Author Topic: xlights.exe 3.6.13 reported having a virus  (Read 3897 times)

Offline Steve Gase

  • Sr. Member
  • ****
  • Posts: 284
    • View Profile
    • WinterLightShow in Georgetown, TX
xlights.exe 3.6.13 reported having a virus
« on: January 01, 2015, 09:44:41 AM »
McAfee Antispyware enterprise 8.8 detected this:

Artemis!6DD17029A147  (Trojan)

http://WinterLightShow.com  |  110K channels, 50K lights  |  Nutcracker, Falcon, DLA, HolidayCoro

Offline sean

  • Administrator
  • Hero Member
  • *****
  • Posts: 1727
    • View Profile
    • Xlights and Nutcracker Forum
Re: xlights.exe 3.6.13 reported having a virus
« Reply #1 on: January 01, 2015, 10:04:38 AM »
McAfee Antispyware enterprise 8.8 detected this:

Artemis!6DD17029A147  (Trojan)

could you try
https://www.virustotal.com/

and upload the ver 3.6.13 executable?

let me know the results

thanks
Sean
Littleton, CO
Latest releases http://nutcracker123.com/nutcracker/releases
xLights/Nutcracker Forum http://nutcracker123.com/forum/index.php
Fbook [url=https://www.facebook.com/groups/62

Offline Steve Gase

  • Sr. Member
  • ****
  • Posts: 284
    • View Profile
    • WinterLightShow in Georgetown, TX
Re: xlights.exe 3.6.13 reported having a virus
« Reply #2 on: January 01, 2015, 10:43:54 AM »
On my system with McAfee, the exe was deleted.  I tried to reinstall and it was instantly removed again.

I scanned the installer package and it reported:
Kaspersky  ---  HEUR:Trojan.Win32.Generic

Went to a different system without McAfee, but it had Malaware and BitDefender installed:

I couldn't complete the install, it reported a MoveFile operation failed.

I went to the Nutcracker releases page to download a fresh copy of 3.6.13 and the same thing happens.

http://WinterLightShow.com  |  110K channels, 50K lights  |  Nutcracker, Falcon, DLA, HolidayCoro

Offline sean

  • Administrator
  • Hero Member
  • *****
  • Posts: 1727
    • View Profile
    • Xlights and Nutcracker Forum
Re: xlights.exe 3.6.13 reported having a virus
« Reply #3 on: January 01, 2015, 11:40:59 AM »
Steve; i have deleted 3.6.13 from the server to be safe.

I ran https://www.metascan-online.com on 3.6.14 and 3.6.15 and they show as clean.

my original machine runs Kaspersky. For Christmas i got a dell 8700 machine. windows 7 , professional. it has 1 year of McAffe running on it.

Sean
Littleton, CO
Latest releases http://nutcracker123.com/nutcracker/releases
xLights/Nutcracker Forum http://nutcracker123.com/forum/index.php
Fbook [url=https://www.facebook.com/groups/62

Offline Larry_OK

  • Newbie
  • *
  • Posts: 11
    • View Profile
Re: xlights.exe 3.6.13 reported having a virus
« Reply #4 on: February 19, 2015, 08:49:58 PM »
3_6_15 also scans as a virus and the exe is deleted immediately.

Here is the link to the trojan information.

http://www.cloudantivirus.com/en/threat-information/antivirus/206892/

Offline sean

  • Administrator
  • Hero Member
  • *****
  • Posts: 1727
    • View Profile
    • Xlights and Nutcracker Forum
Re: xlights.exe 3.6.13 reported having a virus
« Reply #5 on: February 19, 2015, 11:49:55 PM »
3_6_15 also scans as a virus and the exe is deleted immediately.

Here is the link to the trojan information.

http://www.cloudantivirus.com/en/threat-information/antivirus/206892/

I downloaded 3.6.15, mcAfee said it was fine.
I then scanned it against 40 different virus scan engines
, none showed an issue.
Sean
Littleton, CO
Latest releases http://nutcracker123.com/nutcracker/releases
xLights/Nutcracker Forum http://nutcracker123.com/forum/index.php
Fbook [url=https://www.facebook.com/groups/62

Offline JonB256

  • Hero Member
  • *****
  • Posts: 832
    • View Profile
    • My Christmas Website
Re: xlights.exe 3.6.13 reported having a virus
« Reply #6 on: February 20, 2015, 06:07:56 AM »
The "Virus Total" scan site does show that some scanners are reporting problems with 3.6.13.

My ESET / NOD32 sees no problem with any of my saved versions of 3.6.xx

Offline sean

  • Administrator
  • Hero Member
  • *****
  • Posts: 1727
    • View Profile
    • Xlights and Nutcracker Forum
Re: xlights.exe 3.6.13 reported having a virus
« Reply #7 on: February 20, 2015, 09:25:15 AM »
jon i removed version 3.6.13 over a month ago, where are you finding it?

http://nutcracker123.com/nutcracker/releases/

No one should be downloading older versions , as the latest 3.6.15 has the most functionality.
Sean
Littleton, CO
Latest releases http://nutcracker123.com/nutcracker/releases
xLights/Nutcracker Forum http://nutcracker123.com/forum/index.php
Fbook [url=https://www.facebook.com/groups/62

Offline JonB256

  • Hero Member
  • *****
  • Posts: 832
    • View Profile
    • My Christmas Website
Re: xlights.exe 3.6.13 reported having a virus
« Reply #8 on: February 20, 2015, 10:58:24 AM »
In my downloads folder.
I don't delete old versions. Just add more storage. :)

Offline jnealand

  • Hero Member
  • *****
  • Posts: 1421
    • View Profile
Re: xlights.exe 3.6.13 reported having a virus
« Reply #9 on: February 20, 2015, 11:39:04 AM »
In my downloads folder.
I don't delete old versions. Just add more storage. :)

+1 although I finally deleted everything prior to 3.4.1  I must have some packrat blood in me.  Of course my wife says that everytime she goes into my office or workshop.  LOL
Jim Nealand
Kennesaw, GA