Giveaway of the Day Forums » Tag: malware

Giveaway of the Day Forums » Tag: malware - Recent Posts http://www.giveawayoftheday.com/forums/tags/malware Giveaway of the Day Forums » Tag: malware - Recent Posts en-US Sun, 12 Feb 2012 13:57:02 +0000 http://bbpress.org/?v=1.0.2 Serina on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/10#post-99119 Fri, 03 Feb 2012 19:10:14 +0000 Serina 99119@http://www.giveawayoftheday.com/forums/ Thanks! hotdoge3 on "Backdoor install" http://www.giveawayoftheday.com/forums/topic/10953#post-98297 Sat, 31 Dec 2011 04:15:49 +0000 hotdoge3 98297@http://www.giveawayoftheday.com/forums/ I did not get Handy Start Menu. but did get from GOTD YourUninstaller & DPAnimatorMaker_20 as for YourUninstaller can not find it, as for DPAnimatorMaker I take it off as it not work at all but it keeps coming back & so dose Libre Office I have scan the PC with cwshredder, irclean, NortonSecuryScan,NortonPowerEraser,DrWeb,BetdefenderZbotRemover,PanderClouldAntivirus,avira,avast,and 15 RootkitScanners all ok but for diskboss NortonPowerEraser kill it. graylox on "Backdoor install" http://www.giveawayoftheday.com/forums/topic/10953#post-97864 Sat, 17 Dec 2011 10:54:37 +0000 graylox 97864@http://www.giveawayoftheday.com/forums/ Just a question from me, where did you download the installer? Directly from the webpage of the developer or was it the original GOTD zip-file? strydrdenis on "Backdoor install" http://www.giveawayoftheday.com/forums/topic/10953#post-97861 Sat, 17 Dec 2011 07:11:02 +0000 strydrdenis 97861@http://www.giveawayoftheday.com/forums/ I just thought I'd let you know about a program called Handy Start Menu. I installed this as an offer from GOTD and really liked the program. The bad news was that today I get a popup on my Desktop saying my trial version of Full Uninstall was over and that I have to register and pay for it. Now the problem is I never downloaded or installed that program. I started checking it out and found it came from the same vendor as Handy Start Menu. To confirm what I was now thinking I used the same software file that I had kept from Handy Menu and did a re-install of the program,sure enough Full Uninstall was back on my computer. While installing no message came up advising me I was also installing the second program. There were no opt-in or opt-out buttons, nor did it even mention the other software. Now this program Full Uninstall doesn't seem harmful but I'm still extremely mad that it was installed the way it was. To me this is Malware and I have written the company and advised them how I felt. Has anyone out there had this problem. jcollake on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/10#post-95571 Tue, 27 Sep 2011 21:49:43 +0000 jcollake 95571@http://www.giveawayoftheday.com/forums/ Please see the new project intended to fix and PREVENT false positive and mis-rated sites through TRANSPARENCY and ACCOUNTABILITY. By submitting reports to a CENTRAL location, security vendors can find them easily, communicate with affected parties, and USERS can see which security vendors are trying to AVOID COLLATERAL DAMAGE. Remember, once a false positive or mis-rating happens, the damage is already done. So, in addition to fixing them rapidly, security vendors must be interested in working to AVOID them. Some are, some aren't. This non-profit, all volunteer site will help show which security vendors care the most. Please see: <a href="http://falsepositivereport.com" rel="nofollow">http://falsepositivereport.com</a> hotdoge3 on "Comodo Cleaning Essentials 1.8.207117.137" http://www.giveawayoftheday.com/forums/topic/10457#post-95277 Tue, 20 Sep 2011 10:02:12 +0000 hotdoge3 95277@http://www.giveawayoftheday.com/forums/ Thanks looks better than Comodo Cloud Scanner I used a few times allso free <a href="http://www.comodo.com/home/internet-security/cloud-scanner.php" rel="nofollow">http://www.comodo.com/home/internet-security/cloud-scanner.php</a> mikiem2 on "Comodo Cleaning Essentials 1.8.207117.137" http://www.giveawayoftheday.com/forums/topic/10457#post-95262 Mon, 19 Sep 2011 22:56:45 +0000 mikiem2 95262@http://www.giveawayoftheday.com/forums/ Anti alware software, Comodo Cleaning Essentials 1.8.207117.137 is out -- <a