Menu

#491 Found Trojan-Downloader.Win32.Zlob.tb

2.0 Series
closed-fixed
General (291)
5
2006-06-17
2006-06-16
Anonymous
No

i use 2.17.

after complie, uninstall.exe infected using kaspersky.

\NSIS\Stubs\lzma have been infected.

So, done any compile, must infected.

rebuild 2.17.

Discussion

  • Nobody/Anonymous

    virus scan result

     
  • Nobody/Anonymous

    Logged In: NO

    I have also found this with F-secure when installing ver 2.17.
    I tried several downloads from different mirrors, all infected.

    Please rebuild 2.17.

    Version 2.16 is OK.

     
  • Amir Szekely

    Amir Szekely - 2006-06-16

    Logged In: YES
    user_id=584402

    There's no need to rebuild. The installer isn't infected
    with anything. It's just another false positive. Please
    report it to Kaspersky and F-secure. Feel free to give them
    my e-mail address for details - kichik@users.sf.net.

     
  • Bengt-Erik

    Bengt-Erik - 2006-06-16

    Logged In: YES
    user_id=1540928

    I have submitted your comments to F-Secure with attachment
    of the NSIS-2.17-setup.exe, and also a screenshot of their
    trojan report.
    Hopefully the problem will be solved soon.
    Thank you for your quick response

    bengt.erik.soderstrom@telia.com

     
  • Amir Szekely

    Amir Szekely - 2006-06-17

    Logged In: YES
    user_id=584402

    F-Secure has e-mailed saying the problem will be fixed and
    released a new definitions file. Kaspersky's online file
    scanner no longer detects lzma or uninstall.exe.

    Please reopen this ticket if the problem persists.

     
  • Amir Szekely

    Amir Szekely - 2006-06-17
    • assigned_to: nobody --> kichik
    • status: open --> closed-fixed
     
  • Bengt-Erik

    Bengt-Erik - 2006-06-19

    Logged In: YES
    user_id=1540928

    I confirm with the latest virus definitions from F-Secure,
    no longer lzma in NSIS ver 2.17 is rejected.

    I believe the matter can be closed now.

     

Log in to post a comment.