cancel
Showing results for 
Search instead for 
Did you mean: 
mohannad
Level 7

Please help me fast , mcafee detects cryea.dll as trojan and it is not a trojan !!

Pleaseeeeee help urgently , i want to play a game called crysis3 on my new pc  ( model : acer aspire v3-571G )  with windows 7-64 bit , i used to play it in my old pc and my old unti-virus program was called avira . avira and mcafee always catch a folder called cryea.dll as a trojan and moves it to qurantee so i had to exclude cryea.dll from scans and add to the unti-virus exception list but this was when i was using avira , now on my  new pc i have mcafee and i figured that i had to move cryea.dll to trusted items which actually i totally failed on it cause i can't find the bottoms which says move to trusted !!    

However , a friend of mine who is using mcafee as well told me that i have to upload the folder to you so you test it and make sure its not a trojan and then u move it to trusted items for me !! i don't know how does this work and my friend doesn't know either , so please i DO NOT want to delete mcafee cause i totally love it so i will just upload the folder for you and i will give you the link for it to upload it yourself and test it and i promise it aint a hack or trojan everyone knows it lol . So please please help me fast and test the file cause i wanna play the game asap .  If you can't move cryea.dll to trusted items for me then please tell me what to do in detailed steps in order to disable mcafee or anything to play the game then en-able it again .

One more thing , sorry for my bad english ^^ .

you can download the file cryea.dll from here : http://www.mediafire.com/download/qkqxmv7wwzz1h0z/CryEA.dll-THTE.zip

I don't know much about programs or unti-virus so please be flexible with me if you know what i mean and reply to me fast if you can . Thank you

Message was edited by: Ex_Brit on 17/02/14 8:10:15 EST AM
0 Kudos
6 Replies
exbrit
Level 21

Re: Please help me fast , mcafee detects cryea.dll as trojan and it is not a trojan !!

Hi

I moved this to Malware Discussion > Home User Assistance and removed that attachment as it's against forums rules to post samples.    Please read this as it may help:  https://community.mcafee.com/thread/2016

0 Kudos
mohannad
Level 7

Re: Please help me fast , mcafee detects cryea.dll as trojan and it is not a trojan !!

What do you mean by moving this to Malware Discussion , i don't inderstand , are you going to test it or not !?

And please give me more details i need to play the game its been 48 hrs now and i cant play it yet . what shall i do ? and are you going to test it or not !? and where is the Mlaware discussion and what is it ?

0 Kudos
exbrit
Level 21

Re: Please help me fast , mcafee detects cryea.dll as trojan and it is not a trojan !!

Samples are not tested through these forums nor should they be posted here.   The link I posted explains what you can do.   These things take time.

I moved the thread to a different section of the forums simply because that's where these discussions belong.  

That was purely for internal reasons.

0 Kudos
exbrit
Level 21

Re: Please help me fast , mcafee detects cryea.dll as trojan and it is not a trojan !!

OK just have the one discussion going.  I locked the other one.  I had already moved your original discussion.

Message was edited by: Ex_Brit on 17/02/14 8:36:25 EST AM
0 Kudos
mohannad
Level 7

Re: Please help me fast , mcafee detects cryea.dll as trojan and it is not a trojan !!

ok sorry i found the malware discussion , i didn't know that i have to post it their my mistake , i will copy and paste this message their and thanks for guiding me .

0 Kudos
Hayton
Level 17

Re: Please help me fast , mcafee detects cryea.dll as trojan and it is not a trojan !!

So ... you have a game which won't work because an important file is missing. I won't ask why you didn't go to the game manufacturer or to the retailer who provided you with the game to get a refund or a replacement or at the very least an authorised copy of the missing file.

Instead .... you grabbed a file from some random place on the internet which was claimed to be a copy of the missing game file and you're surprised and indignant because McAfee (and many other anti-virus vendors) immediately detect that file as malicious and quarantine it.

Perhaps, you know, the file really is malicious. There was another user with that same problem, that same file, who asked here how to get around the quarantining. Later he came back to say that his system was massively infected with malware and he'd spent a week with Malwarebytes tech support trying to get it sorted out. Go read.

https://community.mcafee.com/thread/57168?start=20&tstart=0

I checked out that file. Chrome allowed the download of the zip file, presumably because it doesn't unpack compressed files. When I unpacked it McAfee immediately quarantined the .exe and identified it as a "Generic Packed (Trojan)".

So I downloaded again, turned off RTS, unpacked, sent the file off to VirusTotal for checking. Out of 50 analysis tools 19 reported the file as malicious. Anything over 4 or 5 in a VirusTotal report rings alarm bells. See it here -

https://www.virustotal.com/en/file/f9cb109d9aa98975ce86bdbafc390645b5896fba281b97308f61c8b0c2eca027/...

The Microsoft definition of this is "VirTool:Win32/Obfuscator.XZ " and the entry below says :

Malware can be obfuscated with a tool that uses a hacked license. This means non-malicious programs that use the hacked license can also be detected. If this happens you should contact support at the company that provides the non-malicious program and ask for a version that doesn't use the hacked license.

http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=VirTool:Win32/Obfuscato...

Except you can't do that because you got the file off Mediafire, where someone had posted it. Well, we both found the person who posted it - I saw your addition to the comments.  In his blog entry he specifically says

make sure to exclude it from antivirus scans or add it as an exception.

He gives three reasons for problems with cryea.dll and antivirus programs, but there's another one he leaves out.

https://community.mcafee.com/message/294549#294549

http://www.tomshardware.co.uk/answers/id-1731895/crysis-dosen-work.html#11148159

Message was edited by: Hayton on 19/02/14 16:59:41 GMT
0 Kudos