Welcome, Guest

Author Topic: Malware  (Read 4200 times)

Chubb-R

  • *
  • Posts: 3
Malware
« on: November 18, 2013, 11:52:01 AM »
When I launch Universe Sandbox, avast! registers it as malware!
I am not launching it again until I have confirmation.

blotz

  • Formerly 'bong'
  • *****
  • Posts: 813
  • op pls
Re: Malware
« Reply #1 on: November 18, 2013, 01:07:41 PM »
did you download it from thsi site? if not it could be malware.

Chubb-R

  • *
  • Posts: 3
Re: Malware
« Reply #2 on: November 18, 2013, 02:04:01 PM »
From this site

blotz

  • Formerly 'bong'
  • *****
  • Posts: 813
  • op pls
Re: Malware
« Reply #3 on: November 18, 2013, 02:56:03 PM »
Then it's not malware unless someone "hacked" for lack of a better word, and replaced Universe Sandbox with a different version. I'm pretty sure it's safe, but you can ask Dan (wait for him to reply here).

Darvince

  • *****
  • Posts: 1837
  • 差不多
Re: Malware
« Reply #4 on: November 18, 2013, 04:54:23 PM »
til bong has never used universe sandbox

yes it's safe I've used it for about 200 hours

Dan Dixon

  • Creator of Universe Sandbox
  • Developer
  • *****
  • Posts: 3244
    • Personal Site
Re: Malware
« Reply #5 on: November 18, 2013, 06:07:36 PM »
I'd be shocked if this was true...
What program reported it as malware?
And what did it report specifically?

smjjames

  • *****
  • Posts: 1128
Re: Malware
« Reply #6 on: November 18, 2013, 10:29:12 PM »
I'd be shocked if this was true...
What program reported it as malware?
And what did it report specifically?

He said in the OP that it was Avast that reported it.

Dan Dixon

  • Creator of Universe Sandbox
  • Developer
  • *****
  • Posts: 3244
    • Personal Site
Re: Malware
« Reply #7 on: November 18, 2013, 10:37:43 PM »
Thanks smjjames. Missed that when I read the thread originally.

Tried to submit a false virus in file report using their contact page:
http://www.avast.com/en-us/contact-form.php
... but it kept timing out.

Here's the VirusTotal analysis:
https://www.virustotal.com/en/file/6941f4998c8d31028e70...
... only 1 that shows up as "Win32.SuspectCrc". This is clearly a false positive (meaning that it's incorrectly identified as bad).
« Last Edit: November 18, 2013, 10:49:02 PM by Dan Dixon »

Chubb-R

  • *
  • Posts: 3
Re: Malware
« Reply #8 on: November 19, 2013, 01:36:05 PM »
OK, thanks Dan, It's an awesome game to play now that I'm sure it's safe.
Thx