FLSDCT Link Has A Virus

Excuse me for posting 2 times, but I got a reply from Martin who coded FLSDCT and wanted the forums to show that there is something new in this thread.
FLSDCT contains a “download to memory”-command. This means, that FLSDCT wants to download data (the server list) without asking if it is allowed to. Some viruses use a comparable command to download further malicious data. Some heuristic detections can’t differentiate what it really is and does and start giving alert for nothing. That’s all.

Greetings, Max.

Thank you for the clarification, Max. It is much appreciated.

R.

FLSDCT has just been updated, virus warnings should not appear any more after you have let FLSDCT update itself. Contact me if you encounter any problems.

Greetings, Max.

I have sent i think…twice an email, if somebody can put the WTS server on that program to.
Hope somebody read and found my mail, and now with the new update put the WTS server also in it.

If not, maybe it’s possible to ad it.

Thanks so far

Sry, can’t find any mail containing “WTS” or wicked witch but one from Predator from december 31st 2007 where Predator asked for help with putting his picture to the FL-Server-Ring from HavenAdmins, but due to a lack of time I am not active there for quite a time now.
Where did you send your mail to? Did you use the “Join”-form of FLSDCT? I get emails sent by that form about daily, so if there is some kind of bug, we should find out about that.
To get WTS into FLSDCT, what IMHO is at highest priority, perhaps send me a PN containing your server’s IP, forum-url (if available), your 88x31px minibanner-url (if available) and an url where your mod can be downloaded (if available and you want your mod to be downloadable via FLSDCT).

Hope I could help…
greetings, Max.

In the new update verstion it wasn’t in also.
So i sent another email trough that program.
In the past i wasn’t able to do that, and did it on another way.

Hopefully you got the email now, and i also sent it to PM.
Only forgot to put a “subject” title.

And thanks for your anser and time so far

Your data will be added soon, thanks for your patience. As you didn’t create a password for editing your server’s data in FLSDCT, I created one.

II just got a call that Avast Antivirus now is detecting “Win32:Trojan-gen {Other}” when you want to download FLSDCT. It’s caused by the same function: FLSDCT wants to download the serverlist to memory. We are working on that problem. It might take some time to solve that problem, as we need to test each new try with a maximum of different antivirus-programs. I hope, we’ll be done with that by the end of next week.

Greetings,
Max.

Yes, we are there !
And thank you very much again

K, that last problem is solved now, too, no Antivirus is reacting on FLSDCT any more as far as we could test it.

It was not caused by that “download to memory - command” I believed first but by a routine searching the registry to find Freelancer.exe’s location and if it’s not there (for exapmle when you got a copied instead of an installed version of Freelancer) it opens a window and asks you to locate Freelancer.exe manually. Not to have to do it again and again every time you start FLSDCT, it created the Freelancer-entry to registry. This was, what made Avast Antivir nervous, as several trojans try to make registry entries.
Now instead of making that entry, FLSDCT creates an .ini-file and wirtes the Freelancer.exe-location to it.

Greetings, Max.

Thank you again Max for solving this prob

Nice catch.

And once again…
I just got informed that AVG is detecting a virus in FLSDCT again, we’re already working on it, I’ll keep you imformed.

I hate this paranoic shit.

Edit:
Until we find a solution, you might help yourself by setting your antivirus-program’s heuristic less paranoic. Heuristics compare the all code they find to known virus-codes. In this example, it’s that “download”-command again as it seems. So what AVG says is a so called “false positive”. We definitely need a command like that to get the serverlist downloaded to FLSDCT.
We’ll contact AVG and tell them about that problem, maybe we’ll get help there. I hope so as I am not interested in having to rebuild FLSDCT each time an antivirus-program is being updated. ^^

Thanks for your patience,
greetings, Max.

NOD32 isnt detecting anything…