From: <mck...@ea...> - 2006-07-01 16:42:19
|
I downloaded smartmontools-5.36-1.win32-setup.exe a few days ago, but hadn't yet had time to install it. Today while I was working on something unrelated, Norton AntiVirus 2006 popped up an alert dialog saying it had detected and removed a virus, with these details: Object: ...\smartmontools-5.36-1.win32-setup.exe Virus Name: Trojan.Zlob Action: File automatically deleted. I have no idea what triggered the virus scan; I just did a full system scan yesterday and it found one virus (not Zlob) in a file already in my Recycle bin but that was it. Trojan.Zlob isn't a new virus, and I've had the smartmontools install file for a few days (i.e. before the full scan yesterday), so I'm puzzled why NAV only just found the virus today. It seems remotely possible that NAV is mistaken and there was no virus in the file. Either way, I wanted to report the issue to the smartmontools community. b. |
From: Christian F. <Chr...@t-...> - 2006-07-01 21:59:13
|
mck...@ea... wrote: > I downloaded smartmontools-5.36-1.win32-setup.exe a few days ago, but hadn't > yet had time to install it. Today while I was working on something unrelated, > Norton AntiVirus 2006 popped up an alert dialog saying it had detected and > removed a virus, with these details: > > Object: ...\smartmontools-5.36-1.win32-setup.exe > Virus Name: Trojan.Zlob > Action: File automatically deleted. > I could reproduce the problem with the online scanner at www.virustotal.com: Symantec reports "Trojan.Zlob", all (25) others report "no virus found" Same result for the stup "lzma_solid" of the NSIS installer which is used to generate the smartmontools installer. Looks like a false positive. > Either way, I wanted to report the issue to the smartmontools community. > Thank you! Christian |
From: Christian F. <Chr...@t-...> - 2006-07-01 22:10:37
|
See also: http://nsis.sourceforge.net/NSIS_False_Positives I will add a note to smartmontools homepage. Thanks again. Christian |
From: Christian F. <Chr...@t-...> - 2006-07-03 17:41:27
|
>> I downloaded smartmontools-5.36-1.win32-setup.exe a few days ago, but hadn't >> yet had time to install it. Today while I was working on something unrelated, >> Norton AntiVirus 2006 popped up an alert dialog saying it had detected and >> removed a virus, with these details: >> >> Object: ...\smartmontools-5.36-1.win32-setup.exe >> Virus Name: Trojan.Zlob >> Action: File automatically deleted. >> >> > > I could reproduce the problem with the online scanner at www.virustotal.com: > Symantec reports "Trojan.Zlob", all (25) others report "no virus found" > > According to the online scanner, virus is no longer reported with most recent NAV virus definitions update. False positive was probably a result of the new variant "Trojan.Zlob.L" added to the definitions on friday. Christian |