Page 1 of 1

Trojan found in TA Spring installer

Posted: 19 Dec 2008, 22:53
by 2k4
Image

Watch out!

Re: Trojan found in TA Spring installer

Posted: 19 Dec 2008, 22:56
by lurker
Have you tried any other virus scanners on it?

Re: Trojan found in TA Spring installer

Posted: 19 Dec 2008, 22:59
by 2k4
No. Why should I?

Re: Trojan found in TA Spring installer

Posted: 19 Dec 2008, 23:16
by Pressure Line
because it has never been reported before, not even once...

Re: Trojan found in TA Spring installer

Posted: 20 Dec 2008, 01:16
by Satirik
indeed it's a trojan ... it downloads exe and sdz files and run them ... that what it is for ... INET is the component used to download the files

now stop using a fucking retarded antivirus and buy a brain it's a lot more efficient

Re: Trojan found in TA Spring installer

Posted: 20 Dec 2008, 01:30
by Peet
(It is also entirely possible that a real trojan is infecting DLLs as they are being unpacked from the installer)

Re: Trojan found in TA Spring installer

Posted: 20 Dec 2008, 01:52
by Regret
Satirik wrote:indeed it's a trojan ... it downloads exe and sdz files and run them ... that what it is for ... INET is the component used to download the files

now stop using a fucking retarded antivirus and buy a brain it's a lot more efficient
Epic :D

Re: Trojan found in TA Spring installer

Posted: 20 Dec 2008, 14:47
by ZellSF
2k4 wrote:No. Why should I?
Because virus scanners sometimes don't know that a virus is found, they just analyze the program and think it is a virus. This can lead to them thinking something is a virus when it's not.

If multiple virus scanners thinks something is a virus though... then it's more likely that it actually is one.

Re: Trojan found in TA Spring installer

Posted: 20 Dec 2008, 15:35
by Acidd_UK
I know AVG have an email address you can send suspect files to with details and they will analyse it for you and tell you if its a false positive or not.

I don't know what AV program the OP was using though so don't know if it offers the same thing. I would hope it does though.

@Satirik: Not exactly the most constructive post is it? He's asking a legitimate question - it is within the realm of possiblilty that the spring web server could be hacked and hosted downloads infected with virii...

If in doubt, better to ask than get infected.

Re: Trojan found in TA Spring installer

Posted: 20 Dec 2008, 19:42
by YHCIR
Upload the specific file here: http://virusscan.jotti.org/
It scans it with lots of different AV programs.

Re: Trojan found in TA Spring installer

Posted: 20 Dec 2008, 23:57
by Satirik
no because i know why it thinks it's a trojan ... because the installer uses the INET component and download stuff that's all, it doesn't detect it as a known virus, but as a potential one because of what it does ...

Re: Trojan found in TA Spring installer

Posted: 21 Dec 2008, 01:17
by REVENGE
YHCIR wrote:Upload the specific file here: http://virusscan.jotti.org/
It scans it with lots of different AV programs.
Whoa, nice link, thanks!

Also, heuristics can give false results sometimes (as Satirik explains based on the behavior of INET).