Latest XFIRE update flagged as Virus

[hobbit]

LMAO! I guess I should have put the file name in my post.

 

C:\Program Files\Xfire\downloads\Two_D's_One_cup.mp4

 

I thought it was an ET demo. Now I know better

Hey, thats my file path...

[Desu]

NoGood, just send em to me

[NoGooD]

Quick update. Apparently NOD wasn't the only AV that was detecting it. The file I scanned was after NOD had deleted the suspected file from the update. Here is a scan that was posted on Xfires forums

 

http://www.virustotal.com/analisis/da2ace47e9e8b8f728f3f07a01512c13c64171bdc1bccb6b6b450cc0a3c7bbcb-1266362921

 

Update: updating NOD32 to above 4873 will stop you from getting this false positive.

 

Here is the latest scan from Virustotal as of this afternoon:

http://www.virustotal.com/analisis/2b55f1c8c35ce887ea56842caf58fdaa885df9c99055da1066754d90bc7b18f4-1266422327

 

Here is an update from Raincrow over at Xfire if you feel like reading it

 

First things first. Please refrain from flaming each other, swearing, and any other inappropriate behavior. I know you guys are frustrated and upset I completely understand but the forum rules still apply. Keep it clean and constructive. Flaming each other doesn't help the situation. Thank you.

 

We are in contact with ESET and will be working with them to resolve the issue and on ways to prevent this problem from happening again in the future.

 

For right now, continue to run NOD32 as you have been. No one at Xfire has ever said to disable your anti-virus software. We ask that you please be patient while we work with ESET to resolve this issue.

 

Please also check your ESET Virus Database version and make sure you are running the latest which at this time according to the ESET ThreatSense® Updates is NOD32 - v.4875 (20100217). Users in this thread have stated that v.4873 or higher does correct this issue.

 

Since there have been some common topics in this thread I figured I'd give a bit of FYI on those topics.

 

Automatic Updates

Xfire updates its software application as you know every three weeks. These updates include more than just game support. The updates include bug fixes and new features as well as the latest game support. To my knowledge and I've been working here for coming up on six years now we have never stated that we would ever make the updates optional. The biggest reason for that is because protocol changes, etc. happen and without the latest version your Xfire software would not be able to communicate with the Xfire servers any longer.

 

Game Support updates

Game Support updates do not follow any type of set schedule but in most cases happen at least once a week. It contains one small file that downloads and applies itself in the background and you likely will not even notice. While these updates do exist in the main Xfire update once every three weeks they have no relation to why an Xfire update is done every three weeks. Also, without receiving the game support update if your friend was playing one of the new games your Xfire client wouldn't understand what game they are playing.

 

Viruses and AV software

Protect yourself and be wary. We agree. Too often people are not careful enough and end up with a virus on their computer or allowing a trojan horse and losing precious data and information. You are doing the right thing by informing us of the problem and protecting yourself. At this point you just need to be patient and let us work to resolve the problem.

 

Virus False Positives

This does happen and there are numerous reasons of why it could happen. It doesn't always mean that something is wrong with the software itself that triggered the false positive. It also does not mean that the anti-virus software is wrong for doing so either. The job of the AV program is to prevent your computer from being compromised. The AV program will likely always err on the side of caution. You just please need to understand there is no conspiracy here. We are not trying to deflect blame, we are not trying to not take responsibility, and we are not trying to infect you with malicious software either. It is obviously not in our best interest to do so. We like being a part of the gamer community because guess what, we are gamers too. We build our application for the users as much as ourselves because we too are users. And if the latest ESET Virus Database version no longer is detecting us as a virus, it's not a conspiracy either. It is obviously not in their best interest either to allow a virus out into the wild.

 

I hope that last part made sense. In any case we thank you for your patience, cooperation, and understanding while we get this all worked out.

 

RC

 

So it wasn't my porn after all.

Edited February 18, 2010 by NoGooD