Jump to content


WARNING: Infected download file!!


7 replies to this topic

#1 Nénmacil

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 23 July 2008 - 07:49 PM

Hello,

I downloaded Autopatcher right now, since I want to try it.
But it actually seems like the file from the download server is infected.

As always when I download a file, I first did a scan with Norman Virus Control.
The result: One infected file under the folder apup_bin\uz.exe, which contains W32/VBTroj.SLY

So stay away, let this be a warning!!

This forum topic confirms it.

I didn’t find any contact information on the front page, therefore I had to create a new forum topic regarding this critical issue.

#2 Erik Ramey

    AutoPatcher Elite

  • Veterans
  • PipPipPipPipPip
  • 766 posts
  • Gender:Male
  • Location:Washington State

Posted 23 July 2008 - 08:55 PM

This is a known false-positive which is currenlty being discussed in this thread

Looks like we will need to report this false positve to Symantec.

#3 James

    Advanced Member

  • Veterans
  • PipPipPipPipPipPip
  • 1,212 posts
  • Gender:Male
  • Location:UK

Posted 23 July 2008 - 09:44 PM

@ Nénmacil
Have you updated your virus definitions recently?

The Norman definitions that detected W32/VBTroj.SLY are nearly three weeks old.

It's a false detection and most major AV companies have already updated their definitions to show uz.exe is CLEAN.

--

#4 James

    Advanced Member

  • Veterans
  • PipPipPipPipPipPip
  • 1,212 posts
  • Gender:Male
  • Location:UK

Posted 23 July 2008 - 09:47 PM

@ Erik
I hope you aren't confusing Norman with Norton??

--

#5 Erik Ramey

    AutoPatcher Elite

  • Veterans
  • PipPipPipPipPip
  • 766 posts
  • Gender:Male
  • Location:Washington State

Posted 23 July 2008 - 11:03 PM

I am....

Working Hard at Work + Trying to answer questions on forum = A messed up poster

#6 Nénmacil

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 24 July 2008 - 06:02 AM

View PostJames, on Jul 23 2008, 11:44 PM, said:

@ Nénmacil
Have you updated your virus definitions recently?

Sure.
They’re updated daily.
Last update 23/7/2008.

#7 James

    Advanced Member

  • Veterans
  • PipPipPipPipPipPip
  • 1,212 posts
  • Gender:Male
  • Location:UK

Posted 24 July 2008 - 07:21 AM

Thanks for the reply, Nénmacil.

As you can see from the link posted by Erik (THIS TOPIC) this matter is already known about.

I also see that Norman have a form to report false positives (Potential false postive virus alarm), but they also state:

Quote

Before you submit any file that you suspect is a false positve, please make sure that you have updated your antivirus program with the latest virus detection files.
which is why I asked you.

As a Norman user, could you let them know that this is a false positive, please?

--

#8 Nénmacil

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 24 July 2008 - 07:36 AM

Yes, I submitted the file last nigh.
Then we’ll have to wait and see.





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users