Options(see also the menu on the left)

Discord Server

Join our Discord community and chat with other train sim enthusiasts!

Firstly remember that all files are downloaded and then checked briefly before being approved. This process means that they run through the virus checker on the machine that does the download and you can be sure that if a file flags up a virus we obviously do NOT approve it.

So why are some of you seeing virus reports, particularly in files that have been on the site for ages in some cases?

There has been a potted history between ClickTeam Installer and the various Anti Virus (AV) vendors. There have been many (a dozen?) instances of this happening where suddenly any clickteam installer shows up as having a virus.

Normally it only shows up for one AV product, none of the others, and it's usually down to a faulty detection algorithm that is reporting it incorrectly.

One product in particular, AVG, has had this issue three or four times now at least.

The current spate all seem to be related to AVG users, I've downloaded a couple of the reported files to my work PC that runs the latest updates for Sophos Enterprise and had no problems reported.

What this probably means is that it's another case of false detection, however it could still be a real thing so be safe and steer clear of reported files until your AV product clears them after they've resolved the issue... if the problem is still there in a couple of weeks then it'll need re-investigating.

What you can do to help is as follows:

Take any file that is reported as having a virus and you don't think should, and upload it to this great independent AV checking service:

http://virusscan.jotti.org/

It will check the file against a dozen or more different AV products and report back if it finds anything. It's done real time over about 10 minutes (depending on their load) so you can sit and watch it to see what it reports.

If you see it reported as an issue ONLY with the virus product YOU are using then it's most likely a false positive - however you still should NOT be opening the file (better safe!).

In the case of a potential false positive you should copy/paste the report and send it along with a zipped (and preferably password protected) copy of the executable (don't forget to include the password) via email to your AV vendor and ask them to check it out for you.

Don't hold back with these steps - the more reports of false positives that an AV Vendor has the more readily they can understand the severity of a problem and accelerate a fix.

As always keep your virus definitions up to date, but during this time make an extra special effort to ensure this happens and after each update try downloading the file again to see if the problem has now been resolved.

Once the file is reported as clean you're then safe to proceed using the file as normal.

This is perhaps an over cautious approach and I leave it to you to decide if you want to adjust it based on the information available to you, however as with all things related to trojans, virii and the like - caution is always a worthwhile approach because if something does get on your machine it can be a nightmare to get rid of it.

I do certainly encourage that those receiving reports proceed with the above steps and get their AV vendor involved asap.

Any questions, email as usual!

Matt.

UKTrainSim