with the rep.

[Joe Forster/STA]

It seems that, fortunately, noone has been riding the possibility of really infecting Lingon's trainers so far. If they did, we would've received more serious reports about actual trainers.

It is well possible that Empire is accepting Lingon's trainers only from Lingon: this was a simple yet effective solution for h4x0r's trainers after CheatHappens started submitting fake trainers to GCW in his name. If so, it is up to Lingon to decide whether he wants to fuck up both himself and GCW and he's surely smart enough to understand that this would be a major lose-lose situtaion for everyone so what would be the point? If my assumption is right then GCW is a reliable distributor of genuine trainers from Lingon which would be a win-win situation for everyone.

But, again, Empire is the only one who can really answer these questions; I'm just guessing.