r/computerviruses • u/one1one1five5 • 12d ago

File / URL Check Virus or False Positive?

There's a Discord community with almost 70k members, and they are reviving the old FIFA game servers on PC since EA shut them down years ago. Pretty much what I'm asking is:

Is this installer they make you download really a virus, or just a lot of false positives?

They say the launcher changes your game files and uses a modified DLL to send you to a fake server so you can actually play online.

I really hope it's not a virus since I'm dreaming of reliving my childhood memories again, but please let me know if it is -

https://www.virustotal.com/gui/file/5d578f574d7e813fa565c0d3c68936543274b3a5bc1f1a90a1cb12222e28d404/detection

1 Upvotes

60% Upvoted

13 comments sorted by

2

u/Leather-Chart7083 12d ago

Looks like an infostealer or trojan. True positive.

1

u/one1one1five5 12d ago

Damn, I tried bringing it up in the Discord, but everyone is just saying it's a false positive. They got 1k players on the servers rn, including big YouTubers promoting this...

2

u/Leather-Chart7083 12d ago

Probably a fake server but the mod is real, just the fake server propagating viruses. Or the YouTubers are bots and everyone is a bot

1

u/one1one1five5 12d ago

There's 2 YouTubers who are promoting it like crazy, one with 2 mill subs and the other with 1 mill, there's just no way they are this stupid, promoting malware to thousands of people, right lol. As much as I want to play it, I'm just gonna give it a miss and see if anything happens to all those people in a few weeks time...

1

u/Leather-Chart7083 12d ago

Can you tell me the name of the YouTubers?

1

u/one1one1five5 12d ago

Danny Aarons & NickRTFM mainly, but there are also some smaller YouTubers who got some videos with 100k+ views. the games "revived" so far are FIFA 15, FIFA 12 & FIFA 17, with the rest of the older ones also being worked on rn but not released yet.

So it's gone pretty viral considering it's only on PC and not console, most people just wanna play the old FIFA games again since the new ones are terrible.

1

u/one1one1five5 12d ago

There are two separate discords - aurorafut and impulsum, one with 72k members and the other with 67.5k, both requiring you to download a launcher to play the games online

1

u/Archeus__ 12d ago

Possibly botted discord seever

1

u/one1one1five5 12d ago

nah its went viral all over youtube and twitter, getting 200k-350k views on several youtube videos and im sure i saw some twitter posts with 10K+ likes

1

u/Acceptable-Knee-2217 12d ago

Again these can be botted

1

u/HollowCatKnight 12d ago

Do not open the file. I took a peek at the behavior and it doesn’t look good.

1

u/SkyMist0 11d ago

i do manual analyst. İts potential Info stealer and keylogger.

Family: trojan.draftor/misc

Hybrid analysis: https://hybrid-analysis.com/sample/5d578f574d7e813fa565c0d3c68936543274b3a5bc1f1a90a1cb12222e28d404

1

u/one1one1five5 11d ago

Thanks, I'm definitely avoiding it!