Weirdly, the problem is only with Av1. GON, LOT and Aveyond 2 are working perfectly with Kaspersky

1) McAfee
2) 4.7.0.752 Patch 4
3) Aveyond 2
4) No clue
Supposed virus: Generic backdoor!qp

A couple of hours ago Norton alerted to a trojan virus in Aveyond GoN. None of the others seems to be affected right now. The game has been on my computer for awhile now without problems so it's probably just an update gone wrong at Norton. Just aggravating to have to get information on what to do to get the game working again. Please help!

Norton Internet Security
16.7.2.11
Gates of Night
either late November 11 or early November 12, 2009
Trojan Horse

@Pookie9 - There should be something in Norton's settings that lets you tell it to ignore certain areas of your computer. You would just tell it to ignore anything in your GoN folder.

...and then reinstall the game

1.Norton 360
2.Version 3.0
3.Aveyond LoT and GoN
4.November 12th
Norton is identifying these games as Trojans. I have tried uninstalling and redownloading but Norton immediately deletes the game.

1) Norton 360 Premier Edition
2) 3.5.2.11
3) GoN (I haven't tried re-installing any of the others.)
4) 11/12 & 11/13

It had never identified your games as viruses before, but now it does, identifying the exe file as a Trojan Horse. Everything is there other than the actual Aveyond - gates of night.exe file. I believe this was caused by the latest definitions version - 2009.11.12.025.


(It was easy to add the file to my exclusions list, but it would be nice to have it fixed in Norton's definitions. )

1) Anti-virus name
Norton Internet Security 2009

2) Anti-virus version
16.7.2.11

3) Game that anti-virus deleted
Gates of Night

4) Date when the deletion occurred
Friday, November 13

1) Norton Internet Security 2006

2) version 15.0.0.178

3) Lord of Twilight & Gates of Night
says it's a Trojan Horse

4) 11/15/2009

Have been playing for months, then Norton wiped it out and if I try to re-install it blocks it.

I did put them in my exclusions. Can't wait until I get rid of Norton in Feburary. I have had nothing but problems with it. Will probably go with Panda when the current subscription runs out.

I have Norton Antivirus and it is saying the Lord of Twilight and Gates of Night have trojans. What can we do?

Go into Norton's settings and find a tab or button called "Exceptions" or something along those lines. Here, you can tell Norton to ignore your Aveyond folders where the games are installed.

Then just reinstall the games that got messed up.

I was re-playing GoN when a truck hit a power pole knocking out our power on Thursday (November 12). Everything worked fine until then!

Now, I get the "trojan horse" message. I have Norton Version 16.2.11.

I just really need to re-play - I currently have Edmund married to an Orc! That has GOT to be fixed!

lol - as strange as it may seem, your trojan horse message is unrelated to the truck hitting the power pole Amanda will contact these anti-virus providers and get them to update their database (again). Hopefully everyone will get updates at about the same time that will allow them to play the games once more.

When her system rebooted after the power outage it probably ran its antivirus definition update program (set to run on OS startup) automatically which installed the new problematic definitions.

So, in a tangential way, it is related to the power outage, just not in the way one might be thinking.

I added the aveyond files to my anti-virus exceptions and it still detects the Trojan Horse. It appears that a lot of players are having the same problem with the Norton programs. I have Norton 360 so I guess I'll check back in a couple of weeks to see if amaranthia can get the problem taken care of.

http://home.comcast.net/~nekohibiki/001.png

http://home.comcast.net/~nekohibiki/002.png

http://home.comcast.net/~nekohibiki/003.png



I know the one for Aveyond2 is infected now.

After telling my antivirus to ignore it and running the file, my computer was infected and half the functions were locked out from me then.

I had to reformat my comp to factory conditions to get it working again now.

Not happy with this situation here now.:(

@Neko - From where did you download Aveyond2? If you got it from here or another respectable game portal, then it definitely doesn't have a virus. It's a false positive.

Well, there's a number of possible scenarios here:

1) Neko's system was already infected with a true trojan and it compromised the Aveyond EXE's, so these were actual detection events and not false positives, but has nothing to do with the actual software as provided by Amaranth Games.

2) Neko got them from a less than reputable source and they were indeed infected with a trojan, so, as above, these were true detection events, but also has nothing to do with the actual software as provided by Amaranth Games.

3) Neko's system was infected from another source around the same time and these detection events were indeed false positives and adding the Amaranth Games EXE's to the exclusion list had nothing to do with the deterioration seen on the system, also meaning that it had nothing to do with the actual software as provided by Amaranth Games.

4) The detection events involving the Amaranth Games EXE's were indeed false positives, but s trojan either was already present or was subsequently introduced into the system and infected the EXE's, however, since they were on the exclusion list the infection of the EXE's went undetected and allowed the trojan to compromise the system. This would mean the software from Amaranth Games as provided was clean but acted as a vector for the trojan since it was no longer being monitored by the antivirus software.

Etc...

Without a detailed forensic analysis the true nature of the situation Neko experienced will never be known.

I would advise that no one add the Amaranth Games software to their exclusions list and wait for the next round of definitions to be provided by Symantec or their respective antivirus/antimalware software provider that will correct this false positive heuristic detection behavior.

Adding the Amaranth Games EXE's to your exclusions creates a blind spot for your antivirus/antimalware software which could be exploited by an actual malicious/infected program and could compromise the integrity of your system.

I'm not sure when it happened but my Norton deleted my LoT.exe file. I have:

Norton Internet Security
Version 15.5.0.23
Only my LoT game is gone. My other Aveyond games are fine.

I tried to uninstalling and reinstalling my LoT but Norton treats the exe file as a trojan so my computer won't install the exe file. I tried adding the games files as an exclusion but I still can't get the game to install. What am I missing here?

Norton Internet Security
Version 16.7.2.11
It says Auto-Protect quarantined Gates of Night and Lord of Twilight on 11/13/09.

It also flagged a browser cache file, so I'm not sure if this is really a false positive or if they were actually infected.

I'll probably uninstall/reinstall once this gets fixed.

I got them both from here, though, so they weren't infected to begin with.

EMSI's anti-malware product called A-Squared is giving Aveyond I a positive for malware. The results claim the offending trojan as:

Backdoor.Rbot!IK

I downloaded the game on this site, but when I went to Plimus to pay for the license, A-Squared wanted to block the site as a known malware infector. Not sure what's going on there. I added rules that would allow the payment, and am now getting ready for the final battle of the game. No suspicious behavior otherwise. Will do a bit of research on the result of the scan, and see what I can come up with. Would sure hate to have to delete the game, as I've enjoyed it, and was looking forward to exploring many more.

Edit:
To be on the safe side, I'm going to uninstall and delete the game, and run some anti-malware programs that I have and keep updated. Will let you know what they say, and if there are any residuals after uninstalling and deleting the game.

Update:
Everything's perfectly fine. I went to safe mode and scanned with several different types of anti-malware (Avast, A-Squared, Malwarebytes), then rebooted and did two online scans. Looked over a Hijack This! log, too. Nothing suspect at all. You'd think if an infected file had been executed, it would have left some indication. The games are safe, and I'm convinced that for some reason they are getting a bad rep. These companies need to update their heuristics, for sure. Well, off to begin the game again, from the beginning. It's so much fun, I'm not going to mind a bit!