href="http://www.neowin.net/news/comodo-cleaning-essentials-18207117137" rel="nofollow">http://www.neowin.net/news/comodo-cleaning-essentials-18207117137</a> -- <a href="http://www.comodo.com/business-security/network-protection/cleaning_essentials.php" rel="nofollow">http://www.comodo.com/business-security/network-protection/cleaning_essentials.php</a> ... Note you might prefer to download via the Neowin article to skip filling out the form on the Comodo site. Billed as portable, with 32 & 64 bit versions, running a virus scan caused an pattern update -- when everything was said & done there were a lot of files left over in the temp folder, new CCE & KillSwitch folders were added to All Users\ & User\ Application Data [4 folders], & the registry got a recorded 55 new entries... Not too bad really, unless you bill your app as portable. :-) No shortcuts were added, nor is there any entry in Add/Remove Programs. Scanning did not seem to conflict with the running Security Essentials [Microsoft], & KillSwitch looks like it might be an interesting tool to play with -- slightly more along the lines of Process Explorer than Task Mgr., KillSwitch lists running apps/processes along with a safety rating. hotdoge3 on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/10#post-95044 Tue, 13 Sep 2011 00:39:50 +0000 hotdoge3 95044@http://www.giveawayoftheday.com/forums/ Try and see if bad or not ? you not say the name of the file exe dll so on may help ? <a href="http://www.virustotal.com/" rel="nofollow">http://www.virustotal.com/</a> <a href="http://virusscan.jotti.org/en-gb" rel="nofollow">http://virusscan.jotti.org/en-gb</a> scan on line and see if it virus or not no driver on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/10#post-95033 Mon, 12 Sep 2011 19:48:38 +0000 no driver 95033@http://www.giveawayoftheday.com/forums/ On August 18th I downloaded the PDF to Excel Converter and when I started installing it Symantec Endpoint Protection immediately tagged the setup.exe from the pdftoexcelconverter.zip file as infected with Bloodhound.Sonar.9. The file was quarantined and I figured it had probably been intercepted. I haven't ever used the software that I downloaded, and forgot about it. The last two weeks I have gotten a daily alert that another file on my computer, which is part of a service from our IT department, is also infected. Can anyone look into this for me? I still have the original zip file that I downloaded and can provide it if anyone wants or needs verification that it contains a virus. hotdoge3 on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/10#post-92618 Sun, 03 Jul 2011 02:46:32 +0000 hotdoge3 92618@http://www.giveawayoftheday.com/forums/ <a href="http://www.virustotal.com/" rel="nofollow">http://www.virustotal.com/</a> <a href="http://virusscan.jotti.org/en-gb" rel="nofollow">http://virusscan.jotti.org/en-gb</a> scan on line and see if it virus or not luca23 on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/9#post-92541 Fri, 01 Jul 2011 12:26:36 +0000 luca23 92541@http://www.giveawayoftheday.com/forums/ Ho appena installato "Immagine Downloader" ed è stato consigliato dal mio AVG is 9.0 che conteneva un malware. uso windows 7 sp1. l'antivirus è aggiornato,l'ultimo aggiornamento è stato fatto oggi,il 17\2011 Luckyman on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/9#post-92538 Fri, 01 Jul 2011 11:10:08 +0000 Luckyman 92538@http://www.giveawayoftheday.com/forums/ Hi, I just installed "Picture Downloader" and was advised by my AVG Anti-Virus Free software that it contained a trojan horse. 1) I use AVG Anti-Virus Free 9.0.901 with virus database 271.1.1/3737 2) PD.exe contained a Trojan horse called SHeur3.CHKN 3) I'm running Windows Vista SP2 My scanner signature/database is up to date and current. kenojunk on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/9#post-91297 Fri, 27 May 2011 08:07:34 +0000 kenojunk 91297@http://www.giveawayoftheday.com/forums/ I have the very same Malware message as Samizdat, except with Google Chrome right after downloading Photostitcher, and it ultimately prevented me from accessing internet with ANY browser. Turned out I had a nasty virus in OS that required reimage. hotdoge3 on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/9#post-91245 