forum.vdsworld.com

mikand · Posted: Mon Jun 17, 2002 9:42 pm Post subject: Virus warning

8O Hello All - I was notified by a shareware site that all of my titles (3) have triggered their anti-virus software with this warning:

[install_taskbot.exe_pid_19479] taskbot.exe infection: could be infected
with an unknown virus
1 suspected infections found

I use Norton and scan everything with NO problems. Anyone have any ideas on why this might be happening?

I'm using VDS4.5 and VSetup2.0 to distribute the packages.

Thanks in Advance!

marty · Professional Member Joined: 10 May 2001 Posts: 789

What anti-virus software are they using?

mikand · Posted: Tue Jun 18, 2002 2:33 am Post subject: Virus warning

This one....

F-Secure Anti-Virus for i386-linux Release 4.14 build 4062 by Frisk
Software International. It is also called F-Prot.

Confused

marty · Professional Member Joined: 10 May 2001 Posts: 789

Humm.. Well I have Norton and never had any problems with VDS progs. Also I know someone that has Mcafee and no problems either. I think you should try the windows version of F-PROT on your system and see if you get the warning. Maybe they have a 30 trial for you to try.

Maybe the linux version doesnt like windows apps Wink

Sorry cant help you more than that.

mikand · Posted: Tue Jun 18, 2002 2:53 am Post subject:

Sounds like good advice.

I just completed a full scan with Norton with a clean slate.

Guess I'll keep plugging along and scratch that site off my list Smile

Thanks...

PGWARE · **Web Host** Joined: 29 Dec 2001 Posts: 1565

Hi,
McAfee virus software also occasionally reports the KExt virus in my program Alloy. I've had several customers email me about it and I have emailed McAfee about it. Unfortunately I can't tell people to stay away from McAfee's products as they have become the industry standard at educational and governmental facilities. I personally recommend Norton AntiVirus 2002 or Kaspersky Lab's AntiVirus Pro as better alternatives.

mikand · Posted: Tue Jun 18, 2002 11:14 am Post subject:

I used McAfee in the past but switched to Norton when McAfee started pushing their remote server concept. I have had no problems with Norton 2002 and leave it set on "auto-pilot" and use "live update" to keep the latest pattern files.

I strongly suspect that F-Prot has an AI engine that looks for much more than a specific code pattern. Probably analyzes the instruction set to search for "virus like" activity. Unfortunately, simple things like activating SMTP to send an email could be considered "virus like."

Well - thanks for the replies and help. I'm putting this one to bed. I don't have anything that contains a virus... (per Norton 2002)

Thanks!

marty · Professional Member Joined: 10 May 2001 Posts: 789

Just another thing, I just remembered that with a certain Antivirus prog, which I dont remember the name (Tommy's using it), it reported a Virus in my setup.exe file. All because I had a DLL compressed with Petite. So compression too sometimes gives wrong feedback to the Antivirus software...

Ciao... Wink