FYI new patches not safe

[Morkroth]

I'm not sure how you guys handle the mirror sites for game patches but I got a terrible trojan from the latest patch. I can't remember which mirror I downloaded it from but I thought you guys should know about it.

I got the Horst trojan from a modified patch executable. I never knew what hit me. Its a beautiful piece of software if it wasn't so evil. It was running about 17 processes at less than 10 megs of memory. So with me running 4 gigs of ram and a pretty nice gtx card I never even saw it and it circumvented all my protections since the patch silently installed it.

The only way I discovered it was because my system crashed because of a memory leak while testing another game and broke the virus which destroyed my network and registry. I had to reformat and reinstall. I haven't had an infection like this in decades. I work for geeksquad and used our MRI tools to find the exact files of origin and was surprised to see that it came from the patch.

I know there is nothing you guys can do but I thought I could at least provide warnings to others and to check your patches before installing them.

More on the Horst trojan here. http://www.enigmasoftware.com/support/trojanhorst-trojandownloaderagentfed-trojandownloaderagentndt-defs-v830/

 

[Yoman Jenkins]

Wow, pretty scary stuff.

You should try to email taleworlds regarding this, so they can close the mirror (if you can remeber from which site it was, of course).

 

[Archonsod]

If you don't know the mirror, then it's useless.

Course, trojans tend to be bundled with the less legal downloads ...