Hey, we have forums!

Author Topic: Aquarua.exe (demo) Virus Collision w/ Comodo as Heur.Pck.MoleBox  (Read 9689 times)

0 Members and 1 Guest are viewing this topic.

Offline molotovjester

  • Mini Bit
  • **
  • Posts: 3
    • View Profile
Running a scan on my computer, and the Aquaria.exe file from the demo version is detected by Comodo anti-virus as Heur.Pck.MoleBox .

Probably a false positive, but the file appears to be submitted to Comodo for analysis, and just to be sure, I re-downloaded a fresh copy (from the url below) and the same detection was made.
http://www.flashbangstudios.com/mirror/AquariaDemo.2007.12.07.exe

Just a quick FYI

MJ

Offline Alec

  • Administrator
  • Dream Bit
  • **********
  • Posts: 2211
    • View Profile
Re: Aquarua.exe (demo) Virus Collision w/ Comodo as Heur.Pck.MoleBox
« Reply #1 on: April 06, 2009, 12:25:19 am »
MoleBox is a packing program that was used to compress data.

Offline Kailieann

  • Bit
  • ***
  • Posts: 36
    • View Profile
Re: Aquarua.exe (demo) Virus Collision w/ Comodo as Heur.Pck.MoleBox
« Reply #2 on: April 06, 2009, 12:40:57 am »
MoleBox is a packing program that was used to compress data.

Heur.Pck.MoleBox .

In other words, it's not a false positive. Comodo is accurately picking up something that could, theoretically, be used to introduce harmful data to a system, but is probably going to be benign 90+% of the time (as, I assume, is the case with the Aquaria demo).

Offline Alec

  • Administrator
  • Dream Bit
  • **********
  • Posts: 2211
    • View Profile
Re: Aquarua.exe (demo) Virus Collision w/ Comodo as Heur.Pck.MoleBox
« Reply #3 on: April 06, 2009, 05:12:39 am »
I'm not positive, but I think its just noticing that the EXE was modified with MoleBox launching code which is intended. (the exe gets modified by molebox so that it can read the compressed data automatically)

My guess is its not a big deal.