Welcome Guest ( Log In | Register )

> Trojan exe in AMIP Config
Jessica
post Oct 21 2007, 06:31 PM
Post #1


Newbie
*

Group: Members
Posts: 1
Joined: 21-October 07
Member No.: 399
So I'm using my winamp like normal and AVG brings up a warning box about a Trojan virus, I delete the offending file and find that it's the exe for my AMIP Config. Concerned, I uninstall the config and reinstall but encounter the same problem.

Has anyone experienced the same problem or know how to fix it?

Many thanks,
Jess.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
 
 Reply to this topicStart new topic
Replies(1 - 10)
Serge
post Oct 21 2007, 06:33 PM
Post #2


AMIP Developer
***

Group: Root Admin
Posts: 935
Joined: 12-March 06
Member No.: 1
There is no any trojan in it, it's an executable wrapper for the java created using the opensource project: http://launch4j.sourceforge.net/ .

Report this problem to your antivirus vendor to that they can fix their signatures database.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
nonhocapito
post Oct 23 2007, 03:58 PM
Post #3


Newbie
*

Group: Members
Posts: 1
Joined: 23-October 07
Member No.: 400
same thing happening to me. with KASPERSKY! Says that jconfigurator contains a trojan. Isn't it strange that two different AV programs report the same mistaken virus at the same time? Why this happens?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Serge
post Oct 23 2007, 04:18 PM
Post #4


AMIP Developer
***

Group: Root Admin
Posts: 935
Joined: 12-March 06
Member No.: 1
It could be because of the file signature similar to the trojan. Like using methods that run processes hidden or similar stuff. Ask your antivirus vendor why.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Tricks
post Oct 25 2007, 06:57 PM
Post #5


Newbie
*

Group: Members
Posts: 1
Joined: 25-October 07
Member No.: 410
QUOTE(Serge @ Oct 23 2007, 05:18 PM) *

It could be because of the file signature similar to the trojan. Like using methods that run processes hidden or similar stuff. Ask your antivirus vendor why.



Im having exactly the same problem at the moment, avg techs have asked me to send them the exe as a archived zip with it being called a virus so they can check it out, problem being i cant do that everytime i try to zip it up i get access denied by windows because i dont have the priviledges, which i do seen as im the main administrator of the computer.

Just to clear one more thing up serge why on the main website do you have the version of jConfigurator as 0.32 when the rar containing the configurator is actually 0.33?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Serge
post Oct 25 2007, 07:04 PM
Post #6


AMIP Developer
***

Group: Root Admin
Posts: 935
Joined: 12-March 06
Member No.: 1
I did a minor silent update and forgot to change the version on the site.

I've scanned jConfigurator.exe from the zip on the site at http://www.kaspersky.com/remoteviruschk and it found zero viruses in it.

I did another check at http://online.drweb.com/ and it also found no viruses.

So it looks like a problem with your antivirus. I also have no problem packing the jConfigurator.exe into zip.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
cided
post Oct 27 2007, 11:51 AM
Post #7


Newbie
*

Group: Members
Posts: 3
Joined: 27-October 07
Member No.: 411
Avira anti-virus also reports a virus in jconfigure.exe.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Serge
post Oct 27 2007, 11:55 AM
Post #8


AMIP Developer
***

Group: Root Admin
Posts: 935
Joined: 12-March 06
Member No.: 1
These all are false alerts, report to the vendor of your antivirus.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
cided
post Oct 27 2007, 04:30 PM
Post #9


Newbie
*

Group: Members
Posts: 3
Joined: 27-October 07
Member No.: 411
QUOTE(Serge @ Oct 27 2007, 01:55 PM) *

These all are false alerts, report to the vendor of your antivirus.


I have reported a false positive to avira.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
cided
post Oct 29 2007, 05:50 PM
Post #10


Newbie
*

Group: Members
Posts: 3
Joined: 27-October 07
Member No.: 411
"Avira Virus Lab Response Team <[email protected]>
to me

show details
2:03 pm (4 hours ago)

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00093107.

We received the following archive files:

File ID Filename Size (Byte) Result
2228472 jConfigurator.rar 11.47 KB OK

A listing of files contained inside archives alongside their results can be found below:
File ID Filename Size (Byte) Result
2228473 jConfigurator.exe 16.5 KB FALSE POSITIVE


Please find a detailed report concerning each individual sample below:
Filename Result jConfigurator.exe FALSE POSITIVE

The file 'jConfigurator.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates."
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Finiderire
post Jul 25 2009, 07:21 PM
Post #11


Newbie
*

Group: Members
Posts: 1
Joined: 25-July 09
Member No.: 769
Hi,

I had a strange behavior like antivirus finding a virus depending on the software I use to unzip the archive.
-download amip_foobar_09.zip file from http://amip.tools-for.net/wiki/amip/download
-unzip it will AlZip => Error and antivirus complaining for a trojan
-unzip it will 7zip => No error

a+, =)
-=Finiderire=-

Configuration : 7Zip v4.65 --- AlZip v7.0 Beta1 --- Avira Antivir Product Version v9.0.0.403 --- Foobar2000 v0.9.6.8 --- AMIP v2.65
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
« Next Oldest · Bug Reports · Next Newest »
 

Reply to this topicStart new topic
2 User(s) are reading this topic (2 Guests and 0 Anonymous Users)
0 Members:

 

Display Mode: Switch to: Standard · Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum