Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Trojan horse in downloaded file

Feb 25, 2010 12:19AM PST

In the download category for role-playing games / console style RPG's, the "Pokemon Light" download is not a safe download. It installs a Trojan Horse in several of the files it places in your computer.

Discussion is locked

- Collapse -
Do you mean this one?
Feb 25, 2010 4:43AM PST
http://download.cnet.com/Pokemon-Light/3000-7538_4-10566392.html?tag=mncol

If so I will report it to the Forum Admin.

Which anti-virus scanner did you use? My own ZA anti-virus found nothing in the downloaded file from that pages download, either the zip file or the extracted file. As a double check I also scanned with Malwarebytes' Anti-malware.

Sometimes anti-virus scanners will report "False Positives", and if you suspect that is the case here, you can report this to your anti-virus web site, for them to check.

Mark
- Collapse -
...yes
Feb 25, 2010 6:27PM PST

Yes, that's the one. I used AVG antivirus Free Edition (v. 8.5). Everything scanned okay when I d'led the file. After running the installation there were several applications listed in the program group. I ran each of them in turn and an automatic scan found an infectd dynamic linked library in my root folder (CHappy.

I played the game and didn't like it so I proceeded to uninstall it. During the uninstallation, the antivirus found several infections in the game files being accessed. It was the same Trojan Horse.

The PC I used had XP Professional with SP3 installed.

- Collapse -
Thannks for that.
Feb 25, 2010 7:34PM PST

I have reported this to Lee the Forum Admin, and he will pass it on to the Download.com team testers.

Many thanks.

Mark

- Collapse -
Got it, I'll have the Download team check it out
Feb 26, 2010 1:40AM PST

THanks for reporting it!

-Lee