Trojan Warning from Anti-Virus Program on Launcher.exe file

Hello Ryuuzaki (or anyone who may able to assist),

Thanks for the reply. I understand the concept of Trojan Virus and agree with your explanation. However, the anti-virus did not only just quarantine the launcher.exe file, but also some others files that I have, including IE, and Civilization IV. It is as if the virus has spread. I was able to remove them. After cleaning all quarentine files, scanning 2 twice (each with no virus result), uninstall Perfect World Client, reinstall fresh copy, the warning occurs again, and this time, the spread includes win32. If the launcher is indeed only dispersing patch data for Perfect World, then why would traces of "fake" Trojan be detected for IE, Win32, or even Civilization IV when I have no sign of virus infection prior the installation of Perfect World?

The virus is defined as Trojan Generic.ADV

Thanks again,

Vambrance

Hi guys,

Thanks. Trend Micro basically points to launcher and quarentine it, along with any files which share the trace.

Here is what exactly happened:

1. There is absolutely no virus on my computer prior this incident has occurred, my anti-virus is up to date, and is on 24/7.

2. The anti-virus is scheduled to do complete system scan everyday after 10:00 pm.

3. Previous patching did not trigger quarantine in anyway prior yesterday activation for Perfect
World.

4. Last night schedule scan, no error.

5. Decide to play after the scan (10:30 pm PST), that's when the quarantine occurred.

6. When the Quarentine occurs, it didn't just happen for the laucher, but also for 4 other files, one of them is IE (IE was not on)

7. Since my computer was runs it's daily scanned with no error found, and I haven't used IE in between, I am pretty sure is not a virus conducted by IE from some foreign sites.

8. Once I removed all the quarantine files, I did 2 scans again, once with my own anti-virus, another trial using online scan, no error found.

9. However, when I re-activated the launch, the quarantine activated again, this time, it infected 9 files, 2 of them from my win32, and 2 from Civilization 4. I have CIV4 installed since May 2008, and never has it given me any virus.

10. Again, removed all quarantine files, then uninstall client, scan, no sign of virus.

11. Install PW client again, quarantine reoccurred.

12. Remove again, 3 systems scans last night (2 online, 1 offline), and another one this morning, no error.

That's what made me uncomfortable. Why would it relate itself to other non-associated PW files (from other programs too no less) ? I can most certainly tell my anti-virus program to exclude PW, but not when it is showing sign that it's spreading like a wild-fire to other programs... I heard about the elementclient issue, but how does that make my other files, like IE, win32, and even Civilization IV to be quarantined as well?

Any thoughts from anyone?

Vambrance

Dear Administrator,

I too, download the client directly from Perfect World site (I use both the download.exe, as well as the torrent version). Both are creating the same kind of result. And for your information, a couple of my friends also share the same problems.

I maintain my computer frequently, and do have some knowledge on Computer system in general. Assume if the Trend Micro is confused about PW's files being Trojan Generic.ADV carrier, the spread to other non-related programs is definitely a concern, since eventually a good portion of the data for my computer will be quarentined, whether they maybe related to Perfect World or otherwise.

Your assistance on this matter will be greatly appreciated.

Regards,

Vambrance