Plug-ins, Hosts, Apps,
Hardware, Soundware
Developers
(Brands)
Videos Groups
Whats's in?
Banks & Patches
Download & Upload
Music Search
KVR
   
KVR Forum » VAZ Synths
Thread Read
Vaz 2010 v2.10 trojan?
jasco
KVRer
- profile
- pm
- e-mail
- www
PostPosted: Mon Nov 28, 2011 12:42 am reply with quote
Hi,

My BT NetProtect Plus (McAfee) seems to think the latest Vaz 2010 installer contains a trojan called 'Artemis!824F3E929C66'? Is anybody else having issues?
^ Joined: 25 Aug 2002  Member: #3682  Location: Leeds
hersoot
KVRist
- profile
- pm
PostPosted: Mon Nov 28, 2011 1:09 am reply with quote
I had the same thing happen when installing the demos for Vaz 2010 and Vaz Plus. The trojan was detected by McAfee in the standalone .exe file.
^ Joined: 07 Oct 2005  Member: #83600  
mikusan
KVRian
- profile
- pm
- e-mail
PostPosted: Tue Dec 06, 2011 5:55 am reply with quote
Same here, with the latest full version of VAZ2010 exe file (detected in my case by BitDefender). Going back to the beta version(v210b4) for now, which seemed to be OK and for which, luckily, I hadn't yet got around to deleting the installer.

Any news/views on this, MadGav? Could it be a false positive if three different AV checkers picked up on it?
----
Hear my music | visitAmbientOnline

so do I neither
^ Joined: 26 Jun 2003  Member: #7790  Location: UK
MadGav
KVRist
- profile
- pm
PostPosted: Tue Dec 06, 2011 12:41 pm reply with quote
I'm investigating this, the McAfee match I believe is "heuristic" which I take to mean that the exe smells bad. Now it's got no more than a few lines of code which isn't Delphi base libraries... worst case I'll have to abandon the stub + dll approach.

Martin
^ Joined: 08 Nov 2000  Member: #55  
MadGav
KVRist
- profile
- pm
PostPosted: Tue Dec 06, 2011 2:32 pm reply with quote
A little more investigation... I've discovered that Delphi produces unique exe files every time you compile. The released 2.10 Vaz2010.exe file sets off a load of A/V as reported, a straight rebuild which differs in a few bytes (which I believe are a repeated timestamp) triggers much much less. I think this demonstrates that the exe released is *not* malware. But *head* *desk*, still a question of *how* to avoid this kind of problem Sad

Martin
^ Joined: 08 Nov 2000  Member: #55  
EvilDragon
KVRAF
- profile
- pm
PostPosted: Tue Dec 06, 2011 2:52 pm reply with quote
Every good AV will let you add an exception for anything that it reports...
^ Joined: 06 Jan 2009  Member: #197719  Location: Croatia
mikusan
KVRian
- profile
- pm
- e-mail
PostPosted: Thu Dec 08, 2011 1:12 pm reply with quote
So it looks like a false alarm, thanks for looking into this - don't give yourself too much of a headache Very Happy
----
Hear my music | visitAmbientOnline

so do I neither
^ Joined: 26 Jun 2003  Member: #7790  Location: UK
paulstapp
KVRer
- profile
- pm
- e-mail
PostPosted: Thu Mar 29, 2012 5:12 pm reply with quote
The trojan problem seems to be solved and replaced with rare software problem "We are blocking your sofware cause it is rare." Both Norton 360 and avast! had this problem. (makes me real mad -- Lazy SOB's).I couldn't find a way for norton 360 to let it pass. Avast! let me let it pass.
^ Joined: 29 Mar 2012  Member: #277782  
MadGav
KVRist
- profile
- pm
PostPosted: Mon Apr 02, 2012 12:17 pm reply with quote
mikusan wrote:
Same here, with the latest full version of VAZ2010 exe file (detected in my case by BitDefender). Going back to the beta version(v210b4) for now, which seemed to be OK and for which, luckily, I hadn't yet got around to deleting the installer.

Any news/views on this, MadGav? Could it be a false positive if three different AV checkers picked up on it?


FYI VAZ 2010 v2.1.3a scanned clear with BitDefender yesterday. I've had some false positive reports accepted by Symantec and Avira over the last few days, going to throw one at BitDefender now.

Martin
^ Joined: 08 Nov 2000  Member: #55  
All times are GMT - 8 Hours

Printable version
Page 1 of 1
Display posts from previous:   
ReplyNew TopicPrevious TopicNext Topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Username: Password:  
KVR Developer Challenge 2012