Virus Alert: GP3 Damage Editor possible virus

spoke: Ok, thx. I downloaded the file you list above and PC-Cillin detected that one too. -- Nos

spoke: OK thx Martin. Guess PC-Cillin is the real virus. :-) -- Nos

Downloaded the damage editor and two other files from http://home.bip.net/martin/ Trend PC-Cillin reports that all three files are infected with the HLLP4080 virus. Anyone else download these files and check them? Could be a false report, but PC-Cillin has never given me a false report before. The three files are: GP3ASTR.zip infected file (GP3ASTR.EXE) GP3Point.zip infected file (GP3POINT.EXE) GP3dam10.zip infectd file (gp3damed.exe) -- Nos

NOMAIL wrote: >Downloaded the damage editor and two other files from >http://home.bip.net/martin/ >Trend PC-Cillin reports that all three files are infected with the >HLLP4080 virus. Anyone else download these files and check them? I downloaded the files, and Sophos Sweep did not find virus in any of them. I then downloaded http://utenti.tripod.it/federico010/05.zip, which by http://utenti.tripod.it/federico010/vir.htm should include the HLLP4080 virus. Sophos Sweep reported that the file was infected with "Weed 1.1, also known as Weed.4080". If HLLP4080 equals Weed.4080, it seems like the damage editor is -not- infected, but I would wait until a 3rd report comes in before executing the files. -- Frode Gill

Norton 2000 which I bought for $9, (inside joke there for the cheap bastard) said that GP3dam10.zip was clean. The last definition update I did was 6/21/00. -- [email hidden] <[email hidden]> wrote in message news:[email hidden]... > Downloaded the damage editor and two other files from > http://home.bip.net/martin/ > Trend PC-Cillin reports that all three files are infected with the > HLLP4080 virus. Anyone else download these files and check them? Could > be a false report, but PC-Cillin has never given me a false report > before. The three files are: > GP3ASTR.zip infected file (GP3ASTR.EXE) > GP3Point.zip infected file (GP3POINT.EXE) > GP3dam10.zip infectd file (gp3damed.exe) > > -- > Nos

On 2 Aug 2000 12:52:24 GMT, [email hidden] (Frode Gill) thus spoke:

Quoted text (8 lines)

>I downloaded the files, and Sophos Sweep did not find virus in any of >them. I then downloaded http://utenti.tripod.it/federico010/05.zip, which >by http://utenti.tripod.it/federico010/vir.htm should include the >HLLP4080 virus. Sophos Sweep reported that the file was infected with >"Weed 1.1, also known as Weed.4080". If HLLP4080 equals Weed.4080, it >seems like the damage editor is -not- infected, but I would wait until a >3rd report comes in before executing the files. >

Ok, thx. I downloaded the file you list above and PC-Cillin detected that one too. -- Nos

On Wed, 2 Aug 2000 08:10:59 -0500, "Greg Cisko" <[email hidden]> thus spoke: >Norton 2000 which I bought for $9, (inside joke there for the >cheap bastard) said that GP3dam10.zip was clean. The >last definition update I did was 6/21/00. Well, I got PC-Cillin for free with my MSI motherboard. :-) I updated it just last week. Execute the file and see what happens. I'm not touching it myself. :-) -- Nos

On Wed, 2 Aug 2000 08:10:59 -0500, "Greg Cisko" <[email hidden]> thus spoke: >Norton 2000 which I bought for $9, (inside joke there for the >cheap bastard) said that GP3dam10.zip was clean. The >last definition update I did was 6/21/00. Do you have Norton set to scan *all* files or just exe files etc? Maybe you should unzip that file and then scan the actual executable so I can rest assured that it is not infected. -- Nos

On Wed, 02 Aug 2000 13:39:59 GMT, [email hidden] (Martin Granberg) thus spoke:

Quoted text (10 lines)

>I remember some people had similar reports from virusscanners for one >or two of the programs back in the GP2 days. False alarms of different >kinds of viruses. > >I'd be very surprised if somehow a virus sneaked into these programs. > >Cheers, > >/Martin >

OK thx Martin. Guess PC-Cillin is the real virus. :-) -- Nos

Hi, On Wed, 02 Aug 2000 12:36:55 GMT, [email hidden] wrote:

Quoted text (9 lines)

>Downloaded the damage editor and two other files from >http://home.bip.net/martin/ >Trend PC-Cillin reports that all three files are infected with the >HLLP4080 virus. Anyone else download these files and check them? Could >be a false report, but PC-Cillin has never given me a false report >before. The three files are: >GP3ASTR.zip infected file (GP3ASTR.EXE) >GP3Point.zip infected file (GP3POINT.EXE) >GP3dam10.zip infectd file (gp3damed.exe)

