Trojan in Download.com download.

by hueassa Mar 18, 2011 11:22PM PDT

I downloaded IZArc 4.1.6 from Download.com site. When I started to install, AVG issued an alert that there is a "known Trojan" PWS - SpyEyeleny. Download.com announces always that its software is tested for spy ware free. Is this alert true or false? How can I know whether such alerts are true or false?

Discussion is locked

- Collapse -

False Positive?

by MarkFlax Forum moderator Mar 18, 2011 11:51PM PDT

Hi and thanks for your post.

Can I just check, did you download this file from the web page below by clicking the "Download Now" button?
http://download.cnet.com/IZArc/3000-2250_4-10072925.html?tag=mncol;1

I ask because on occasion some rogue adverts get through and users sometimes click those in error.

If you did, then the file is IZArc4.1.6.exe and is 4.60 MB in size.

I downloaded the file myself and checked it with my own anti-virus, (ZoneAlarm Pro), and it came up clean. As a double check I then uploaded that file to Jotti's Virusscan web site to test it against a number of different scanners. It also came up clean there with 19 out of the 20 scanners they use, including AVG. One of the 20 scanners was not available for some reason. Their results are below;
http://virusscan.jotti.org/en-gb/scanresult/cc9f8f57d4cf32e70ca291d19d10f3cc286be61c/f8c06249fd57d2c244bc4aa6dd74060c385a3062

So, it looks like a False Positive, and this happens sometimes.

The next step is up to you. If you are still not sure, you can upload your file to Grisoft, the developers of AVG for them to check.

I hope that helps.

Mark

- Collapse -

Trojan in Download.com download.

by hueassa Mar 19, 2011 6:35AM PDT

Thanks for reply.
Idonot remember the URL from which I downloaded. I got an alert from CNET that anew version of IZArc is available, I clicked "Download now". Download was done. Theversion is 4.1.6 .0 and the size 4.6 MB.

- Collapse -

Still got that email?

by MarkFlax Forum moderator Mar 19, 2011 6:38AM PDT

If not, delete that one you downloaded and try the one at my link. If AVG reports the same malware then like I say, it is likely to be a False Positive.

Mark

- Collapse -

Trojan in Download,com download

by hueassa Mar 20, 2011 11:12PM PDT

Hi Mark,
Thanks for your interest in my problem.
Yes, I am sure now that it was false positive./

- Collapse -

Looking at this another way.

by r. proffitt Forum moderator Mar 19, 2011 4:27AM PDT

I see older versions of AVG did issue false positives on some Spyeye last year.

Is this AVG the latest version?

- Collapse -

Trojan in Download.com download0

by hueassa Mar 19, 2011 6:40AM PDT

Thanks for reply.
I use AVG 2011 and I update it daily.

Trojan in Download.com download.

CNET Forums

Other Forums

Forum Info