Again Virus / Trojan warnings

[McBurri]

Dokładnie dlatego jest rozpoznawany jako "zły program"
Właśnie z uwagi na swoje funkcje wyciągania i dekodowania hasełek.
Mój NOD32 rozpoznaje jako "podejrzany program" np. TojanRemover'a, PKPM'a, Snad Boy'a, UX Theme Pather'a i jeszcze wiele innych.
Nawet zamiennki shell'a Aston też się załapał na tą listę mimo, iż nie jest szkodliwy i nie zawiera żadnego podejrzanego kodu.
To raczej jest wina algorytmów heurystyki w danym programie antywirusowym, a dokładnie jej nadgorliwość = fałszywe alarmy.

[ekstend]

ESET Smart Security v3.0.556 with latest update also report WIN32/PSWTOOL.SNADBOY.2011 in archive (tcup.exe) when I try DL
chears

[Jh.soft.serv]

I can confirm, I have latest eset smart security 3.0.621 with latest updates and finds out the same.
I find out that this spy is in subdirectory plugins/tools/Revelation.
Just in this directory.
Beware.

Solution, remove all infekced files in this folder nad use TCUP without problems

[crowley]

as written several times:

revelation is NOT a virus or trojan.

As its functionality is to display passwords disguised in passwordentry fields (hidden by dots or stars), it COULD be used as a "spy" tool. And that is, why some security software (anti-virus, firewall etc.) report it as spyware or password ripper or pswtool (password tool).

Itself does not contain any harmful code and you do not have to fear anything by executing that specific program.

[Jh.soft.serv]

as written several times:

revelation is NOT a virus or trojan.

As its functionality is to display passwords disguised in passwordentry fields (hidden by dots or stars), it COULD be used as a "spy" tool. And that is, why some security software (anti-virus, firewall etc.) report it as spyware or password ripper or pswtool (password tool).

Itself does not contain any harmful code and you do not have to fear anything by executing that specific program.

Thanx for answer

[kaszczu]

trojan ...

[crowley]

trojan ...

probably should you read this thread, before posting something, which is described sooooo often before ^^


this is NOT a trojan

[John]

Hey I've got one more. I'm using Avira Premium Security Suite 8 and it gives me a positive on some type of a malware:

   

TC UP>Plugins>wbx>Starter>Starter.wbx

[m^2]

Hey I've got one more. I'm using Avira Premium Security Suite 8 and it gives me a positive on some type of a malware:



TC UP>Plugins>wbx>Starter>Starter.wbx

Thank you for the report. What Antivirus is it? I'll contact it's makers that this is a false positive.

[John]

It's Avira Premium Security Suite 8.0 and on the screen shot you can see all their contact info.