Trojan In 'EA autorun.exe', screenshots provided

[Hound_Dawg]

While it is not the biggest news, my autorun file became infected by a trojan. I know that people already knew that it is possible to contract a virus/spyware from bf2 due to the server graphic, but never imagined I would become infected. Scariest thing is, McAfee did not find it, but I used some scanner from Pest Control. I deleted the file, and the game works fine, but it was pretty strange that that file would become infected.

Here is the scanner finding the infected trojan-


And here is the only autorun.exe in the folder specified.

[Rambo]

Re: Trojan In 'EA autorun.exe', screenshots provided

where can i get that program as i use norton 2006,spybot,ad-aware,microsoft anti-spy and i still feel a windows firewall /trojan probelm

is it free?

[SGforce]

Re: Trojan In 'EA autorun.exe', screenshots provided

Firstly, bf2 doesn't have an autorun.exe. There is one on the cd but that is where it stays.

Second, you cannot get a virus from a picture file(server graphic), it's just impossible to code a virus into a picture.

Battlefield never uses your local temp folder for files while playing, it is only used if ever for installing it, that was probably just a virus that got picked up while you were surfing the net or the program is mislabelling a file as a virus and it is not really a virus.(they do that all the time)

[Hound_Dawg]

Re: Trojan In 'EA autorun.exe', screenshots provided

Well that EA autorun.exe was infected with a virus if you look in the second screenshot. Also that scanner was from pcpitstop.com (a very trusted company), once you get there click deep scanner. You have to remove them yourself, but it will atleast show you the location of the infected file.

[Cigar_Man]

Re: Trojan In 'EA autorun.exe', screenshots provided

LOL

autorun.exe is not even a legit WinXP OS file. It is used for CD\DVD's with association to an autorun.inf. Your WinXP OS should not have an autorun.exe on the hard drive. If you do, it is an infection.

This file is used by viruses and trojans. Here is a list of some from Sophos.

For some reason, your system associated the "EA" icon with this file, but that was just your system.

As for the "unknown trojan", it is listed as the poweredge scheduler in your first image. This file is associated with lots of spyware and trojan writers.

Yes, you were infected, but....

NO, it was not an EA file as you say it was. Heck, its in "your" temp directory, not in the EA Games directory or your bf2 profile directory.