• Guest, HEROCRAFT PUBLIC RELEASE IS HAPPENING AN HOUR EARLIER! TONIGHT @ 7PM CST GET READY FOR IT! play.hc.to
    Read up on the guides and new systems! Here.
    View the LIVE Map here @ hc.to/map
    Stuck or have a problem? use "/pe create" to to open a ticket with staff (There are some known issues and other hotfixes we will be pushing asap)
  • Guest, Make sure to use our LAUNCHER! Read more here!

abhack.exe detected as trojan?

sinephase

Air
Joined
Jan 18, 2011
Just had AVG pop up telling me abhack.exe is a generic trojan "Trojan horse PSW.generic8.BANO". abhack is part of the version switcher linked to from the minecraft forums thread before the server was updated.
I think it might be a false positive but the thing that gets me is I just started my computer, did not run the program, and it's not set to launch with windows (if ever this process is). Also, when I looked at more information about it it showed explorer.exe was what was accessed or something.
Anybody else get an alert for that file?

Anyway, just wanted to give you guys a heads up, I sent the file from the vault to AVG for analysis and put my email in so they'll email me with the results :)
 

wolfgang784

Legacy Supporter 3
Joined
Jan 17, 2011
Location
Pennsylvania
I downloaded the switched for the old jars before, and avg gave me no warnings when I scanned it. False positive, or you got it from someone shady who messed with it first.
 

Brutalacerate

AdministRaper
Joined
Jan 12, 2011
Location
Bakersfield, CA USA
False Positive. Probably because of the way it's written. Like a lot of Keygens/Cracks, which come up as false positives because they're written similar to a virus. No worries.
 

sinephase

Air
Joined
Jan 18, 2011
Brutalacerate said:
False Positive. Probably because of the way it's written. Like a lot of Keygens/Cracks, which come up as false positives because they're written similar to a virus. No worries.

I'm guessing the same, just threw me off because it's been on my computer for quite a while, avg scans when I dl files, and apparently explorer.exe was accessing it at boot for no reason, idk if it would be windows indexing but I thought that was another service.
 

Brutalacerate

AdministRaper
Joined
Jan 12, 2011
Location
Bakersfield, CA USA
sinephase said:
Brutalacerate said:
False Positive. Probably because of the way it's written. Like a lot of Keygens/Cracks, which come up as false positives because they're written similar to a virus. No worries.

I'm guessing the same, just threw me off because it's been on my computer for quite a while, avg scans when I dl files, and apparently explorer.exe was accessing it at boot for no reason, idk if it would be windows indexing but I thought that was another service.

I guess it could be Windows' Search Indexer. That shit's turned off on my PC. Haha.
 
Top