Stereo Tool
https://forums.stereotool.com/

look this
https://forums.stereotool.com/viewtopic.php?t=583		 Page 1 of 3
Author:  salvo [ Tue Jul 07, 2009 10:37 am ]
Post subject:  look this
Hey Hans,what is this?
Image
Author:  hvz [ Tue Jul 07, 2009 11:39 am ]
Post subject:  Re: look this
Hi Salvo,

I'm pretty much certain that it's a false positive.

Reasons:
  • It's reported to be a trojan. From the McAfee website:
    Quote:
    Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.
    Well I definitely didn't put it in there.
  • If I look up the Vapsup family of trojans, I find pages like these:
    http://www.411-spyware.com/remove-vapsup
    http://www.uninstall-spyware.com/uninstallVapsup.html
    http://www.antispyware.com/glossary_det ... ?ID=133683

    Looking at the enormous list of files, it's impossible that all of this would suddenly be put in just 1 DLL file. Also, assuming that my PC would be infected by this, I should have these files, and I should have seen the behavior described here - and I don't.
One thing is scary though: I have gotten a similar report from someone who used Kaspersky. I then scanned the files with some other scanners that didn't find anything (and Kaspersky only reported Vapsup for the Winamp plugin version, not for any of the others) - but I haven't tried Avira yet. To be really certain I'm doing a full system scan with Avira right now, I'll let you know the results afterwards.
Author:  salvo [ Tue Jul 07, 2009 1:19 pm ]
Post subject:  Re: look this
a new installation (stereo tool) there was no warning from my antivirus :roll:
avira virus,occasionally found in every part :)
Author:  hvz [ Tue Jul 07, 2009 1:40 pm ]
Post subject:  Re: look this
Yeah, after the warning in Kaspersky I have done a rebuild from a different directory (which causes the DLL to be SLIGHTLY different).

That sufficed to get rid of the warning in Kaspersky, and now apparently also in Avira.

My scan only found Vapsup in the DSP installer of Stereo Tool, nowhere else on my pc. So this confirms that it must have been a false positive.
Author:  Nuke420 [ Wed Jul 08, 2009 3:08 am ]
Post subject:  Re: look this
Comes up clean on NOD32 and AVG 8.5. Its gotta be a false positive.

-n4-
Author:  Bojcha [ Wed Jul 08, 2009 3:23 pm ]
Post subject:  Re: look this
hi ..
i am using Kaspersky 2010 for a month and i did not see nothing like this with any version of ST v4 including betas.

i remebmer there is something in version 3.40.
Author:  salvo [ Thu Jul 09, 2009 4:41 pm ]
Post subject:  Re: look this
I am sorry to inform you, works for a few hours the new version stero tools after crashes
I moved to the old version :evil:
Author:  hvz [ Thu Jul 09, 2009 5:51 pm ]
Post subject:  Re: look this
Quote:
I am sorry to inform you, works for a few hours the new version stero tools after crashes
I moved to the old version :evil:
Which old version is that? (The one that doesn't crash?) The one that had the trojan warning, or an older version?

I'll start a test tonight to see if I can reproduce the crashing.
Author:  hvz [ Thu Jul 09, 2009 7:40 pm ]
Post subject:  Re: look this
I've managed to reproduce it... Will try to get a fix asap.
Author:  salvo [ Thu Jul 09, 2009 7:45 pm ]
Post subject:  Re: look this
Quote:
Quote:
I am sorry to inform you, works for a few hours the new version stero tools after crashes
I moved to the old version :evil:
Which old version is that? (The one that doesn't crash?) The one that had the trojan warning, or an older version?

I'll start a test tonight to see if I can reproduce the crashing.
Now I'm using version 3.55 works well
Page 1 of 3 All times are UTC+02:00
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/