Further to this, there is a false positive caused by certain anti-virus vendors (“W32/Heuristic-KPP!Eldorado”) which affects multiple applications of this type. A: The program makes 0 attempts to connect to the outside world, and only attempts to change war3.exe memory, if you see other behaviour the exe is probably infected, safest bet is to download only from.