1 Pages (7 items)
Virus detected - Messages
#1 Posted: 8/29/2010 7:53:30 AM
Hello. Firstly i want to thank for great and free program - it really helped me a lot doing my calculations. But i was trying to launch it after some time and i got this report from my antivirus. Also i downloaded SMath Portable again, but again Avira AntiVir still reports virus and denies access:
Virus or unwanted program 'BDS/Poison.bsbg [backdoor]'
detected in file 'C:\Documents and Settings\me\Desktop\Xenocode\Sandbox\SMath Studio Desktop\1.1.15.0\2010.07.23T01.30\Virtual\STUBEXE\8.0.1135\@DESKTOP@\SMathStudio_Desktop.exe.
Action performed: Deny access
I use Avira AntiVir Personal - Free Antivirus, OS: Windows XP.
Virus or unwanted program 'BDS/Poison.bsbg [backdoor]'
detected in file 'C:\Documents and Settings\me\Desktop\Xenocode\Sandbox\SMath Studio Desktop\1.1.15.0\2010.07.23T01.30\Virtual\STUBEXE\8.0.1135\@DESKTOP@\SMathStudio_Desktop.exe.
Action performed: Deny access
I use Avira AntiVir Personal - Free Antivirus, OS: Windows XP.
#2 Posted: 8/29/2010 8:10:08 AM
Hello.
1) Maybe Avira AntiVir Personal doesn't like Xenocode Environment execution.
2) Maybe virus program on your PC is already exists and infecting all exe-files in real time.
3) Maybe Avira AntiVir Personal found "Check For Updates" feature of SMath Studio and thinks that this is backdoor.
I think that the most possible is a second item because SMathStudio_Desktop.exe has no code to be executed directly on CPU. SMathStudio_Desktop.exe contains intermediate (IL) code that should be interpreted by .Net Framework (I'm sure, that your antivirus application can't parse IL - so it can't find anything interesting there).
FYI: As I wrote couple of days ago about SMath Studio 0.89 Portable:
I just can advise you to install another antivirus, try to check SMath Studio Portable with Avira AntiVir but on another PC or to try to use Setup version instead.
Best regards, Andrey Ivashov.
1) Maybe Avira AntiVir Personal doesn't like Xenocode Environment execution.
2) Maybe virus program on your PC is already exists and infecting all exe-files in real time.
3) Maybe Avira AntiVir Personal found "Check For Updates" feature of SMath Studio and thinks that this is backdoor.
I think that the most possible is a second item because SMathStudio_Desktop.exe has no code to be executed directly on CPU. SMathStudio_Desktop.exe contains intermediate (IL) code that should be interpreted by .Net Framework (I'm sure, that your antivirus application can't parse IL - so it can't find anything interesting there).
FYI: As I wrote couple of days ago about SMath Studio 0.89 Portable:
Wrote"Softpedia guarantees that Portable SMath Studio 0.89 Build 3856 is 100% Clean, which means it does not contain any form of malware, including but not limited to: spyware, viruses, trojans and backdoors."
(details)
I just can advise you to install another antivirus, try to check SMath Studio Portable with Avira AntiVir but on another PC or to try to use Setup version instead.
Best regards, Andrey Ivashov.
#3 Posted: 8/30/2010 9:40:53 AM
I scanned it with the same antivirus running on the same OS. It found nothing.


#4 Posted: 9/2/2010 1:13:52 PM
He there,
I came across this very usefull tool a couple of days ago... Thanks for it.
And I also experienced the same virus found on the same file with the same antivirus software.
@TripleKill rus: Note that you scanned a different file then coreInterest did.
The mentioned file is deep into the folder structure that Smath STudio Portable creates when first executed.
I did a run with 2 different virus scanners launched from an linux system and they both did not find anything.
I'm unsure what to make out of this, but for the moment I am thinking that ANtivir is misinterpreting something.
Regards, Sven
I came across this very usefull tool a couple of days ago... Thanks for it.
And I also experienced the same virus found on the same file with the same antivirus software.
@TripleKill rus: Note that you scanned a different file then coreInterest did.
The mentioned file is deep into the folder structure that Smath STudio Portable creates when first executed.
I did a run with 2 different virus scanners launched from an linux system and they both did not find anything.
I'm unsure what to make out of this, but for the moment I am thinking that ANtivir is misinterpreting something.
Regards, Sven
#5 Posted: 9/3/2010 6:08:50 AM
He,
I did send the file to Avira and let them know the troubles described above.
Their response was that the virus message was a "false positive" recognition.
In one of the next updates the issue will be solved.
Sven
I did send the file to Avira and let them know the troubles described above.
Their response was that the virus message was a "false positive" recognition.
In one of the next updates the issue will be solved.
Sven
#6 Posted: 9/3/2010 6:36:05 AM
sven, thank you!
#7 Posted: 9/5/2010 2:07:13 PM
Thanks for your quick response, smath, and thanks to everybody who posted on this issue! I checked this file with TrendMicro online AV and it showed no threat. Also, after a few days i updated my Avira AntiVir, started SMath Portable and guess what - now there were no problem. That was false alarm - i had this thought from beginning, just wanted to be sure.
1 Pages (7 items)
-
New Posts
-
No New Posts