Bay 12 Games Forum

Norton found a Trojan in the newb pack that I downloaded from http://dffd.bay12games.com/file.php?id=7622.

Discovered:
January 13, 2014
Updated:
January 13, 2014 9:19:06 AM
Type:
Trojan, Virus
Infection Length:
Varies
Systems Affected:
Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP
SONAR.Heuristic.120 is a heuristic detection for processes based on certain attributes.


Antivirus Protection Dates
Initial Rapid Release version October 2, 2014 revision 022
Latest Rapid Release version October 2, 2014 revision 022
Initial Daily Certified version January 7, 2014 revision 041
Latest Daily Certified version January 7, 2014 revision 041
Initial Weekly Certified release date January 15, 2014

----

File Actions

File: c:\lazy newb pack\dwarf fortress 40_24 starter pack r14\dwarf fortress 40_24 starter pack r14\ starter pack launcher (pylnp).exe Removed
File: c:\users\ken\appdata\local\temp\_mei23482\ microsoft.vc90.crt.manifest Removed
Directory: c:\users\ken\appdata\local\temp\ _mei23482 Removed
____________________________

System Settings Actions

Event: Process start (Performed by c:\lazy newb pack\dwarf fortress 40_24 starter pack r14\dwarf fortress 40_24 starter pack r14\starter pack launcher (pylnp).exe, PID:2348) No action taken
Event: PE file creation: c:\users\ken\appdata\local\temp\_mei23482\ msvcr90.dll (Performed by c:\lazy newb pack\dwarf fortress 40_24 starter pack r14\dwarf fortress 40_24 starter pack r14\starter pack launcher (pylnp).exe, PID:2348) No action taken
Event: Process start: c:\lazy newb pack\dwarf fortress 40_24 starter pack r14\dwarf fortress 40_24 starter pack r14\ starter pack launcher (pylnp).exe, PID:2348 (Performed by c:\lazy newb pack\dwarf fortress 40_24 starter pack r14\dwarf fortress 40_24 starter pack r14\starter pack launcher (pylnp).exe, PID:2348) No action taken
____________________________