Service Forum

Reo51st · Posted: Thu Jan 13, 2011 8:08 pm Post subject: Is this normal???

"";"G:\r24rf08_setup.zip:\r24rf08_setup.exe:\r24rf08.exe";"Trojan horse PSW.Banker5.BSUV";"Infected"
"";"G:\r24rf08_setup.zip:\r24rf08_setup.exe";"Trojan horse PSW.Banker5.BSUV";"Infected"
"";"G:\r24rf08_setup.zip";"Trojan horse PSW.Banker5.BSUV";"Infected"
_________________
Low flying aircraft.
The sound of freedom.

laptopheaven · Nou Venit Joined: 27 May 2008 Posts: 7 Location: Hamburg

You are using Kaspersky ?

I also got some error messages with Kaspersky AV scanner

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

The software is clean, I explained a million times what happens.
AVG, Kaspersky are just giving a lot of false positives.

For security reasons the software is packed. This is exactly like a self_extractive archive, there is a header that extracts the compressed code to the original format at run time.
Now, the compressed area is in fact harmless raw data. Raw data may take any kind of form that may match with some obscure signatures or whatever. And sometime a poor mantained AV solution like AVG (or Kaspersky) just ignores the fact that the code is packed and harmless and shows randomly false positives. A AV like Kaspersky can't even decompress the program in its real form because of its protection routines...

So, I have to repack them from time to time ot refresh the compressed area in them and avoid those AV showing falses, but after a while they hit again and I simply gave up. I even emailed them at no avail - my advice is to buy and use a real serious AV.

This above could be an example about how AV companies take control and can manipulate the software market.

Thanks

[Edit]
Seems like Kaspersky is complaining only about the setup.exe that is a self extracting RAR archive. The executables R24RF08 and R24C01 inside are ignored or reported to be clean as they are.

I repacked with a different ratio and of course the "virus" has been eliminated. Wink

Thanks for alerting us about the problem.
_________________
Victor Voinea
ALLservice HQ, Romania.

Reo51st · Posted: Sat Jan 15, 2011 12:07 am Post subject:

Thanks Victor.

Have been using the software for years with no problem.

I hope I did not ruffel any feathers by asking.

You know that I have unlocked 1000's of laptops with your help.

Please do not hold it against me.

Thanks again for all your help.

Tim.
_________________
Low flying aircraft.
The sound of freedom.

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

Hi Tim,

Don't worry, I realized that you're giving me a good reason to explain it again in the forum and I thank you for that. I also received the same notice from a customer a week or two ago, but didn't pay attention at that time (my fault), so it must be a pretty recent issue.

The funny part now is that AVG is the only one now listing it as threat even repacked, I even putted in a different content just to test it, but no...this "AV thing" is tough like a rock Smile

.... And the threat name was the same for AVG, Kaspersky and a few others so these guys are just blatantly stealing from each other violin

_________________
Victor Voinea
ALLservice HQ, Romania.

bob · Posted: Mon Feb 27, 2012 9:19 am Post subject:

Some other guy experienced even worse with AVAST

http://www.allservice.ro/forum/viewtopic.php?t=2065

m.r.c.santos · Posted: Tue Feb 28, 2012 1:23 am Post subject: Resolved

I just use the program for a short time without any problems. I solved the password problem on my Laptop and now I'm quite satisfied.
_________________
[html]https://lh5.googleusercontent.com/-y43ZCWRkbAk/Tqccaa8AFeI/AAAAAAAAAP0/w53pd9uN4Xo/s912/AssinaturaDigital.jpg[/html]

viktorz · Nou Venit Joined: 23 Mar 2012 Posts: 1