PDA

View Full Version : Infected PF files/patches (3.03 to 3.04)



XyZspineZyX
01-27-2005, 11:46 AM
Hi All!

It seems to me that some files on the UBI download section are infected.

More specific, when I try to download the PF upgrade from version 3.03 to 3.04 (merged) from http://patches.ubi.com/pacific_fighters/pf_v303m_to_v304m.exe, my antivirus reports that the file is infected with the worm W32/Sdbot.worm.dam

The message from ViruScan Enterprise 7.0.0 (McAfee) looks like this:
1/27/2005 17:52:31 Deleted \Temporary Internet Files\Content.IE5\STQJ8PYR\pf_v303m_to_v304m[1].exe W32/Sdbot.worm.dam


You may find additional info about this worm, by checking http://vil.nai.com/vil/content/v_126338.htm

Discovery Date: 01/26/2005

Do not panic, as McAfee identifies it as a LOW security threat.

May we get some sort of an official opinion on this? Is my antivirus gone nuts or is this real?

Best Regards,
electric

Capt._Tenneal
01-27-2005, 12:16 PM
I got my 3.04m from 3DGamers or other mirror sites, but it's still OK to be careful and make sure the files are clean. http://forums.ubi.com/images/smilies/25.gif

FoolTrottel
01-27-2005, 01:11 PM
Just downloaded it from the address you gave.
No mention of a virus using McAfee ViruScan Enterprise 8.0... so either your's gone mad, or mines gone blind.... ;-)

DuxCorvan
01-27-2005, 01:25 PM
Same here, no Viruscan alert for me. Maybe you have another source of infection, and your file just got infected... however, I downloaded it more than a week ago, and UBI's files could be infected after that.

Looks strange. http://forums.ubi.com/groupee_common/emoticons/icon_confused.gif

New_York_Flyer
01-27-2005, 01:57 PM
lol look at the discovery date...

1/26/05

Which means its a fairly new worm...which could have been in circulation before that time...

Moses