Page 1 of 1
Viruscan : cloak.dll is infected by a virus : unrealIrcd !
Posted: Wed Jun 08, 2005 1:44 pm
by EMorel
Hi,
I found no information about that on the forum. If you scan unrealIRCd directory with Mcafee viruscan, it finds a virus named "UnrealIRCd" on files cloak.dll and XXX.cloak.dll.
Do you know why ? Is there a mean to correct that ?
Thanks
Eric
Posted: Wed Jun 08, 2005 2:45 pm
by Syzop
Well, that's either a) false or b) some virus infected your unrealircd. In either case, all our mirrors are ok... And in fact.. if you want to be sure you downloaded a correct unrealircd you could have used md5sum/sha1sum or even better: gpg to check the signature.
Anyway, these are the md5sums for cloak.dll, you could verify yours with
md5sum...
non-ssl:
Code: Select all
C:\Program Files\Unreal3.2\modules>md5sum cloak.dll
ac597181c5c19af78b3b83731165f701 *cloak.dll
ssl:
Code: Select all
C:\Program Files\Unreal3.2\modules>md5sum cloak.dll
2cc004522a9513d9e4601f679158a6d1 *cloak.dll
If the output is neither of the above, then I guess some virus infected your unrealircd ;p.
PS: This is, of course, assuming you downloaded Unreal3.2.3 via unrealircd.com
Posted: Wed Jun 08, 2005 3:49 pm
by EMorel
Well, I'm sure it's false. But, in fact, if you scan the directory with the option "scan for malicious programs", you ll see that cloack.dll and XXX.cloak.dll are considered as infected by a malicious program "UnRealIRC".
I use VirusScan Professional Edition v7.00.5000 and the last datfile.
Eric
Posted: Wed Jun 08, 2005 4:37 pm
by Syzop
Yeah, pretty much every app developer has had users reporting them their app is a virus, it's nothing new :P.
Complain to mcafee?
Posted: Wed Jun 08, 2005 4:49 pm
by Matridom
I though mcaffee was a virus?

Posted: Wed Jun 08, 2005 8:47 pm
by Mr_S
Matridom wrote:I though mcaffee was a virus?

no thats microsoft

Posted: Thu Jun 09, 2005 7:43 am
by Stealth
If someone would whine to McAffee, the next virus database will not have UnrealIRCd marked as a virus...
Posted: Sun Jul 03, 2005 7:39 pm
by Mouse
its windows....
you know some people use unrealircd on comprised machines. thats why av companies decided to add unrealircd to their virus datebase
well you can exclude it anyway