My virusscanner reports no problems. Scan engines used: F-PROT version 3.07.1204 (signatures database date 2000-08-01) AVP version 3.133.2223 (signatures database date 2000-08-01) The filesizes of the programs are exactly the same as when the compiler created them. I remember some people had similar reports from virusscanners for one or two of the programs back in the GP2 days. False alarms of different kinds of viruses. I'd be very surprised if somehow a virus sneaked into these programs. Cheers, /Martin

Greg, http://www.symantec.com/avcenter/download.html You'd be well off getting the latest defintions :) ds Greg Cisko wrote in message <04Vh5.11732$[email hidden]>...

Quoted text (25 lines)

>Norton 2000 which I bought for $9, (inside joke there for the >cheap bastard) said that GP3dam10.zip was clean. The >last definition update I did was 6/21/00. > >-- > >[email hidden] > > ><[email hidden]> wrote in message >news:[email hidden]... >> Downloaded the damage editor and two other files from >> http://home.bip.net/martin/ >> Trend PC-Cillin reports that all three files are infected with the >> HLLP4080 virus. Anyone else download these files and check them? Could >> be a false report, but PC-Cillin has never given me a false report >> before. The three files are: >> GP3ASTR.zip infected file (GP3ASTR.EXE) >> GP3Point.zip infected file (GP3POINT.EXE) >> GP3dam10.zip infectd file (gp3damed.exe) >> >> -- >> Nos > >

All files. Plus I even right clicked on the file and had norton specifically check that one file. Nada. -- [email hidden] <[email hidden]> wrote in message news:[email hidden]... > On Wed, 2 Aug 2000 08:10:59 -0500, "Greg Cisko" <[email hidden]> > thus spoke: > > >Norton 2000 which I bought for $9, (inside joke there for the > >cheap bastard) said that GP3dam10.zip was clean. The > >last definition update I did was 6/21/00. > > Do you have Norton set to scan *all* files or just exe files etc? > Maybe you should unzip that file and then scan the actual executable > so I can rest assured that it is not infected. > -- > Nos

I did it with live update. I don't generally have it running in the background because it would be a burden with all the games I run. Maybe I need to re-evaluate that :-) -- [email hidden] "Daniel Shirley" <[email hidden]> wrote in message news:l8Yh5.8258$[email hidden]... > Greg, > http://www.symantec.com/avcenter/download.html > You'd be well off getting the latest defintions :) > > ds > > > Greg Cisko wrote in message > <04Vh5.11732$[email hidden]>... > >Norton 2000 which I bought for $9, (inside joke there for the > >cheap bastard) said that GP3dam10.zip was clean. The > >last definition update I did was 6/21/00. > > > >-- > > > >[email hidden] > > > > > ><[email hidden]> wrote in message > >news:[email hidden]... > >> Downloaded the damage editor and two other files from > >> http://home.bip.net/martin/ > >> Trend PC-Cillin reports that all three files are infected with the > >> HLLP4080 virus. Anyone else download these files and check them? Could > >> be a false report, but PC-Cillin has never given me a false report > >> before. The three files are: > >> GP3ASTR.zip infected file (GP3ASTR.EXE) > >> GP3Point.zip infected file (GP3POINT.EXE) > >> GP3dam10.zip infectd file (gp3damed.exe) > >> > >> -- > >> Nos > > > > > >

On Wed, 2 Aug 2000 14:08:34 -0500, "Greg Cisko" <[email hidden]> thus spoke: >All files. Plus I even right clicked on the file and had norton specifically >check that one file. Nada. OK, guess I can run the damage editor safely now then. If my PC get's a virus I'm blaming YOU. :-) -- Nos

The damage editor has a virus. I downloaded it today. [email hidden] wrote:

Quoted text (10 lines)

> On Wed, 2 Aug 2000 14:08:34 -0500, "Greg Cisko" <[email hidden]> > thus spoke: > > >All files. Plus I even right clicked on the file and had norton specifically > >check that one file. Nada. > > OK, guess I can run the damage editor safely now then. If my PC get's > a virus I'm blaming YOU. :-) > -- > Nos

On Thu, 03 Aug 2000 03:32:06 GMT, Mrv <[email hidden]> thus spoke: >The damage editor has a virus. I downloaded it today. Are you serious? What did you use to check it? -- Nos

spoke: Are you serious? What did you use to check it? -- Nos