Wed, 25 May 2011 08:59:58 +0000 hotdoge3 91245@http://www.giveawayoftheday.com/forums/ noscript, you don't need flashblock as noscript will stop flash as for uninstall firefox with revo uninstaller, I don't like as no need and you can refit firefox and it will pick up all the old ad-ons if you think ad-ons are bad you can click Help Restart with Add-ons Disabled test and add one at a time to find the bad one graylox on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91230 Tue, 24 May 2011 23:07:33 +0000 graylox 91230@http://www.giveawayoftheday.com/forums/ <a href="http://www.dilbert.com/2011-05-24/">May 24, 2011</a> . <img src="http://www.picdepict.com/images/74883096946252310923.gif"> <img src="http://www.picdepict.com/images/75660579126626781870.gif"> <a href="http://www.dilbert.com/2011-05-24/" rel="nofollow">http://www.dilbert.com/2011-05-24/</a> chazzo125 on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91191 Mon, 23 May 2011 17:13:51 +0000 chazzo125 91191@http://www.giveawayoftheday.com/forums/ ps sorry nice clean Wabbit! :) Vany@ on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/9#post-91187 Mon, 23 May 2011 14:34:38 +0000 Vany@ 91187@http://www.giveawayoftheday.com/forums/ hi AP. maybe i'm of some help. excuse me if i post something that has already been posted by someone. first of all. check if you has a multiple AV/antispyware with resident shield enabled. if you have it disable ALL (SO WE CAN VIEW if it's their fault) i've read you has AVG 2011. it has done the same thing to me. check the quarantine and disable the check of the web temporarily. the try again. if it's fault of avg who checks and quarantine the files probably you pc has been infected by some malware who infect all the files you download (and so you avg quarantine it) check even your zero day protection sw (generally it acts in background) particularly if you use threathfire (very good but invasive) however i don't think is this the reason. yeah. all this was a preliminary check to exlude the most common reason and establish you pc is sane (check also with malwarebytes, spyware doctor and super antispyware in a row). i think indeed you use firefox with a lot of security extension malconfigured. for example noscript, adkiller, flashblock, flasblock, betterprivacy and ghostery all this very useful extension are designed to "monitor and eventually block java content in some way. you see ... the download is performed by a script and so if you has malconfigured your extension these can conflict each other. try disabling ALL reboot your firefox (or chrome) and try to download again. it can be also a fault in the updating of your firefox. i love firefox is my favourite browser but he can be erratic in his update process. ultimately if all fails try to uninstall firefox with revo uninstaller (which removes all trace of the sw with the last option) and reinstall firefox. then try to download if all is fine was a updating error. now reinstall your extension and configure them one by one trying if there is a download issue. hoping to help. BentlyTCow on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91180 Mon, 23 May 2011 10:54:49 +0000 BentlyTCow 91180@http://www.giveawayoftheday.com/forums/ I wouldn't put it past him :) hotdoge3 on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/9#post-91167 Mon, 23 May 2011 04:40:34 +0000 hotdoge3 91167@http://www.giveawayoftheday.com/forums/ update now look's like false positives. may be in a few days all good with a update <a href="http://www.virustotal.com/file-scan/report.html?id=28c3e2aa9c5e67cf6f41e00eee10e7f5b588964fbb24485ce9a6c5ceca5a579e-1306014612" rel="nofollow">http://www.virustotal.com/file-scan/report.html?id=28c3e2aa9c5e67cf6f41e00eee10e7f5b588964fbb24485ce9a6c5ceca5a579e-1306014612</a> File name:ASTROAVENGER.EXE Submission date:2011-05-21 21:50:12 (UTC) Result:2 /42 (4.8%) ClamAV and Ikarus are not good. chazzo125 on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91161 Sun, 22 May 2011 21:33:57 +0000 chazzo125 91161@http://www.giveawayoftheday.com/forums/ GOTD is always completely clean, apart from some of the jokes on the forum, . . . or if WR hasn't washed behind his huge Wabbit ears lately LOL! <img