Page 1 of 1

pr_0957_full_part3of3_setup.exe contains a worm

Posted: 2010-10-15 23:07
by angst107
Well, somtime on Tuesday or Wednesday I noticed that PR was available to preload through torrent, I don't trust torrents at all because most of the stuff available out there through torrents contain a virus, but I shrugged off all the worries because I've downloaded all the mods from .8 up to now with nothing wrong, until today.

I was just installing all 3 of the parts of .95. I was down to the last part, setup #3. As soon as I finished the install, Kaspersky warned me that pr_0957_full_part3of3_setup.exe has behaviour similar to a worm, the detected threat tells me it's a PDM.Worm.P2P.generic. I couldn't think how at all this would be possible, when the install was finished and it asked me to update punkbuster, Kaspersky terminated the application.

So, I've only got one question. What the hell just happened?

Re: pr_0957_full_part3of3_setup.exe contains a worm

Posted: 2010-10-15 23:20
by munky91
Installers can often be mistaken for viruses by security software. Its probably a false positive.

Re: pr_0957_full_part3of3_setup.exe contains a worm

Posted: 2010-10-15 23:35
by Trooper909
The key word here is acting like a worm if you read what the PR installer does you would know that it deletes the old PR files and/or overwrites them behaving like a worm or other virus.


I would change the title of this thread if I were you.

Re: pr_0957_full_part3of3_setup.exe contains a worm

Posted: 2010-10-16 02:21
by Liam[EEF]
Ive got kaspersky as well, it is paranoid but that isn't a bad thing. It just doesn't like the fact that it is installing software that has the potential to do harm. All it is is punkbuster updating the svc files and checking them. The only thing you have to do is pause kaspersky protection for the minute or two that it is running by right clicking on the system tray icon and then resume protection after.

For more info on the svc's look here if your still worried:
PunkBuster Online Countermeasures

Re: pr_0957_full_part3of3_setup.exe contains a worm

Posted: 2010-10-16 02:22
by WhatMan

Re: pr_0957_full_part3of3_setup.exe contains a worm

Posted: 2010-10-16 05:04
by AncientMan
Firstly, sure, check the checksums.

Secondly, definitely no worm. The only difference really between part 3 and the other 2 parts is it contains mumble, dice alt-tab fix .dll, pbsetup, and pbsvc. Perhaps your AV doesn't like those, but there's definitely no virus/trogan/worm/spyware/bad stuff in the PR installers.

Re: pr_0957_full_part3of3_setup.exe contains a worm

Posted: 2010-10-16 06:55
by CommunistComma
You say MOST torrents contain a virus and out of the hundreds of torrents I've dled FEW have had a virus, and none of them were major.
That virus stuff is spread by retards and people who throw TM on the ends of things.

Re: pr_0957_full_part3of3_setup.exe contains a worm

Posted: 2010-10-16 09:16
by Trooper909
CommunistComma wrote:
That virus stuff is spread by retards and people who throw TM on the ends of things.

This ^^
seen so many on this forum so fearfull of torrents.
Companys,media including the all knowing internets just put that rummor about so you dont go DL there **** for free.Ofc none of us on this upstanding forum will ever do a thing like that :)

torrents are a great way to download and with allmost 0 chance of file corruption and is like 10times faster than downloading from one stressed server like filefront for example.

Chances of getting a virus really depends on how much you know about files and viruses tbh
like if you was just to type project reality 97 into a torrent search engine than go DLing a file that is 20mb in size your getting a virus that simple really.


I myself have had 0 virus protection other than what is with windows by defult and Iv never had one for many years now since I learned what the hell im doing