AVG found win32 virus in anticheat.dll

[X'tyfe]

if r1ch were a hacker, he would have a large botnet going with anticheat
but we trust him...

[SidDManiac]

If you could update your AVG definitions and scan again over the next 2-3 days, I have been told this will be fixed in an upcoming virus database.

...2 updates later , still flagged. Guess it will take a while. Holding breath... 

[The Happy Friar]

switch AV programs. 

[DeanRW]

Avira Antivir flags anticheat.dll as "Virus or unwanted program 'TR/Crypt.XPACK.Gen [trojan]"

Tonight was the first time I played in many months and it caught me by surprise. Glad I am not alone!hehe

[R1CH]

I sent another email to AVG:

thank you for your email.

We analyzed your file and it is not detected by AVG with the latest
virus database (270.6.4/1617). Please update your AVG to solve this
issue

We are sorry for the inconvenience.

I tested with mine and surprise, still detected 

[jägermonsta]

angry ip scanner gets flagged as malicious by sav, not surprised about avg

[R1CH]

Avira Antivir flags anticheat.dll as "Virus or unwanted program 'TR/Crypt.XPACK.Gen [trojan]"

Tonight was the first time I played in many months and it caught me by surprise. Glad I am not alone!hehe

Thanks for letting me know.

The file 'anticheat.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

[R1CH]

Should be fixed in AVG now too.

[SidDManiac]

Should be fixed in AVG now too.

Sorry.Still flagged after update a few minutes ago...

[QwazyWabbit]

AVG tends to have a high false-positive rate, especially the heuristic scanner. I suppose that's a good thing, better to be safe than sorry, but it sure is a hassle sometimes. A high false-alarm rate also desensitizes the users to alarms (boy who cried wolf) that do matter.

NOD32 is a better A-V if you can afford to buy it or feel like cracking the 30-day trial. It has a better heuristic scanner and doesn't false out on programs like anticheat.dll.

I just scanned a freshly downloaded copy of anticheat.dll on a system equipped with AVG 7.5.523 Network Edition with Virus Base Version 270.06.07/1631 and it came back clean (no virus found in anticheat.dll).
AVG identified the file checksum as FFEF65C8C000F17E41F10E9F1141C75E.

(It's been a while since I used AVG freeware.)

A possible remedy for AVG users for when r1ch updates the dll or AVG drops the check somehow:
1. Temporarily disable AVG antivirus file system protections.
2. Download and install anticheat.dll to the Quake II folder.
3. Add anticheat.dll to the "Potentially Unwanted Programs Exceptions" list of AVG.
4. Enable AVG normal file system protections.

[R1CH]

I just re-tested with AVG8, still no detection. If using 7.5 you should probably update since that version is deprecated.

[QwazyWabbit]

I have no control over that. That particular installation is on a server at a business and they manage their whole net from it. What they do with it is their choice, not mine. AVG supports that version and the server is downloading current virus profiles for 35 machines. Whether it is deprecated or not, it's working for them. Sometimes it pays to be behind the power curve anyway, especially in mission-critical systems that are otherwise functioning.

[R1CH]

Since you have a paid version, drop them a line at virus@grisoft.com with the file / version info attached and ask them to look into it.

[DeanRW]

Avira Antivir is back to flagging it as a virus again 

[R1CH]

Yup I released an update recently so all the anti virus heuristics are back to detecting it. Ughhhhhhhh