[done] "Failed - Virus detected" when downloading Warcraft

[NightfallBurst]

Hi,

when I try to download War2Combat401 (Zip) from here: http://en.war2.ru/downloads/ , Google Chrome shows "Failed - Virus detected" error message.

https://ibb.co/Q9VskfM

Google Chrome version: 71.0.3578.98 (Official Build) (64-bit)

Sorry if you already knew about it.

[mousEtopher]

Hi, it's just a false positive & can safely be ignored @NightfallBurst

[jph]

Any idea why it's flagged?

[mousEtopher]

Lamby wrote up some good info about AV false positives here http://forum.war2.ru/index.php/topic,2703.msg50633.html#msg50633 it's about a different app but the basic idea probably applies here as well

[Lambchops]

pffff

Not even close.


https://www.virustotal.com/#/url/ffe7077fa0363127eaf26c7f9fb9b9e897f2f40573877bf25571e39ab547b95d/detection


-- edit --

Note the CLEAN rating from "Google Safebrowsing", whatever that is.

[Lambchops]

There is always the possibility that your computer or connection is subject to some kind of rootkit/DNS hijack etc. and you are actually downloading some other infected file, however this is unlikely.

My guess is that if Google are flagging it, they are doing it solely on the basis that it is an "unknown" (to Google/the NSA) executable being hosted on a Russian domain.

If anyone can be bothered tracking down the correct method for doing so, I would suggest raising an objection with Google.

[Cel]

Yes anytime these kind of issues happen to you, don't forget to send the file/link to the company that flags it they usually have an address or forms you can submit files or links to that effect so that they do proper analysis and stop flagging it in the future this will help removing these stupid alerts for everyone in the future.
 

[Delete mine too]

There is always the possibility that your computer or connection is subject to some kind of rootkit/DNS hijack etc. and you are actually downloading some other infected file, however this is unlikely.

My guess is that if Google are flagging it, they are doing it solely on the basis that it is an "unknown" (to Google/the NSA) executable being hosted on a Russian domain.

If anyone can be bothered tracking down the correct method for doing so, I would suggest raising an objection with Google.

Yep it's been this way for over a year now with the false positives.

Anyways iL has added an auto update feature awhile go. So technically he can install trojan, shell, w/e anytime he wants. The file is clean now but is it later? I would not trust this place at all anymore.

[iL]

Very strange, it have been ok last 4,5 years, and then suddenly "Virus detected" happened.

I made an experiment: just rebuilt the same setup file from the same files (just changed source drive for distrubution from H: to E: or w/e and used new version of installer) and no "Virus detected" message anymore.

I didn't update combat 4.01 in downloads section as i just became ready to release the new version: 4.2.
So, use it and enjoy.
False-positive virus detection fixed there also.