src="http://game.giveawayoftheday.com/wp-includes/images/smilies/icon_lol.gif"> By way of the thread title Microsoft's definition of malware probably (as in does!) include the many various toolbars classed as adware, torrent P2P files, many keygens and such-like most of which is completely harmless! I would guess a HUGE proportion of MS's ratio link to false positives! From researching free games, a supposedly notorious risk (ROFL!! :)) I doubt that 1 in 10000 downloads might carry any risk, and Google now seems not to list sites that have a known drive-by download risk. If you use AVG link scanner you can also almost entirely avoid any sites that link to malware. Some older games get false flagged as positives too. Comodo/AVG have sometimes listed Gamehouse downloader as malware simply because it accesses the Internet from your computer to download the Gamehouse game! And you can't get more innocuous and innocent than that! It was riskier previously to search for free games downloads, but with modern firewalls and Windows updates, and good AV programs, any risk is very minimal, and there are many more good (safe!) sites out there these days. PS has Beta anything to do with beta-carotene as found in carrots sniff sniff ?! Does this mean WR himself is still in Beta? ! <img src="http://game.giveawayoftheday.com/wp-includes/images/smilies/icon_wink.gif"> Whiterabbit-uk on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91143 Sun, 22 May 2011 00:58:23 +0000 Whiterabbit-uk 91143@http://www.giveawayoftheday.com/forums/ HaHa, that is so funny. graylox on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/9#post-91141 Sat, 21 May 2011 19:54:20 +0000 graylox 91141@http://www.giveawayoftheday.com/forums/ Well NoVirus has only 6 test tools yet. I have tested with VirusTotal and got 3 red out of 43. <a href="http://www.virustotal.com/file-scan/report.html?id=28c3e2aa9c5e67cf6f41e00eee10e7f5b588964fbb24485ce9a6c5ceca5a579e-1305967450" rel="nofollow">http://www.virustotal.com/file-scan/report.html?id=28c3e2aa9c5e67cf6f41e00eee10e7f5b588964fbb24485ce9a6c5ceca5a579e-1305967450</a> And this is the report of Jotti's Malwarescan. <a href="http://virusscan.jotti.org/en/scanresult/b14b37d74fdfbc33344223923f9616cf3cad081e" rel="nofollow">http://virusscan.jotti.org/en/scanresult/b14b37d74fdfbc33344223923f9616cf3cad081e</a> You can be sure, that these three are false positives. GOTD always scans the packages their give away - otherwise it would be a bad reputation. Please read the FAQ: <a href="http://www.giveawayoftheday.com/faq/">Viruses detection</a> graylox mark94 on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/9#post-91140 Sat, 21 May 2011 15:57:04 +0000 mark94 91140@http://www.giveawayoftheday.com/forums/ Hi, sorry for my bad english (I'm german^^). Today I've downloaded "Astro Avenger" and my virus scanner told me that "AstroAvenger.exe" is spyware. I'm using "Ashampoo Anti-Malware". Further informations: System: Win7 64bit File Info Report date: 2011-05-21 17:44:41 (GMT 1) File name: astroavenger-exe File size: 1785856 bytes MD5 Hash: 590dbdb889fb347a71372f70f75e570f SHA1 Hash: 4e69d6b78858a3e81a3db4d56722b1e75e215713 Detection rate: 2 on 6 (33%) Status: INFECTED Detections AVG - [/color] Avira AntiVir - [color=red] ClamAV - [/color] Emsisoft - [color=red]Trojan.Win32.Buzus!IK TrendMicro - [/color] Zoner - [color=red]Trojan.Ardamax.JLF Scan report generated by <a href="http://novirusthanks.org">NoVirusThanks.org</a> Yours Sincerely Mark BentlyTCow on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91132 Sat, 21 May 2011 02:14:08 +0000 BentlyTCow 91132@http://www.giveawayoftheday.com/forums/ <blockquote>Unfortunately he has not responded to Carrotine(TM).