CK Virus?

[ZechsMerquise73]

I got a virus called "Rogue.Crusader" that has installed itself to my Program Files\Paradox Interactive\Crusader Kings area. Obviously not a coincidence. It also made a backup in my appdata/virtual storage.

In the spirit of the most recent Paradox game (Victoria II) it has started causing massive lag on my computer. This is the first real virus I've had in about 2 years; thanks guys. I wonder how I got it? Last CK related third party website I've been to was for the multiplayer grand campaign. And then there are those "better" pictures for the CK II cover art that people made.


Do you happen to know a good free virus removal program? All this junk just scans and does nothing about the virus.

 

[Kallocain]

What, you think we included the virus on the disc?

You should try nod32, kaspersky or panda. They are either free or have free trials that should let you remove this virus at least. Try to google the name for removal instructions as well.

 

[ZechsMerquise73]

I figured you'd be a little more concerned that someone is targeting your customers and software with malware attacks.

 

[OrangeYoshi]

I figured you'd be a little more concerned that someone is targeting your customers and software with malware attacks.

Well what can Paradox do? Have them arrested? You yourself said you think you got it from a third party website. There isn't much they can do about that.

 

[Kallocain]

Now you made me google it. Since no other anti-virus site than Malwarebytes seem to have any records of this virus, chances are that it is a false positive.
Crusader Kings is not really available in numbers large enough to be the target of a specialized virus.

 

[Nikolai]

I've got this before. It have to be installed by one of the GG downloads(I have at least DV on there, not sure if I have the original in digital form too), as I got the warning after installing the game on a newly reinstalled computer a while back. Thinking of it, I think I got it a long time before that too, right after Vista was released(bought a new computer with it back then). Letting the antivirus "fix" the problems means it deleting the .exe, as it can't find a better solution.

I don't think it is a real virus though, it's probably a false positive.

 

[Darkrenown]

DR investigates!

http://forums.malwarebytes.org/index.php?showtopic=66016

It was a false positive and has been corrected.

 

[SeanleDarc]

My G-Data Security tells me that the launch file from GG is a trojan. i need to disable my security to install from the launch file.

Edit: Yesterday i tried it again, this time i didnt got any problem