Virus detected

Virus detected - Сообщения

#1 Опубликовано: 29.08.2010 07:53:30
coreInterest

coreInterest

0 сообщений из 2 понравились пользователям.

Группа: User

Hello. Firstly i want to thank for great and free program - it really helped me a lot doing my calculations. But i was trying to launch it after some time and i got this report from my antivirus. Also i downloaded SMath Portable again, but again Avira AntiVir still reports virus and denies access:

Virus or unwanted program 'BDS/Poison.bsbg [backdoor]'
detected in file 'C:\Documents and Settings\me\Desktop\Xenocode\Sandbox\SMath Studio Desktop\1.1.15.0\2010.07.23T01.30\Virtual\STUBEXE\8.0.1135\@DESKTOP@\SMathStudio_Desktop.exe.
Action performed: Deny access

I use Avira AntiVir Personal - Free Antivirus, OS: Windows XP.
#2 Опубликовано: 29.08.2010 08:10:08
Andrey Ivashov

Andrey Ivashov

2269 сообщений из 3729 понравились пользователям.

Группа: Super Administrator

Hello.

1) Maybe Avira AntiVir Personal doesn't like Xenocode Environment execution.
2) Maybe virus program on your PC is already exists and infecting all exe-files in real time.
3) Maybe Avira AntiVir Personal found "Check For Updates" feature of SMath Studio and thinks that this is backdoor.

I think that the most possible is a second item because SMathStudio_Desktop.exe has no code to be executed directly on CPU. SMathStudio_Desktop.exe contains intermediate (IL) code that should be interpreted by .Net Framework (I'm sure, that your antivirus application can't parse IL - so it can't find anything interesting there).

FYI: As I wrote couple of days ago about SMath Studio 0.89 Portable:
Wrote

"Softpedia guarantees that Portable SMath Studio 0.89 Build 3856 is 100% Clean, which means it does not contain any form of malware, including but not limited to: spyware, viruses, trojans and backdoors."


(details)



I just can advise you to install another antivirus, try to check SMath Studio Portable with Avira AntiVir but on another PC or to try to use Setup version instead.

Best regards, Andrey Ivashov.
#3 Опубликовано: 30.08.2010 09:40:53
TripleKill rus

TripleKill rus

0 сообщений из 1 понравились пользователям.

Группа: User

I scanned it with the same antivirus running on the same OS. It found nothing.

#4 Опубликовано: 02.09.2010 13:13:52
sven

sven

0 сообщений из 2 понравились пользователям.

Группа: User

He there,
I came across this very usefull tool a couple of days ago... Thanks for it.
And I also experienced the same virus found on the same file with the same antivirus software.
@TripleKill rus: Note that you scanned a different file then coreInterest did.
The mentioned file is deep into the folder structure that Smath STudio Portable creates when first executed.

I did a run with 2 different virus scanners launched from an linux system and they both did not find anything.
I'm unsure what to make out of this, but for the moment I am thinking that ANtivir is misinterpreting something.

Regards, Sven
#5 Опубликовано: 03.09.2010 06:08:50
sven

sven

0 сообщений из 2 понравились пользователям.

Группа: User

He,

I did send the file to Avira and let them know the troubles described above.
Their response was that the virus message was a "false positive" recognition.
In one of the next updates the issue will be solved.

Sven
#6 Опубликовано: 03.09.2010 06:36:05
Andrey Ivashov

Andrey Ivashov

2269 сообщений из 3729 понравились пользователям.

Группа: Super Administrator

sven, thank you!
#7 Опубликовано: 05.09.2010 14:07:13
coreInterest

coreInterest

0 сообщений из 2 понравились пользователям.

Группа: User

Thanks for your quick response, smath, and thanks to everybody who posted on this issue! I checked this file with TrendMicro online AV and it showed no threat. Also, after a few days i updated my Avira AntiVir, started SMath Portable and guess what - now there were no problem. That was false alarm - i had this thought from beginning, just wanted to be sure.
  • Новые сообщения Новые сообщения
  • Нет новых сообщений Нет новых сообщений