CG 7.2e Virus Alert

[Nimzovik]

Yes...... This was discussed earlier. My Kapersky caught it. Hmmmmmmmmmm............. I doubt Mr. Lang is responsible. However I AM surprised that this is STILL occurring as this was discussed about a month or so ago......... Ergo one wonders WHY the site has not been fixed...............

[Philippe]

I emailed Richard Lang about CG7 and he replied he is certain his program is 100% clean.

[Nimzovik]

Hmmmmmmmmm........ Then why the flags by the anti-virus software all of a sudden?

[Ponti]

Very interesting indeed...
AVG Professional, last version updated installed.
I´ve never had any problems with AVG. Got a license to run in *all* my computers. It is just the best AV program out there, IMHO. Running now for 4 years!

I just deleted the CG file as it is a trial program and I can´t take the risk of loosing time fixing my PC; and yes, I have backups!:-)

CG is a fine program, one of the best. It is a pitty that Mr. Lang is not updating it regularly and there will not be a 64-bit or a multiprocessor version...

[Philippe]

There is no risk with Chess Genius 7 classic for PC. I downloaded it from Richard Lang's web site (chessgenius.com), installed it. Nod32 says it is clean. The fact is that CG7 is still a 16 bits (windows 3.1) program which needs to access to NTVDM.exe. GEN32WIN.EXE wants to access Ntvdm.exe according to ZoneAlarm. It needs to do it because it is an old program which has been rewritten to be compatible with win32 OS. So AV programs which suspect it has understood nothing.

When you start a 16-bit program on a computer running Windows NT, the Ntvdm.exe and Wowexec.exe processes start. After you quit the 16-bit program, the Ntvdm.exe and Wowexec.exe processes remain in memory. This behavior is a design feature of Windows NT. The Ntvdm.exe and Wowexec.exe processes remain in memory in case you start another 16-bit program. Leaving the Windows-On-Windows (WOW) environment (which consists of the Ntvdm.exe and Wowexec.exe processes) in memory improves performance. The WOW environment is not loaded when you start Windows NT. It is loaded when you first start a 16-bit program.

[Philippe]

Edit
From ZoneAlarm advisor :

GEN32WIN.EXE is trying to create a new process.
ZoneAlarm Pro is asking you whether to allow this behavior. Your computer is safe.

What should I do?

If GEN32WIN.EXE needs to create a new process in order to function correctly and you know what this program is, then give it permission. If it does not need to create a process, or you know that a process should not be created, then deny it. If you are unsure, you can always deny it from creating a process and run the program again, if it is required.

Why?

GEN32WIN.EXE is potentially malicious. This is particularly true if the new process will load malicious programs or utilize an excessive amount of CPU time, memory, and other resources.

GEN32WIN.EXE is trying to create a new process.
ZoneAlarm Pro is asking you whether to allow this behavior. Your computer is safe.

Inside the OSFirewall alert

GEN32WIN.EXE is trying to create a new process.
ZoneAlarm Pro is asking you whether to allow this behavior. Your computer is safe.

Details



ZoneAlarm Pro protects your system from the malicious creation of new processes.

A process is a program that is being executed. Each process can request any amount of resources from Windows as long as they are available.

Malicious programs may create new processes on your computer to load malicious programs and utilize an excessive amount of CPU time, memory, and other resources.

Due to the potential threat, only programs which have been given explicit permission to create new processes on your system will be allowed to do so.