Virus in Installer

by Jerry on 02/05/2006 19:31, 46 messages, last message: 02/15/2007 03:48, 15746 views, last view: 05/18/2024 18:18

Hi,

My antivirus program (antivir) reports a Trojan (\"TR/Spy.Bombka\") in the installer - to be exact it is in uninstall.exe

Is this really a trojan or is it an error with the antivirus software?

   Board Index   

#1: ..

by Jerry on 02/05/2006 19:52

Really, this is no joke. I dont believe it either, personally. But Antivir

http://www.free-av.de/

is really a widely used program. Maybe anybody could just download the cube file from the server and test it out? Im getting a little bit nervous about this

reply to this message

#2: Re: ..

by pushplay on 02/05/2006 22:24, refers to #1

Avast disagrees.

reply to this message

#3: Re: ..

by keko_stoned on 02/05/2006 23:45, refers to #2

i had an installer but there were no problems but i\'ve tried to download a new cube installer and traying to install it avg antivirus told me about an error or a virus in the installer
i don\'t know..
i\'ve downloaded it from the dusseldorf mirror

reply to this message

#4: ..

by makkE on 02/06/2006 00:31

Some viruses tend to randomly infect .exe files they find on your computer. Maybe that was the case.

reply to this message

#5: ..

by Grogan on 02/06/2006 03:35

I've been testing the new Antivir version 7 and if you have it configured for maximum protection (e.g. heuristics, additional unwanted file types like backdoors, dialers etc.), it may detect some components of installers as some trojan. For example, installing ccleaner (crap cleaner) popped off Antivir on me today because of a component the installer was using. Some killproc thing extracted to the temp directory. I don't remember the exact text, but it led me to believe that this was something a trojan also made use of. This was a Win98 vmware virtual machine.

I can't even start a download of cube installer, and antivir is now flagging it as "TR/Drop.Zael" in a Windows XP virtual machine. This is pure bullshit, unlike the situation I described above. Sometimes a packing stub or something common to an installer program will accidently get added as a signature in antivirus software.

I turned off antivir and downloaded it and ran it. There's nothing wrong with it. I enabled Antivir again and it detects the same "TR/Drop.Zael" in the uninstall.exe that's in the program directory.

I disabled antivir again and ran the uninstall and cube was successfully removed. This is certainly a false detection.

So it looks like Antivir 7 has "issues". Glad I haven't installed it for many of my clients yet (this is why I'm testing it)

So disable the antivir guard to get Cube installed, then add an exception for "c:\program files\cube\uninstall.exe" for now, until they get their signatures straightened out.

reply to this message

#6: ..

by Grogan on 02/06/2006 03:55

Note that in the Configuration of Antvir 7, you'll first of all have to check the "expert mode" box to even see these settings. Then, under both Scanner and Guard you can add an Exception for that specific uninstall.exe file. You can then re-enable the guard.

reply to this message

#7: ..relieved...

by Jerry on 02/06/2006 17:39

Great, thank you very much. I thought it would be a problem with Antivir, but of course you never know. If not for the help of this board I would be formatting and reinstalling my system now...

reply to this message

#8: ..

by KaiserX on 02/11/2006 15:47

i dont have trojan in this game ;/
but i have this when i install this game about 4 mouth :/
and now i dont have a trojan :/
try defragment discs then maybe :D

reply to this message

#9: error after i scan with AVG

by dreled on 02/07/2007 20:57

When I downloaded the sauerbraten game I can install the Game When I scan the sauerbraten installer and then install the game I get a error. After auto-analysing of the installer there is a error and i can't install the game

reply to this message

#10: ..

by Drakas on 02/07/2007 23:03

Someone's "antivirus" is screwing up!

Did you consider the fact that it might be the cause of the software that you already have?:)

reply to this message

#11: ..

by SanHolo on 02/08/2007 00:01

Viruses? Trojans?

*whistles
*walks along

reply to this message

#12: ..

by Der/Nalia on 02/08/2007 03:13

i <3 Mac OS X

reply to this message

#13: Re: ..

by shadow,516 on 02/08/2007 04:37, refers to #10

Crap... they're on to us.

/me whistles and walks away

reply to this message

#14: Re: ..

by [QS]mayhem on 02/08/2007 06:44, refers to #11

LOL
I remember those dark, long nights I spent with my PC and the anti-virus programs and re-formatting and re-installing and.......
well, needless to say, Macs FTW!

reply to this message

#15: Re: ..

by Drakas on 02/08/2007 09:27, refers to #14

no... Windows PC.

reply to this message

#16: ..

by Passa on 02/08/2007 13:38

You kiddies turn every damn thread into an OS war..

reply to this message

#17: Re: ..

by Lex Luthor on 02/08/2007 14:05, refers to #15

I agree with Drakas +1 For Windows PC.

reply to this message

#18: ..

by sinsky on 02/08/2007 15:32

I've seen other similar threads in the past. I wonder if this problem occurs often with nsis uninstall files. It should have been reported by now to Antivir and taken care of, nsis is common software.

Currently I don't have antivirus software installed (-10 points for sinsky) but I recommend Avast. It looks very sleek and professional and won me over with the boot time scan, no need to restart in safe mode etc :)

reply to this message

#19: Re: ..

by Prąxibętęł on 02/08/2007 15:41, refers to #15

@drakas:

Windows PC. Yea.
http://images.wikia.com/uncyclopedia/images/5/52/Chickenlittle_8.jpg
xD
long url :-/

reply to this message

#20: Re: ..

by Lex Luthor on 02/08/2007 17:29, refers to #19

>_< Damn Praxy has to offend the PC Lover's,Guess he is a dork who uses an OS Other then PC,N00b.

reply to this message

   Board Index