Sean Meighan

Software => Bugs in xLights/Nutcracker => Topic started by: Steve Gase on January 01, 2015, 09:44:41 AM

Title: xlights.exe 3.6.13 reported having a virus
Post by: Steve Gase on January 01, 2015, 09:44:41 AM

McAfee Antispyware enterprise 8.8 detected this:

Artemis!6DD17029A147  (Trojan)

Title: Re: xlights.exe 3.6.13 reported having a virus
Post by: sean on January 01, 2015, 10:04:38 AM

Quote from: Steve Gase on January 01, 2015, 09:44:41 AM

McAfee Antispyware enterprise 8.8 detected this:

Artemis!6DD17029A147  (Trojan)

could you try
https://www.virustotal.com/

and upload the ver 3.6.13 executable?

let me know the results

thanks

Title: Re: xlights.exe 3.6.13 reported having a virus
Post by: Steve Gase on January 01, 2015, 10:43:54 AM

On my system with McAfee, the exe was deleted.  I tried to reinstall and it was instantly removed again.

I scanned the installer package and it reported:
Kaspersky  ---  HEUR:Trojan.Win32.Generic

Went to a different system without McAfee, but it had Malaware and BitDefender installed:

I couldn't complete the install, it reported a MoveFile operation failed.

I went to the Nutcracker releases page to download a fresh copy of 3.6.13 and the same thing happens.

Title: Re: xlights.exe 3.6.13 reported having a virus
Post by: sean on January 01, 2015, 11:40:59 AM

Steve; i have deleted 3.6.13 from the server to be safe.

I ran https://www.metascan-online.com on 3.6.14 and 3.6.15 and they show as clean.

my original machine runs Kaspersky. For Christmas i got a dell 8700 machine. windows 7 , professional. it has 1 year of McAffe running on it.

Title: Re: xlights.exe 3.6.13 reported having a virus
Post by: Larry_OK on February 19, 2015, 08:49:58 PM

3_6_15 also scans as a virus and the exe is deleted immediately.

Here is the link to the trojan information.

http://www.cloudantivirus.com/en/threat-information/antivirus/206892/

Title: Re: xlights.exe 3.6.13 reported having a virus
Post by: sean on February 19, 2015, 11:49:55 PM

Quote from: Larry_OK on February 19, 2015, 08:49:58 PM

3_6_15 also scans as a virus and the exe is deleted immediately.

Here is the link to the trojan information.

http://www.cloudantivirus.com/en/threat-information/antivirus/206892/

I downloaded 3.6.15, mcAfee said it was fine.
I then scanned it against 40 different virus scan engines
, none showed an issue.

Title: Re: xlights.exe 3.6.13 reported having a virus
Post by: JonB256 on February 20, 2015, 06:07:56 AM

The "Virus Total" scan site does show that some scanners are reporting problems with 3.6.13.

My ESET / NOD32 sees no problem with any of my saved versions of 3.6.xx

Title: Re: xlights.exe 3.6.13 reported having a virus
Post by: sean on February 20, 2015, 09:25:15 AM

jon i removed version 3.6.13 over a month ago, where are you finding it?

http://nutcracker123.com/nutcracker/releases/

No one should be downloading older versions , as the latest 3.6.15 has the most functionality.

Title: Re: xlights.exe 3.6.13 reported having a virus
Post by: JonB256 on February 20, 2015, 10:58:24 AM

In my downloads folder.
I don't delete old versions. Just add more storage. :)

Title: Re: xlights.exe 3.6.13 reported having a virus
Post by: jnealand on February 20, 2015, 11:39:04 AM

Quote from: JonB256 on February 20, 2015, 10:58:24 AM

In my downloads folder.
I don't delete old versions. Just add more storage. :)

+1 although I finally deleted everything prior to 3.4.1  I must have some packrat blood in me.  Of course my wife says that everytime she goes into my office or workshop.  LOL