Larian Studios Forums Divinity - Original Sin Divinity Original Sin - Beta anim_studio.exe - TR/Crypt.zpack.gen7 ?

Hi,

today Avira Free Antivirus detected a trojan in the file "anim_studio.exe".
After putting the file in the quarantine, I forced steam to verify Steam Cache of DOS and it redownlead this file. The antivirus directly detected the trojan again.

This file is not necessary to start the game. So whom should I trust.

Regards,
Alex

never trust in snake oil

Fefe. :P And right you are. ^^

I think its a false positive (or your exe got infected by something after being downloaded).
Virustotal results for anim_studio.exe:
https://www.virustotal.com/en/file/...bb6d99727915205e685127b71c23f0/analysis/

I a duplicate issue on my machine.



From Avira Free Antivirus:

OK, I resubmitted the file to VirusTotal because the previous scan was a month old:
https://www.virustotal.com/en/file/...5e916d808cef8408a71/analysis/1388791577/

Only one antivirus (AntiVir, which is made by Avira) shows a match.
However, lets see what their site says about "TR/Crypt.ZPACK.Gen7":
http://www.avira.com/en/support-threats-description/tid/7414/tlang/en



... meaning that this is *NOT* a known virus, it merely has the *POSSIBILITY* of being a virus based on some heuristics. Since this is the only positive match, and there are reports of Avira marking other apps as viruses:
SWTOR TR/Crypt.ZPACK.GEN
Team Fortress 2
... or Bioshock
... or Crysis 2
... or just about anything, do a google search for "tr crypt xpack gen steam" and you'll get hundreds of threads about false positives, this is apparently a known issue.

If you are still concerned that Avira may be more accurate or faster updating than the 47 anti-virus programs at VirusTotal that say the file is fine, contact Avira about it. There may be something in the program itself, or on their website, where you can send in suspect files or check for false positives.

I sent the file to Avira and it's definitely a false positive.

Hopefully it should get white-listed in a future definition update.