Possible virus on home page?

Black Mesa Archive Website Issues
#1

A few times today when I went to the main page of Black Mesa my antivirus program, Avira Antivir, popped up saying that the website has infected me with a malicious file. Here is the message it sends me:

Virus or unwanted program 'BDS/Bifrose.cdxo [backdoor]' detected in file 'C:\Documents and Settings\**** ******\Local Settings\Application Data\Mozilla\Firefox\Profiles\vjgi8bh6.default\Cache\7523329Dd01. Action performed: Delete file
I don’t know if this is anything to worry about or not but it only happens on this website.

#2

Oh, you didn’t hear? The devs decided on a new revolutionary delivery system for their mod. When you visit the home page it installs a ‘downloader’ and immediately begins downloading in the background. The next time you start steam, you’ll see the mod fully downloaded.

#3

LIES if black mesa was released it would be announced by now

Just uninstall your antivirus dude, it’s obviously not doing it rite.

#4

That’s strange… I just downloaded the main site and did a scan of all the files using my antivirus (ESET) and nothing came up. It’s possible it’s a false positive. If you could figure out what the exact URL is that your A/V is detecting that would be very helpful.

#5

I also get a massage from moderator, they gave me a website of anti virus, but i was blocked.

#6

AVG has yet to pick anything up from the home page.

#7

For good, free antivirus I would recommend both AVG Free 9.0 and Ad-Aware.

#8

TBH, I had the same thingy yesterday, or the day after yesterday and I too am using Avira Antivir.

#9

I would say that it may have something to do with flash (embedded video), because other than that there is no other executable content. Have you tried with a differnet browser?

#10

Maybe you have one of these Firefox addons:
https://blog.mozilla.com/addons/2010/02/04/please-read-security-issue-on-amo/?

#11

I have the Same Problem when opening the Black Mesa Main Page: Antivir detects a Virus.

" In der Datei ‘C:\Users<username>\AppData\Local\Mozilla\Firefox\Profiles\pwh93826.default\Cache\7523329Dd01’
wurde ein Virus oder unerwünschtes Programm 'BDS/Bifrose.cdxo’ [backdoor] gefunden.
Ausgeführte Aktion: Datei löschen"

Thats strange…
Maybe its a same false alarm like the virus in the particleman.dll last week on steam. That was confusing^_^

#12

Maybe its caused by ads wich spread the trojan.
Edit: Black Mesa page uses www.contextweb.com/ for ads.

#13

Avast and Spybot: Search & Destroy. :stuck_out_tongue:

#14

NOD32 is definatley the best AV i know of, i don’t have it but with my vast research into viruses, RATs, spyware, keyloggers etc i know that if something becomes detectable (It is possible for a virus to be fully undected by all AVs however…) it becomes detectable on NOD32 faster than the others.

#15

Too bad it isn’t free. And I’m not going to go through the trouble of pirating it for only a marginal safety increase. The best anti-virus is still common sense.

#16

Yeah the best security comes from running any suspect files in a virtual box which you can monitor (easily) for unexpected internet requests or malicious doings without anything happening to your machine. Programs that do this are available easily.

#17

The url is https://www.blackmesasource.com/ if that’s what you mean.

#18

Yeah, I got the virus message just seconds ago. I’m using Avira AntiVir as well.

#19

Norton says no problemo.

#20

Could you check your quarantine or logs to see if it tells you the full URL of the item that was blocked? (not just the page it was on)

Founded in 2004, Leakfree.org became one of the first online communities dedicated to Valve’s Source engine development. It is more famously known for the formation of Black Mesa: Source under the 'Leakfree Modification Team' handle in September 2004.