URGENT Virus infecting hotseat players.

**The Saint** · March 08, 2011, 05:06 PM

Well, as the title states, we have noticed that a virus has been spreading through our hotseats.
More information here: http://www.twcenter.net/forums/showthread.php?t=431553

Originally Posted by grouchy13

:
Win32/Heur, also mentioned as Virus Win32 Heur is a dangerous self-mutating polymorphic trojan , typically installed on windows system without victims knowledge. The Win32/Heur virus infects PC's via dubious filesharing applications, corrupt media files, spam emails and porn related web sites. Once infected, Win32/Heur virus will modify Windows win32 system files, and install additional trojans, worms and viruses onto the infected computer. The Win32/Heur trojan is usually detected with the "Virus found Win32/Heur" alert and may activate fake Dr. Watson security warnings and redirect Internet Explorer and FireFox browsers to sites like ripetv.com or crackle.com. Trojan Win32/Heur malware is severe security and privacy risk that can alter/delete crucial system files, disable antivirus and firewall software and hijack both local and network computers.

Originally Posted by Dave Scarface

I am afraid its bad news.. My anti virus programs are up to date and the scans say I am clean. However when I try to install Kingdoms patch 1.5 I get an error and my AVG warns me the virus is detected. Therefore instead of downloading Kingdoms patch 1.5 from gamershell I searched on the internet and downloaded it from fileplanet instead. Once it was downloaded I just scanned it and it said 2 virus infections were found. I didn't even need to bother trying to install it.

Therefore my conclusion is that the trojan is still present on my computer somewhere and copies itself to the Kingdoms EU patch for some reason

Strange that the main game and Kingdoms can be reinstalled okay. This means that I cannot update to Kingdoms 1.5 and I am out of all hotseats until further notice

Dave

Any help would be appreciated.

**irishron** · March 08, 2011, 05:11 PM

My Kingdoms 1.5 patch is from may have been Gamershell from a long time ago. I have had no problems with it and has not been flagged for viruses.

**The Saint** · March 08, 2011, 05:15 PM

Originally Posted by irishron

My Kingdoms 1.5 patch is from may have been Gamershell from a long time ago. I have had no problems with it and has not been flagged for viruses.

It is probably not a virus from Gamershell.
Someone must have gotten the virus elsewhere, and since we upload and download .sav files constantly in order to play our hotseats, it seems we have infected each other. It shows up on the Kingdoms.exe file though...

**Top-Tier-Tech** · March 08, 2011, 05:21 PM

Originally Posted by The Saint

Someone must have gotten the virus elsewhere, and since we upload and download .sav files constantly in order to play our hotseats, it seems we have infected each other.

LOL, Some guy goes to a porno site and then the entire community gets a virus

Reinstalling windows is the only surefire way to be guaranteed you get rid of it. Otherwise try Malwarebytes or something along that line.

**SonOfCrusader76** · March 13, 2011, 06:58 PM

Originally Posted by The Saint

It is probably not a virus from Gamershell.
Someone must have gotten the virus elsewhere, and since we upload and download .sav files constantly in order to play our hotseats, it seems we have infected each other. It shows up on the Kingdoms.exe file though...

What, so you can get a virus from just playing a flippin' online game??

**The Saint** · March 13, 2011, 07:09 PM

Originally Posted by SonOfCrusader76

What, so you can get a virus from just playing a flippin' online game??

If the file you are passing to each other is infected, yes.

Also, I think it was just a false positive from AVG. Mine is working fine now and AVG shows no problems.

**Drtad** · March 08, 2011, 09:13 PM

Very strange, I haven't been playing multiplayer (or single player for that matter) kingdoms, but just today AVG said I had the Win32/Heur virus. Could it be that a recent AVG update is causing it to make a mistake?

**irishron** · March 08, 2011, 10:09 PM

It would not be the first false-positive AVG has thrown.

**Incontinenta Buttox** · March 09, 2011, 03:31 AM

I am one of those infected, as my AVG is showing that I had this virus. I doublt that it was a false-positive, as the game (M2TW and mods) keeps freezing, to the point where it's unplayable.

**irishron** · March 09, 2011, 10:23 AM

Mine was working fine an hour ago.

**danny0085** · March 13, 2011, 06:02 PM

If you are fed up with windows virus you can install linux ubuntu and add software like office 2007, nero, ares, adobe reader, fireworks and so on. Even you can install a Windows 7 theme.

**Top-Tier-Tech** · March 13, 2011, 06:09 PM

Originally Posted by danny0085

If you are fed up with windows virus you can install linux ubuntu and add software like office 2007, nero, ares, adobe reader, fireworks and so on. Even you can install a Windows 7 theme.

lol

Only someone with an extreme bias would say that in response to the OP's issue.

**SonOfCrusader76** · March 13, 2011, 06:57 PM

Originally Posted by danny0085

If you are fed up with windows virus you can install linux ubuntu and add software like office 2007, nero, ares, adobe reader, fireworks and so on. Even you can install a Windows 7 theme.

What's Linux like for gaming though?

**Top-Tier-Tech** · March 13, 2011, 07:50 PM

Originally Posted by SonOfCrusader76

What's Linux like for gaming though?

No Windows game supports Linux. Although the project is open sourced so there is a version which works with many games I believe. It's a big pain in the neck though when you encounter problems.

**irishron** · March 13, 2011, 07:14 PM

Good to hear it.

**fierywokbar** · March 16, 2011, 11:23 PM

Hey folks. Credits to Irish for directing me here from my thread

We've all seem to have had this trouble with Win32/Heur, anyone have any ideas on what to do AFTER the virus (or lack thereof if AVG was producing a false-positive) is gone? Because my PC is now running like it's got a hippo strapped to its back and its ridiculous (I'm working in safe mode right now). I'm thinking of dual booting Windows 7 and Linux (I currently have XP service pack 3, but I hear that's not supported anymore).