Viruscan : cloak.dll is infected by a virus : unrealIrcd !

[EMorel]

Hi,

I found no information about that on the forum. If you scan unrealIRCd directory with Mcafee viruscan, it finds a virus named "UnrealIRCd" on files cloak.dll and XXX.cloak.dll.

Do you know why ? Is there a mean to correct that ?

Thanks

Eric

[Syzop]

Well, that's either a) false or b) some virus infected your unrealircd. In either case, all our mirrors are ok... And in fact.. if you want to be sure you downloaded a correct unrealircd you could have used md5sum/sha1sum or even better: gpg to check the signature.

Anyway, these are the md5sums for cloak.dll, you could verify yours with md5sum...

non-ssl:

Code: Select all

C:\Program Files\Unreal3.2\modules>md5sum cloak.dll
ac597181c5c19af78b3b83731165f701 *cloak.dll

ssl:

Code: Select all

C:\Program Files\Unreal3.2\modules>md5sum cloak.dll
2cc004522a9513d9e4601f679158a6d1 *cloak.dll

If the output is neither of the above, then I guess some virus infected your unrealircd ;p.

PS: This is, of course, assuming you downloaded Unreal3.2.3 via unrealircd.com

[EMorel]

Well, I'm sure it's false. But, in fact, if you scan the directory with the option "scan for malicious programs", you ll see that cloack.dll and XXX.cloak.dll are considered as infected by a malicious program "UnRealIRC".

I use VirusScan Professional Edition v7.00.5000 and the last datfile.

Eric

[Syzop]

Yeah, pretty much every app developer has had users reporting them their app is a virus, it's nothing new :P.

Complain to mcafee?

[Matridom]

I though mcaffee was a virus?

[Mr_S]

I though mcaffee was a virus?

no thats microsoft

[Stealth]

If someone would whine to McAffee, the next virus database will not have UnrealIRCd marked as a virus...

[Mouse]

its windows....


you know some people use unrealircd on comprised machines. thats why av companies decided to add unrealircd to their virus datebase

well you can exclude it anyway