Re: [Mingw-users] antivirus detects hello world executable as trojan

[Andrew R. <ar...@ge...>]

Just to follow up in case someone else has this problem,  I submitted
the hello_world.exe file to http://www.virustotal.com/ where it was run
through 41 virus scanners.  7 of these (but not Kaspersky) identified it
as some variant of the Rozena Trojan (7/41 = 17%).  Inconclusive either
way, so I sent the file to Avira and today they confirmed that it was a
false positive.
Now I can rest easy, thanks Greg, your suggestions were right on.
Andrew

-----Original Message-----
From: Greg Chicares [mailto:gch...@sb...] 
Sent: Wednesday, June 09, 2010 11:20 AM
To: MinGW Users List
Subject: Re: [Mingw-users] antivirus detects hello world executable as
trojan

On 2010-06-09 13:21Z, Andrew Ross wrote:
> 
> g++ hello_world.c -o hello_world.exe
> 
> That worked fine, a "hello_world.exe" file was produced.  When I went
to
> execute the "hello_world.exe" file, I got a warning from the Avira
> antivirus software I have running on my computer, saying that
> hello_world.exe is the TR/Rozena.feb Trojan.

Try submitting your 'hello_world.exe' to an online scanner, e.g.:
  http://www.virustotal.com/
  http://virusscan.jotti.org/en
If dozens of other malware detectors find no problem with it,
then most likely it is clean, and you can provide the results to
Avira so they can investigate an apparent false positive--see:
  http://forum.avira.com/wbb/index.php?page=Thread&postID=743164
for an example.

If it's not clean, then I would guess that you had this malware
already and it is infecting programs as you compile them. If
software downloaded from MinGW's sourceforge site were the
cause, then there would have been many complaints here already.

------------------------------------------------------------------------
------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
MinGW-users mailing list
Min...@li...

This list observes the Etiquette found at 
http://www.mingw.org/Mailing_Lists.
We ask that you be polite and do the same.  Disregard for the list
etiquette may cause your account to be moderated.

_______________________________________________
You may change your MinGW Account Options or unsubscribe at:
https://lists.sourceforge.net/lists/listinfo/mingw-users