Is that keylogger or just remote control?

[Former]

Well,friend of RME send me his map editor and I scanned it for safe.Can someone tell me its dangerous?


http://www.virustotal.com/pl/analis...aeae667642527ed9b0f78b1a869f1f25e9-1246044221

 

[Rexxar]

Its not certain, but it could be a virus, especially since its such a specific virus; Gamethief.tibia.

It's always better to download from the official source, their website:

Download - Remere's Map Editor (RME) - An Open Source Map Editor for Open Tibia

 

[Former]

Thanks,but i need for old client.

 

[Rexxar]

Old client? To my knowledge RME supports down to 7.6, do you need an older mapeditor or something?

 

[Former]

Wait i will edit this post.I've scanned now RME from Ferrus distro and it has it too except newpheur_pe,but i hear that's not virus just nod32 look it like virus. Virustotal. MD5: 6df2511ed638f44279b7a80e3a4a587b Win32.GameThief.tibi

 

[Rexxar]

Well if you scanned a newer version of RME and it showed up the same thing then I suppose it's nothing but a false positive and safe to use.

 

[Former]

OK,so the newest RME haven't any virus ,so it's clean and safe,but I've scanned just install file,not package.rar , other RME version was scanned from rar.

 

[Rexxar]

Well if the newest version doesn't give off any viruses and the one you got does, it could mean that the one you got is infected, keep that in mind.

 

[Former]

Newest RME after install.I made in rar and scanned and see that.
Virustotal. MD5: a53cb9d2aec58a4e7a07e0e2082b7dbd Win32.GameThief.tibi

 

[Rexxar]

Ah okay, well then it should be no problem... That virus alert is most likely just a false positive then.

 

[Former]

What is then NewHeur_PE?People says that only NOD32 detected it ,nothing else its not virus,but i'm not sure.

 

[Epic]

Just download the RME from his official website man, don't even bother in scanning other things. XD

 

[EvulMastah]

What is then NewHeur_PE?People says that only NOD32 detected it ,nothing else its not virus,but i'm not sure.

NewHeur_PE | ESET Threat Encyclopedia

 

[Former]

Just download the RME from his official website man, don't even bother in scanning other things. XD

Have you noticed that last scan was from RME official site?

 

[Rexxar]

From what I can gather of that NewHeur_PE thing, it basically means "I detected something which is SIMILAR to a virus in my database". So it could just be a false positive, a program which is not a virus being flagged as a virus.

 

[Epic]

Im using RME for 2 months and my NOD 32 never said a single thing good luck anyways

 

[Former]

I'm not talking about Newheur_Pe its nothing wrong look post 2x up ,i'm saying about gamethief and i'm not saying that Remere is hacker......

 

[Rexxar]

Well here's the case. There's probably over 200 people using RME, and no one of them has ever complained about getting hacked or something. Which means that the map editor is most likely virus-free and the thing that pops up is nothing but a false positive.

If the file that you scanned gives off the same virus warning as a new fresh copy of RME, downloaded from the official RME website, then that means that they are identical in terms of possible viruses, and since we previously made it clear that said "virus" is just a false warning, both of the downloaded files that you got, both the one from your friend, and the one from the official RME website, is safe.

However keep in mind that even if those virusscan websites gives you an "OK", it does not always mean that they are safe, so I would still suggest using the latest version from RME's website.

 

[Former]

Dowloaded from his site and it got,but he tell me its false positive.

 

[Rexxar]

Dowloaded from his site and it got,but he tell me its false positive.

That's what I said... Both gives the same alert, thus its most likely a false positive on both and such, both are most likely safe.