Strange virus reports from players

[mind 60]

hi all,

 

I run small dedicated server with custom mission for my friends. Server is setup on my home PC (win 10, legit), it is hosted via arma3server.exe.

I was hosting games previously with no big problems in the past in the very same way.

 

But today i had several new players connected, they started to download mission, and had their anti-virus software screaming and alarming that some malware actually downloaded with mission file. Battleye and Arma processes then go nuts, weird things start to happen. This happened to three persons in the very small time frame. Most players are able to play with no problems hovewer...

 

I can not provide screenshots or reports of any kind, and i do understand such problems may come from many sources, but still, have any one

encountered anything like that when they join servers?

 

Is it even possible to attach malware to mission file and send it to connecting player?

 

Is there any connection to recent "attempted security breach of feedback.arma3.com" (20.02.2016)?

 

Any thoughts are welcomed.

[lsd 147]

I'm sure an infected file could easily be incldued in a mission folder and packaged into a pbo hosted on a server.

 

The file would then be detected by AVG scanners, but I'm not sure how that file could be executed or pose any direct threat, maybe you could find a way if you were determined enough.

 

False-positive heuristic detection from AV software is another possibility - If these people were all running the same AV software.

 

Any connection to the tracker incident would be pure cooincidence, unless you downloaded the pbo from there or something.

 

 

Love your addon btw, nice work.

[mind 60]

Well, here are results of test

 

https://www.virustotal.com/en/file/c56aa036302aba2c0eec380874a044369ad4e57396063640116f933235ef8e5d/analysis/1456002102/