Trojan horse in Arma patches

[subs17 9]

Hey Guys just watch out as some of these mirrors appear to add viruses or Trojan Horses to Arma. One in particular Arma international update 1.05exe when unzipped includes the following files: Gamershell URL, GH3D text file. The outcome of this is when applied with those 2 files Arma won't load instead it directs you to a webpage instructing you to delete all of your registry keys to get Arma to work. To avoid the problem I deleted the 2 extra files in the folder and found Arma works ok after that. I hope BI checks these mirrors as I'd hate for anyone to fall into that trap and wreak their OS/hardrives.

[abs 2]

I think it's great that you posted this. Hopefully you've helped out a few souls who would otherwise be hacker victims.

Abs

[Commander-598 0]

Huh? All GamersHell downloads come in a zip with a shortcut to GamersHell (labeled GamersHell), a readme for the downloaded file, and a text file saying that it was downloaded from GamersHell (GH3d.txt).

If there really IS something harmful in a GamersHell file, you should probably tell them.

[max power 21]

Gamershell is a legitimate online publication for video games. It's possible that someone is abusing their name in an attempt to add legitimacy to those highly absurd instructions, but highly unlikely that those instructions are coming from anyone affiliated with gamershell.

[Pulverizer 1]

Please, a link to the file and to the "webpage instructing you to delete all of your registry keys to get Arma to work".

[NoRailgunner 0]

SUBS17 you don't know much about gamershell and viruses/trojan horses... get some informations about these things!

[BraTTy 0]

Its not a trojan...hows it running a webpage automatically?

Vista feature?

[subs17 9]

SUBS17 you don't know much about gamershell and viruses/trojan horses... get some informations about these things!

The mirror for gamershell did the above to my install of Arma.

[subs17 9]

Huh? All GamersHell downloads come in a zip with a shortcut to GamersHell (labeled GamersHell), a readme for the downloaded file, and a text file saying that it was downloaded from GamersHell (GH3d.txt).

If there really IS something harmful in a GamersHell file, you should probably tell them.

As mentioned above, try reinstalling with that file but for me the end result was that Arma wouldn't load and that webpage came up. As to where or how that happened I don't know but I believe it was Gamershells mirror that did it. Anyone else discover the same thing happen?

[ArmaVidz 0]

post the link you took to downloaded the file, and if possible, where you got/saw that link.

[subs17 9]

It was one of the mirrors for ARMA: ARMED ASSAULT Euro Update ver. 1.05

here:

http://www.armedassault.com/dwnl_update.html#euro105

In particular one of the links here

http://www.gamershell.com/download_18055.shtml

My location is New Zealand so I'm pretty sure it was the link for Australia/Asia. I still have the offending file on my hard drive in zipped form. Maybe on the weekend I'll go back and put it in again and find you the URL for the website that came up when I tried to start Arma.