All times are UTC+02:00




Post new topic  Reply to topic  [ 28 posts ]  Go to page 1 2 3 Next
Author Message
 Post subject: look this
PostPosted: Tue Jul 07, 2009 10:37 am 
User avatar

Joined: Wed Dec 17, 2008 5:19 am
Posts: 41
Hey Hans,what is this?
Image


Top
   
 Post subject: Re: look this
PostPosted: Tue Jul 07, 2009 11:39 am 
Site Admin
User avatar

Joined: Mon Mar 17, 2008 1:40 am
Posts: 11212
Hi Salvo,

I'm pretty much certain that it's a false positive.

Reasons:
  • It's reported to be a trojan. From the McAfee website:
    Quote:
    Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.
    Well I definitely didn't put it in there.
  • If I look up the Vapsup family of trojans, I find pages like these:
    http://www.411-spyware.com/remove-vapsup
    http://www.uninstall-spyware.com/uninstallVapsup.html
    http://www.antispyware.com/glossary_det ... ?ID=133683

    Looking at the enormous list of files, it's impossible that all of this would suddenly be put in just 1 DLL file. Also, assuming that my PC would be infected by this, I should have these files, and I should have seen the behavior described here - and I don't.
One thing is scary though: I have gotten a similar report from someone who used Kaspersky. I then scanned the files with some other scanners that didn't find anything (and Kaspersky only reported Vapsup for the Winamp plugin version, not for any of the others) - but I haven't tried Avira yet. To be really certain I'm doing a full system scan with Avira right now, I'll let you know the results afterwards.


Top
   
 Post subject: Re: look this
PostPosted: Tue Jul 07, 2009 1:19 pm 
User avatar

Joined: Wed Dec 17, 2008 5:19 am
Posts: 41
a new installation (stereo tool) there was no warning from my antivirus :roll:
avira virus,occasionally found in every part :)


Top
   
 Post subject: Re: look this
PostPosted: Tue Jul 07, 2009 1:40 pm 
Site Admin
User avatar

Joined: Mon Mar 17, 2008 1:40 am
Posts: 11212
Yeah, after the warning in Kaspersky I have done a rebuild from a different directory (which causes the DLL to be SLIGHTLY different).

That sufficed to get rid of the warning in Kaspersky, and now apparently also in Avira.

My scan only found Vapsup in the DSP installer of Stereo Tool, nowhere else on my pc. So this confirms that it must have been a false positive.


Top
   
 Post subject: Re: look this
PostPosted: Wed Jul 08, 2009 3:08 am 
User avatar

Joined: Wed Jun 03, 2009 5:58 pm
Posts: 84
Location: Heber City, Utah
Comes up clean on NOD32 and AVG 8.5. Its gotta be a false positive.

-n4-


Top
   
 Post subject: Re: look this
PostPosted: Wed Jul 08, 2009 3:23 pm 
User avatar

Joined: Tue Mar 17, 2009 2:56 pm
Posts: 4165
hi ..
i am using Kaspersky 2010 for a month and i did not see nothing like this with any version of ST v4 including betas.

i remebmer there is something in version 3.40.

_________________
control point
control point2


Top
   
 Post subject: Re: look this
PostPosted: Thu Jul 09, 2009 4:41 pm 
User avatar

Joined: Wed Dec 17, 2008 5:19 am
Posts: 41
I am sorry to inform you, works for a few hours the new version stero tools after crashes
I moved to the old version :evil:


Top
   
 Post subject: Re: look this
PostPosted: Thu Jul 09, 2009 5:51 pm 
Site Admin
User avatar

Joined: Mon Mar 17, 2008 1:40 am
Posts: 11212
Quote:
I am sorry to inform you, works for a few hours the new version stero tools after crashes
I moved to the old version :evil:
Which old version is that? (The one that doesn't crash?) The one that had the trojan warning, or an older version?

I'll start a test tonight to see if I can reproduce the crashing.


Top
   
 Post subject: Re: look this
PostPosted: Thu Jul 09, 2009 7:40 pm 
Site Admin
User avatar

Joined: Mon Mar 17, 2008 1:40 am
Posts: 11212
I've managed to reproduce it... Will try to get a fix asap.


Top
   
 Post subject: Re: look this
PostPosted: Thu Jul 09, 2009 7:45 pm 
User avatar

Joined: Wed Dec 17, 2008 5:19 am
Posts: 41
Quote:
Quote:
I am sorry to inform you, works for a few hours the new version stero tools after crashes
I moved to the old version :evil:
Which old version is that? (The one that doesn't crash?) The one that had the trojan warning, or an older version?

I'll start a test tonight to see if I can reproduce the crashing.
Now I'm using version 3.55 works well


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 28 posts ]  Go to page 1 2 3 Next

All times are UTC+02:00


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Limited