Menu

AVG detects virus in Notepad++? False pos?

Erik
2008-06-12
2012-11-13
  • Erik

    Erik - 2008-06-12

    I use notepad++ version 4.5.0.0. I use AVG free 8 with latest updates.

    AVG says it finds Trojan horse Vundo.T in C:\Program Files\Notepad++\scilexer.dll

    Does anybody else get this warning? And if so, can I assume it is false and ignore it?

     
    • Chris Gates

      Chris Gates - 2008-06-13

      OK, I just installed using the installation from the web site, the npp.4.9.2.Installer.exe.

      No errors yet, though I haven't tried to run notepad+++ from the Programs menu yet.  It opened after the install.

      I suspect, but I hope I'm wrong, that there will be the same error next time I try and open it from the Programs menu.

       
    • phsc

      phsc - 2008-06-12

      This is definitely a false positive. I would ignore it.

       
      • Erik

        Erik - 2008-06-12

        I sent in the file to their research dep. and got the following reply:

        AVG Anti-virus Research Lab has analyzed the file(s) you have sent from your AVG Virus Vault. Below you can find the results for each file. The final verdict on the file is either a correct detection or a false positive detection.

        "C:\PROGRAM FILES\NOTEPAD++\SCILEXER.DLL" - sent for deep manual analysis

        then 1,5 hours later, I received this:

        AVG Anti-virus Research Lab has analyzed the file(s) you have sent from your AVG Virus Vault. Below you can find the results for each file. The final verdict on the file is either a correct detection or a false positive detection.

        "C:\PROGRAM FILES\NOTEPAD++\SCILEXER.DLL" - detection is correct

        :/

         
        • Erik

          Erik - 2008-06-12

          You can find an overview of scanning results and a MD5 at http://www.virustotal.com/analisis/360c669acf72143186922798a344b397 by the way.

           
    • phsc

      phsc - 2008-06-12

      As you can see in your link, AVG is the only one, that recognises it as a virus. Trust me, this IS a false positive. scilexer.dll is a component of Scintilla (on which Notepad++ is based on).
      Alternatively try to upgrade to the newest version 4.9.2. Maybe the scilexer.dll has been updated and won't be recognised as a virus anymore.

       
      • Erik

        Erik - 2008-06-12

        Yeah, but AVG insists they were correct. Weird. Anyway, updated to new version and avg doesn't complain anymore.

         
    • Chris Gates

      Chris Gates - 2008-06-13

      I appreciate this thread.

      I also have AVG 8.0 (the latest) and it detected notepad++ as having a trojan horse.

      I'm tempted to just install notepad++ anyway.