dsetup.dll Trojan in V33?

[Jaleth]

Not sure why, but when I try to open the game it says dsetup.dll is missing and immediate closes the program (my friend is having the same problem). So I tried to re-patch the latest version V33, it says that dsetup.dll is a Trojan.Gen.2 program and Norton removes it.

Any advice? I even tried just adding that dsetup.dll to my eq directory directly, and Norton rejects it right away. I've updated my security software, so I am sure it's not out of date.

I tried third party dsetup.dll software and it loads eqemu server select fine, but it nullifies the V33 update of p1999 and says I need to download the latest spell files. So I download the lastest patch files . . .again . . . .(V33) and I don't have the dsetup.dll file again and it closes.

Any help would be greatly appreciated.

Windows 7, 64 bit OS.

[phacemeltar]

whitelist the directory in norton if you want to play. im not sure exactly what the file is capable of doing, but opening it in ResourceHacker shows that it has a privilege level of "asinvoker" so as long as you do not run EQ as admin there is no need to worry.

[Fylgi]

Get the same problem. For the moment I've aloved the file to run, but I must admit it worries me...

[Lanuven]

This was brought up long ago in another thread. They use it to check for other processes running on your machine like ShowEQ. Its a risk you take to play the game on their server.

[Hyasinth]

Placing a trojan within the download without a warning is wrong. There was no mention of this trojan being placed within a required file to run this free game. It's now NOT free, when you consider that p99 staff can be performing tasks other than just watching to see if anyone is cheating....so its ok for them to cheat?? I am really pissed about this. I have been playing since 2011 and my virus scanner never detected this virus until the most recent patch.

It should have been in red capital letters next to the download link, "WARNING...YOU HAVE TO DOWNLOAD A TROJAN VIRUS TO PLAY OUR FREE GAME!!! Again, it's a bit late now. I added the dsetup.dll to my VS vault before realizing what it was.

I wish I would have been given the courtesy of a warning prior to this virus infecting my computer. I will never really know if they took information, or what.

It's really really not ok for strangers to have access to my computer with all my private information, under the guise of a "free" game. As I said, it's already too late, thanks.

[a_gnoll_pup]

Originally Posted by Hyasinth [You must be logged in to view images. Log in or Register.]

Placing a trojan within the download without a warning is wrong. There was no mention of this trojan being placed within a required file to run this free game. It's now NOT free, when you consider that p99 staff can be performing tasks other than just watching to see if anyone is cheating....so its ok for them to cheat?? I am really pissed about this. I have been playing since 2011 and my virus scanner never detected this virus until the most recent patch.

It should have been in red capital letters next to the download link, "WARNING...YOU HAVE TO DOWNLOAD A TROJAN VIRUS TO PLAY OUR FREE GAME!!! Again, it's a bit late now. I added the dsetup.dll to my VS vault before realizing what it was.

I wish I would have been given the courtesy of a warning prior to this virus infecting my computer. I will never really know if they took information, or what.

It's really really not ok for strangers to have access to my computer with all my private information, under the guise of a "free" game. As I said, it's already too late, thanks.

There's no Trojan here. Just code that looks like a trojan to most AVs. It doesn't access your private information, unless you consider file paths of loaded modules into the EverQuest client 'private' or 'sensitive' information.

You obviously have no idea what a trojan is, so I doubt there's anything I can do to convince you otherwise.

Good day.

[Hyasinth]

Then why is it named Trojan.Gen.2 Couldn't they have named it nuffinbadhere.Gen.2 or whatever?

When I read up on this trojan at Symantec, although relatively low lvl threat, and rated very easy to remove, it does say it can self replicate, and is very much like other back door trojans and not something anyone wants to have on their comp.

Thank you for your response. If you have any other information that would make me rest a little easier regarding this trojan, please post it [You must be logged in to view images. Log in or Register.]

[Baler]

It's called a false positive.
Norton antivirus is notorious for overreacting and producing false positives. Now don't get me wrong there is a lot of malicious stuff on the internet but with as many people as there is on project 1999 from all walks of life, I'd think someone would have blown a whistle if the files really were dirty.

Originally Posted by Hyasinth [You must be logged in to view images. Log in or Register.]

Then why is it named Trojan.Gen.2

They chose to give it a generic name. For a plethora of different flags that norton has.
Not all "Trojan.Gen.2" are false positives mind you.