</blockquote> <blockquote> </blockquote> That's because it's still in beta. hotdoge3 on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91131 Sat, 21 May 2011 01:46:40 +0000 hotdoge3 91131@http://www.giveawayoftheday.com/forums/ Thanks Whiterabbit-uk You right most of the GOTD are clean and as you say turned out to be false positives. I hope They take the links so they under stand it on the WWW, I don't download all like I did not good, by the way do you know some ware I can download the is good & clean ? pavid on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91128 Fri, 20 May 2011 20:51:54 +0000 pavid 91128@http://www.giveawayoftheday.com/forums/ Yep that's right. The ONLY thing infected on the Giveaway site is our dear old rabbit!!! Unfortunately he has not responded to Carrotine(TM). Whiterabbit-uk on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91102 Fri, 20 May 2011 10:22:15 +0000 Whiterabbit-uk 91102@http://www.giveawayoftheday.com/forums/ Hi Hotdog, I've re-worded your thread title slightly because it may have implied to some community members that giveaways from this site came under that category. For those new to the giveaway project, the giveaway team carry out rigorous tests using several security programs to ensure that all giveaways are free from malware. You may occasionally see someone posting that they think a particular program is infected becasue their security software says it is. This has always turned out to be false positives. hotdoge3 on "1 out of every 14 programs downloaded from the web - later confirmed as malware." http://www.giveawayoftheday.com/forums/topic/9762#post-91101 Fri, 20 May 2011 06:09:37 +0000 hotdoge3 91101@http://www.giveawayoftheday.com/forums/ <a href="http://blogs.msdn.com/b/ie/archive/2011/05/17/smartscreen-174-application-reputation-in-ie9.aspx" rel="nofollow">http://blogs.msdn.com/b/ie/archive/2011/05/17/smartscreen-174-application-reputation-in-ie9.aspx</a> Windows 7 Only IE 9 1 out of every 14 programs downloaded is later confirmed as malware. <a href="http://blog.chromium.org/2011/04/protecting-users-from-malicious.html" rel="nofollow">http://blog.chromium.org/2011/04/protecting-users-from-malicious.html</a> Google search and browsers such as Google Chrome, Firefox, and Safari to warn users who may attempt to visit these dangerous webpages. hotdoge3 on "Review Trojan/Virus Reports" http://www.giveawayoftheday.com/forums/topic/719/page/9#post-91095 Thu, 19 May 2011 23:16:13 +0000 hotdoge3 91095@http://www.giveawayoftheday.com/forums/ had Malwarebytes said bad Adware on my Antivirus so I said fix it and it take off the ad for %30 off Price to buy may be some ad's not so bad ? hotdoge3 on "Windows 7 malware is camouflaged using unicode filename trickery & XP is OK" http://www.giveawayoftheday.com/forums/topic/9742#post-91016 Tue, 17 May 2011 09:00:47 +0000 hotdoge3 91016@http://www.giveawayoftheday.com/forums/ <a href="http://www.theinquirer.net/inquirer/news/2070768/windows-malware-camouflaged-unicode-filename-trickery" rel="nofollow">http://www.theinquirer.net/inquirer/news/2070768/windows-malware-camouflaged-unicode-filename-trickery</a> Windows 7 malware is camouflaged using unicode filename trickery Also affects Windows Vista LONG SUFFERING Windows PC users have been warned about malware Trojans that camouflage malicious executable files using a fancy unicode trick. Unicode is a computing industry standard that provides a unique number for every character you use, no matter what system you are using. With malicious trickery, criminals have worked out how to fiddle with unicode so that some characters in a Windows filename can be reversed. Security firm Norman found malicious email attachments that appeared on the surface to have filenames with standard alphabetical characters, with unicode-capable viewers seeing nothing out of the ordinary. However, if you look at the file from a command prompt, it shows that the last bit of the filename has actually been reversed, and that this seemingly innocuous emailed file is actually an executable. Norman tested other filenames, and found that the same unicode trick allowed files to hide the fact that they were executable in the email client Lotus Notes. The firm said that any filename could hide extensions like PDF and EXE using the trick. The firm said that the issue only affects Windows Vista and Windows 7 users, as Windows XP users have to install support for right-to-left languages in order to be vulnerable. Email clients other than Lotus Notes could also treat the issue differently, as some don't support unicode, while others are programmed to block executables even if the file's name doesn't display it as being executable. Norman warned simply, "Do not rely on any file attachment or file on any device to be safe based on its file name." µ