Backdoor / Virus In Game

Aveyond Install Always Tries To Implement Backdoor.SDBOT

from Stardock Forums

Hi All, Just to let you know that recently I did a post cause Aveyond wouldn't install. Every time it installs the file AVEYOND.EXE implements Backdoor.SDBOT (Might have the name slightly wrong can remember it 100% right now, will go find out after this post) It is my nortons internet security 2008 that picks it up. Hope the makers can rectify this ! I would like to play the game !

41,791 views 13 replies
Reply #2 from GalCiv2 Forums Top

Interesting. Avast also recognizes that game as having a backdoor.

 

Please inform the developers of this.

Groupy 2 - Organize multiple applications into grouped tabs on your Windows desktop
Reply #3 from Stardock Forums Top

This is a false positive that various AV apps started up about a few weeks ago.  I notified Eset (NOD32) about it, but haven't heard anything back.

Reply #5 from GalCiv2 Forums Top

Quoting Yarlen, reply 3
This is a false positive that various AV apps started up about a few weeks ago.  I notified Eset (NOD32) about it, but haven't heard anything back.

 

 

Meh. I trusted Avast and promptly uninstalled. Guess I'll have to start over again. I hope they either fix it in Aveyond or let the AVs know about it.

Reply #6 from Stardock Forums Top

Quoting wareagle10, reply 4
how can I get those things installed.
I presume you mean the Anti-Virus Applications not the game !?!

Just buy the Antivirus App and install it by following the prompts !

I use Nortons Internet Security & It cost me about $30AUD ($20USD) through e-Bay

Dont get Nortons Antivirus as you will miss out on all the internet features and they cost the same !

They do have a thing called Nortons 360, But I always get Internet Security as I don't use the extra features.

Simple to install if you know how, if not just get one of those cheap techies to come out and install it for you, should cost you about $15USD

Reply #7 from GalCiv2 Forums Top

For the record: Even after several AV database updates, this false positive remains.

 

Is this problem being communicated to the developers?

Reply #8 from Sins Forums Top

Not the developers issue really, it's the anti-virus companies, they need to fix their signatures I think

Reply #9 from Stardock Forums Top

Quoting Zanyth0x42, reply 8
Not the developers issue really, it's the anti-virus companies, they need to fix their signatures I think
I Completely disagree, there is no way it is a false positive, because if you let it then you will find the virus, will do the things listed in the knowledge base regarding the backdoor.sdbot . The virus is real it is the real deal that updates itself through the internet and do things with ICQ (Which luckily i don't use). Just wondering how did you come to the conclusion that it is a false positive ?

Reply #10 from Sins Forums Top

Edit: Please Delted misread post

Reply #11 from Elemental Forums Top

False positives are not that rare with antivirus applications.  Read up on the difference between type 1 and type 2 statistical errors, hopefully that may put some lights on the situation.

Reply #12 from Stardock Forums Top

Well I have contacted the developers at http://www.amaranthia.com/  and their point was that there is a virus called "Game.exe" and they say that it is the file game.exe that is causing the false positive. Problem is there is no "Game.exe" it is actually aveyond.exe that contains the virus. If you download the game from their site you will find no-virus. Problem is if you bought the game through stardock / impulse your key dosn't work with the one downloaded from http://www.amaranthia.com/ . Both Impulse & Amaranthia provide v2.00.004 (The Latest Version). I tried to download the aveyond programme from impulse, let the anti-virus remove the aveyond.exe file and replace it with the one from the aramanthia site. But then when i launched it through impulse the game thought it was still a locked trial copy ! But at least it was worth a try. But this leads me to believe that it is the Impulse master copy which contains the virus. I am going to send the corrupt aveyond.exe to symantec later tonight and i am sure they will thoroughly test it for the real deal virus, gee i hope it is a false positive, but everything I have seen it do so far points to it being a real virus ! If anyone has any tricks up their sleeve for getting it working, not including turning off your antivirus and hoping for the best, then please share. Cheers

Reply #13 from Demigod Forums Top

All anti-viruses are worthless pieces of crap anyway.