r/computerviruses • u/one1one1five5 • Sep 01 '26

File / URL Check Virus or False Positive?

There's a Discord community with almost 70k members, and they are reviving the old FIFA game servers on PC since EA shut them down years ago. Pretty much what I'm asking is:

Is this installer they make you download really a virus, or just a lot of false positives?

They say the launcher changes your game files and uses a modified DLL to send you to a fake server so you can actually play online.

I really hope it's not a virus since I'm dreaming of reliving my childhood memories again, but please let me know if it is -

https://www.virustotal.com/gui/file/5d578f574d7e813fa565c0d3c68936543274b3a5bc1f1a90a1cb12222e28d404/detection

1 Upvotes

60% Upvoted

13 comments sorted by

2

u/Leather-Chart7083 Sep 01 '26

Looks like an infostealer or trojan. True positive.

1

u/one1one1five5 Sep 01 '26

Damn, I tried bringing it up in the Discord, but everyone is just saying it's a false positive. They got 1k players on the servers rn, including big YouTubers promoting this...

2

u/Leather-Chart7083 Sep 01 '26

Probably a fake server but the mod is real, just the fake server propagating viruses. Or the YouTubers are bots and everyone is a bot

1

u/one1one1five5 Sep 01 '26

There's 2 YouTubers who are promoting it like crazy, one with 2 mill subs and the other with 1 mill, there's just no way they are this stupid, promoting malware to thousands of people, right lol. As much as I want to play it, I'm just gonna give it a miss and see if anything happens to all those people in a few weeks time...

1

u/Leather-Chart7083 Sep 01 '26

Can you tell me the name of the YouTubers?

1

u/one1one1five5 Sep 01 '26

Danny Aarons & NickRTFM mainly, but there are also some smaller YouTubers who got some videos with 100k+ views. the games "revived" so far are FIFA 15, FIFA 12 & FIFA 17, with the rest of the older ones also being worked on rn but not released yet.

So it's gone pretty viral considering it's only on PC and not console, most people just wanna play the old FIFA games again since the new ones are terrible.

1

u/one1one1five5 Sep 01 '26

There are two separate discords - aurorafut and impulsum, one with 72k members and the other with 67.5k, both requiring you to download a launcher to play the games online

1

u/Archeus__ Sep 01 '26

Possibly botted discord seever

1

u/one1one1five5 Sep 01 '26

nah its went viral all over youtube and twitter, getting 200k-350k views on several youtube videos and im sure i saw some twitter posts with 10K+ likes

1

u/Acceptable-Knee-2217 Sep 01 '26

Again these can be botted

1

u/HollowCatKnight Sep 01 '26

Do not open the file. I took a peek at the behavior and it doesn’t look good.

1

u/SkyMist0 Sep 02 '26

i do manual analyst. İts potential Info stealer and keylogger.

Family: trojan.draftor/misc

Hybrid analysis: https://hybrid-analysis.com/sample/5d578f574d7e813fa565c0d3c68936543274b3a5bc1f1a90a1cb12222e28d404

1

u/one1one1five5 Sep 02 '26

Thanks, I'm definitely avoiding it!