Trojan found in TA Spring installer

[2k4]

Watch out!

[lurker]

Have you tried any other virus scanners on it?

[2k4]

No. Why should I?

[Pressure Line]

because it has never been reported before, not even once...

[Satirik]

indeed it's a trojan ... it downloads exe and sdz files and run them ... that what it is for ... INET is the component used to download the files

now stop using a fucking retarded antivirus and buy a brain it's a lot more efficient

[Peet]

(It is also entirely possible that a real trojan is infecting DLLs as they are being unpacked from the installer)

[Regret]

indeed it's a trojan ... it downloads exe and sdz files and run them ... that what it is for ... INET is the component used to download the files

now stop using a fucking retarded antivirus and buy a brain it's a lot more efficient

Epic :D

[ZellSF]

No. Why should I?

Because virus scanners sometimes don't know that a virus is found, they just analyze the program and think it is a virus. This can lead to them thinking something is a virus when it's not.

If multiple virus scanners thinks something is a virus though... then it's more likely that it actually is one.

[Acidd_UK]

I know AVG have an email address you can send suspect files to with details and they will analyse it for you and tell you if its a false positive or not.

I don't know what AV program the OP was using though so don't know if it offers the same thing. I would hope it does though.

@Satirik: Not exactly the most constructive post is it? He's asking a legitimate question - it is within the realm of possiblilty that the spring web server could be hacked and hosted downloads infected with virii...

If in doubt, better to ask than get infected.

[YHCIR]

Upload the specific file here: http://virusscan.jotti.org/
It scans it with lots of different AV programs.

[Satirik]

no because i know why it thinks it's a trojan ... because the installer uses the INET component and download stuff that's all, it doesn't detect it as a known virus, but as a potential one because of what it does ...

[REVENGE]

Upload the specific file here: http://virusscan.jotti.org/
It scans it with lots of different AV programs.

Whoa, nice link, thanks!

Also, heuristics can give false results sometimes (as Satirik explains based on the behavior of INET).