Dwarfs Quest for the Gauntlet, Trojan issue

Which trojan did it register as?

Symantec reports quite a bunch of false positives, use some other AV.

I have had false positives with steam games before.

Note again I'm using Symantec CORPORATE. We pay a gazillion dollars for this. I centrally manage thousands of workstations using this tool. I NEVER, EVER, get false positives with it. This isn't AVG. This isn't Norton. If this tool says it's a Trojan, I genuinely get concerned. It's Trojan.Gen which is basically a generic trojan.

I have NEVER gotten a false positive on any steam game before using Symantec Corporate. And I have hundreds of games. Note the Corporate version is NOT the terrible consumer grade Norton product. Again I manage thousnads of workstations globally with this tool, and ti HAS to catch the bad stuf, but not inundate me with false positives. If it did generate false positives, I'd already be jumping out the window because my inbox would be flooded with junk that users download on a daily basis.

I'm wondering if anyone else has installed teh game and seen the same issue.

https://www.virustotal.com/en/file/d7d75ddeb750e06b0dda7a4b4a73b1806cc66fcfbf664f6d50740ade25b799ed/analysis/1366948134/

Again THIS is why I'm very very worried

You're lucky you got a start.exe. My "install" is missing it and I can't even start the game.

I've run the game and it seems to be working well...

This is what Norton found for me.

http://www.symantec.com/security_response/writeup.jsp?docid=2011-040714-3811-99&vid=4294919976&prod=scss&product=Norton%20AntiVirus%20Online&version=20.3.1.22&plang=sym:EN&layouttype=SOS&buildname=SymantecPartner&heartbeatID=4FBE0401-8E7A-4D00-80DC-6793B249FE6D&env=prod&ispid=1119&sitename=US&vendorid=Symantec&plid=0&skup=21269499&skum=21269499&skuf=21228653&endpointid={4FBE0401-8E7A-4D00-80DC-6793B249FE6D}&partnerid=Symantec&lic_type=64&lic_attr=152594&osvers=6.0&oslocale=iso:USA&oslang=iso:ENG&os=windows

Was the giveaway for a steam key? If the download is from valve, you've got nothing to worry about.

Bump for solved

This thread is full of awesome.

Screenshot from Norton

• PAYS for an AV known for being the worst in existence by people who know stuff about IT
• Wonders why he gets false positives

...

Hugs MSE

What is this "a program is trying to run" alert? It says it's from a system32 folder but I didn't make that and don't know what it is and when I blocked it my computer started acting weird and the screen started turning blue and I don't know what to do. I think I'm infected. Halp pl0x :o

I too won a copy of Guantlet, tried to install it, Comodo popped up saying it's a trojan. The folder itself if Poweroftwotestapp, and contains another folder Love, which aparently is a physics engine.
May be a false positive, but I'd rather wait and see why on earth it is showing up as a trojan in the first place.

Maybe its because theres a dev console attached to the game? A lot of "hack" tools are detected as trojans.

Maybe you should just send the file to Symantec (and others that get alerts to their AV companies) to actually test the file. Only way to be sure instead of saying it can't be wrong!

you're obviously a computer expert.

I use Avast antivirus. Warnings about the Trojans did not get out.

When I installed it, i got a popup from McAfee saying it is a Trojan and it quarantined it.

Screenshot McAfee (dutch): http://bit.ly/Y1O1C0

Just a false positive. You have another huge problem and thats called Symantec CORPORATE. Stop wasting everyones time and start using a real AV software.

Come on, it's just because of the UPX packer they used. Your AV is getting a false positive from heuristics.

By the way, it does not even ask for internet access on the firewall - either way you are good.

Easiest way to get your exec qualified as malware by all crappy antivirusware: non-interactively exec an another external exec in the code from your exec, boom, congratulations, you just made a trojan!... not :-P ;-)

A lot of games use a launcher stub application that launches the proper game exec on run (e.g. to detect some hardware or set some options) and they all get classified as unknown trojan horses by heuristics in antivirus apps.

Love it how the fanboys in this thread bash everyone who doesnt agree with their AV. Cmon,give me your test you pull out that proves yours is the best. Everyone can find one for his AV. (just look at the one for peroxide who makes Symantec one of the best in the test)

Fact is 21/46 give out a warning,which is a fucking lot and every user has the right to be concerned about it,since its not the usual FP that is given by 3-4 AV progs. Although I agree that this is a FP how can anyone here know for sure except he totally checked the file on his own in a professional way? Whole system is based on trust. Btw when a AV doesnt find something it doesnt mean it isn't something...

You think OP is ridiculous because he is concerned over a file that is detected by several AV? I have seen people completely deinstall steam and all games because avira once gave a FP for a steam game that was only detected by avira.

Well,let's just agree that having a working brain is the best AV.