Got a virus warning.

Need help with FileZilla Client? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Locked
Message
Author
wormeyman
500 Command not understood
Posts: 4
Joined: 2005-04-20 19:23
Location: Somewhere starting browser wars.

Got a virus warning.

#1 Post by wormeyman » 2005-04-20 19:26

Image

I searched the forums for this and you guys say it has something to do with port fowarding?
MY default browser is no long IE look below one link to see why.
http://www.mozilla.org/products/firefox/why/
http://spy.wormeyman.com/ My spyware resource center.
http://www.wormeyman.com My website

jolorna
500 Command not understood
Posts: 5
Joined: 2005-04-20 20:06

2.2.13a

#2 Post by jolorna » 2005-04-20 20:10

im having the same problem as you, it only started after a new avg7 update tonight that found it , now it wont even download to the end anymore

TheAngryPenguin
226 Transfer OK
Posts: 323
Joined: 2004-03-08 18:40

#3 Post by TheAngryPenguin » 2005-04-20 20:37

Where did you download it from? I just grabbed the installer from one of the SF mirrors (EasyNews) and scanned it:

Code: Select all

Z:\>inocmd32 -ENG Ino -ARC -NEX -NOS -SFI FileZilla_2_2_13a_setup.exe

Total Files Scanned:             1
Total Viruses Found:             0
Total Infected Files Found:      0
Scan Mode:                       Secure

*** End Of Summary ***

wormeyman
500 Command not understood
Posts: 4
Joined: 2005-04-20 19:23
Location: Somewhere starting browser wars.

#4 Post by wormeyman » 2005-04-20 20:49

My default mirror is easynews.
MY default browser is no long IE look below one link to see why.
http://www.mozilla.org/products/firefox/why/
http://spy.wormeyman.com/ My spyware resource center.
http://www.wormeyman.com My website

jolorna
500 Command not understood
Posts: 5
Joined: 2005-04-20 20:06

TheAngryPenguin

#5 Post by jolorna » 2005-04-20 20:51

i have just tried to download it again from EasyNews and avg came straight away showing the virus, what anti virus are you using

wormeyman
500 Command not understood
Posts: 4
Joined: 2005-04-20 19:23
Location: Somewhere starting browser wars.

Re: TheAngryPenguin

#6 Post by wormeyman » 2005-04-20 21:13

jolorna wrote:i have just tried to download it again from EasyNews and avg came straight away showing the virus, what anti virus are you using
AVG anti virus.
MY default browser is no long IE look below one link to see why.
http://www.mozilla.org/products/firefox/why/
http://spy.wormeyman.com/ My spyware resource center.
http://www.wormeyman.com My website

jolorna
500 Command not understood
Posts: 5
Joined: 2005-04-20 20:06

wormeyman

#7 Post by jolorna » 2005-04-20 21:24

my post was posted to find out what antivirus TheAngryPenguin was using that it wouldn't pick it up not you wormeyman i could see from your first posting that you was using avg like me

User avatar
botg
Site Admin
Posts: 35509
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

#8 Post by botg » 2005-04-20 21:27

It's a false alarm.

Two possible reasons:
- Random pattern in the installer that somehow matches a virus signature. Bad virus scanners seem to report such things all the time.
- The installer contains a small dll to download the sourcecode of FileZilla on demand, some bad virus scanners think it's a trojan. (Perhaps this dll is used by some trojans?)

jolorna
500 Command not understood
Posts: 5
Joined: 2005-04-20 20:06

botg

#9 Post by jolorna » 2005-04-20 21:35

thanks for your reply i will have another go at downloading it after a few more avg updates and see if it sorts the problem out, like i sid it was ok yesterday and it was only after a update of avg that it found it as a trojan thanks for your reply

afeick
500 Command not understood
Posts: 1
Joined: 2005-04-20 22:16

#10 Post by afeick » 2005-04-20 22:23

I get the same warning, but only with 2.2.13a, no other installers. I think I'll just stick to an older version until this gets figured out. If it's a new virus, some programs may not be reporting it yet. I know from experience that McAfee can run 2-3 days behind AVG on new viri (another reason never to use McAfee).

botg, I'm not saying AVG is all that great, but I'm curious as to what you consider a "bad virus scanner".

TheAngryPenguin
226 Transfer OK
Posts: 323
Joined: 2004-03-08 18:40

Re: wormeyman

#11 Post by TheAngryPenguin » 2005-04-21 00:10

jolorna wrote:my post was posted to find out what antivirus TheAngryPenguin was using that it wouldn't pick it up not you wormeyman i could see from your first posting that you was using avg like me
Computer Associates' eTrust Antivirus 7.1. I scanned it with both the InoculateIT and Vet engines whose signatures were updated today:

Code: Select all

InoculateIT Engine version:                 23.68.00    2004/12/28
InoculateIT Signature version:  virsig.da0  23.68.104   2005/04/20


Vet         Engine version:                 11.07.00    2004/08/25
Vet         Signature version:  vet.da1     11.07.9087  2005/04/20

armadillo
500 Command not understood
Posts: 3
Joined: 2005-04-21 08:23

#12 Post by armadillo » 2005-04-21 08:29

Some more information: -

I installed 2.2.13a on a system with McAfee 8.0 (current DAT files). This found no problem.

I then scanned the FileZilla folder on that system from a networked computer running AVG 7. This detects the Downloader trojan in the file uninstall.exe.

Essentially this means that, even if AVG is disabled during FileZilla setup, it will still flag a problem afterwards. For whatever reason, this makes FileZilla 2.2.13a totally unusable on systems with AVG 7.

jolorna
500 Command not understood
Posts: 5
Joined: 2005-04-20 20:06

#13 Post by jolorna » 2005-04-21 19:02

i have just updated avg to 266.10.2 tonight and tried filezilla 2.2.13a and no virus detected now so it looks as though the problem was only caused by the avg 266.10.1 update, now a happy person again

armadillo
500 Command not understood
Posts: 3
Joined: 2005-04-21 08:23

#14 Post by armadillo » 2005-04-21 19:30

Confirmed - the AVG 266.10.2 update fixes this problem.

wormeyman
500 Command not understood
Posts: 4
Joined: 2005-04-20 19:23
Location: Somewhere starting browser wars.

#15 Post by wormeyman » 2005-04-25 18:54

Just incase you need it i can also confirm that i do not get a warning anymore.
MY default browser is no long IE look below one link to see why.
http://www.mozilla.org/products/firefox/why/
http://spy.wormeyman.com/ My spyware resource center.
http://www.wormeyman.com My website

Locked