Trojan Alert During Download

[rumtum]

Been trying to download open cpn 134 to windows xp 2000. Using viper security.. Each time the download is blocked and says trojan is present.. anyone else seeing this problem.. Nov 9 09

[jerrymc]

rumtum:

What URL are you using to download?

[rumtum]

Jerry

Tried to use Source ???? then when that did not work went to direct. Even went to Dyads web site and tried.. each time get same report

[bdbcat]

rumtum...

Can you post more detail on the virus detected? Name, etc... Maybe someone has heard of it before.

Thanks
Dave

[htraudes]

Trojan alert, is that when you can't find your condoms?

[David M]

There are a lot of false positives out there. Ironically many false positives are from websites trying to get you to click on their link which then downloads their malware onto your computer.

Never ever click on a popup that says you have some sort of malware. If it is a popup which seems to be originating from your anti-malware software, then ignore it and go directly to the startup icon that you usually use for that particular software and see if it is telling you the same thing.

The internet dirtbags are getting more and more clever all the time.

[Psyches]

Dave,

It'd be great to have sha1 or at least md5 data posted near the download, so folks could validate. But I also expect this is a false positive. I've had quite a few using avg, and I see Vipre has had its share too.

In the meantime, if you have the sha1 or md5 for rumtum, he could validate that what he got is the bits you intended.

There is a process for reporting a Vipre false pos, here: Submit a False Positive

or there's a link from their home page.

Mark

[idpnd]

Or go use linux and never be bothered by virus/anti-virus nonsense again..

[GPS-Marco]

There is a free service out there reachable at Virustotal where you can check a suspect file aginst almost all antivurs. A false positive is usually positive only on one or few antivirus. A true malware is detected by many antivirus.

Ciao, Marco.

[Psyches]

rumtum, sorry, I later realized I could've been a bit more help. Assuming you're not going to toss windows and migrate to linux today...

(1) get an md5/sha1 verifier. This one is free from MS and easy: Availability and description of the File Checksum Integrity Verifier utility

(2) download the OpenCPN 134 install and get the md5 and/or sha1. If using the MS tool, run this:

C:\wherever>fciv -both OpenCPN_134_Setup.exe
//
// File Checksum Integrity Verifier version 2.05.
//
MD5 SHA-1
-------------------------------------------------------------------------
58f38961cda0ff2b9ce0520f9c34803b 24126280f309c997955b337f9f3174554c3c1f29 opencpn_134_setup.exe

(3) verify that what you get for md5 and/or sha1 is the same as I do, above. The first number is md5, the second is the sha1. These values are from OCPN 134 today, whatever build that is.

If you have the same value, your bits passed both AVG8.5 and MSSE scans, so you have a false positive, and can report it. If you didn't get the same values, your download is messed up for some reason - don't install it.

Mark

[rumtum]

Got download to work this am. Don't ask me what changed but it did. The name of the thing was trojan.Win32 Generic!BT

thanks all for help

[rumtum]

Dave

tried again from big dum boat website,, yours?? It went thru.. no blocking this time around.. what changed is beyond me.. the name that poped up was trojan.Win32Generic!BT And I don't even know if this gets to you.. the tecky stuff is beyond me for sure.

[jerrymc]

Which site did you use for your sucessful download??

Whoops, sorry, didn't see your previous post. So, you sucessfully downloaded from Dave's site with no virus warning from your anti-virus software? is that correct?

I am the server admin for that server, so I appreciate any info you can provide.

[rumtum]

Yes is that correct.., no waring and was able to open OK.. thank you all

[rumtum]

BigDumBoat website..