Question regarding Overlord II +10 trainer.

[Nue7ra1]

So, I have this habbit running everything I download through several anti-spyware/virus/malware programs, and the results in the attatched image came up while I was scanning http://m0004.gamecopyworld.com/games...0+10%20TRAINER .

Normally, I wouldn't be to worried, considering this site's pretty good track record of catching malware, but the part where some of the AVs they used are saying "worm" has me concerned, if only becuase I haven't seen a trainer come up as "worm" before. So, my question is, should I be worried about this? Or is it showing up as worm because of some code injection deal that would go straight over my head?

EDIT: Having looked at the file's reputation on there, it has a negative 15 reputation.

[STN]

It is because of the packer he is using

ASPack 2.12 -> Alexey Solodovnikov

Most antiviruses are crappy to the point they aren't able to unpack the packer and just scream virus or worm when they see the file is packed. Another thing i have noticed is some pathetic AVs (it pissed me when i finally figured out) scream virus when the file is below a certain size.

So the trainer in question is completely clean. Our team (deviated) tried to contact some antivirus companies (who were flagging our trainers as suspicious) to make them stop doing so and some of them dropped the detection altogether for all our trainers (Antivir, Norton) but most acknowledged that trainers are clean but they will still flag as suspicious because trainers use GetAsynKeyState and memory modification APIs. Their solution is to buy an expensive certificate (for TRAINERS!!!) and they will drop it. Check this thread out

http://community.f-secure.com/t5/Sec...-as/td-p/49873

Just sharing my experience. Feel free to use the trainer as it is clean, EMPiRE only posts trainers that are clean or gamecopyworld would have a pretty bad reputation by now.

[Grumpy]

Thanks for the detailed explanation STN, much appreciated.

[Nue7ra1]

Alright, thanks for the explanation.