logo
0 anonymous
Views: 1080102 Challenges: 342
Users: 12689 Online: 11

Virus alert? – 3 Posts

  • Virus alert?

    06/16/2015 06:39
    kumaus's Avatar kumaus 510
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    Hi,<br><br>when I try to unpack fbi.zip, the virus scanner starts screaming. It identifies fbi.exe as a trojan (Artemis!1CC90CEA6A86). <br>Has anyone else had this problem? Or has someone been nasty?<br><br>Cheers,<br><br>Kumaus
  • 06/16/2015 06:39
    dalfor's Avatar dalfor 560
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    Given the age of the file, how it was packed, and how virus scanners have changed, I am certain that this is a false positive.<br><br>I checked the CRC from this file to the file I solved many years ago, and they are both the same.<br><br>But then again....
  • 06/16/2015 06:39
    Senseless's Avatar Senseless 160
    Not SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot SpecifiedNot Specified
    Its clean, I just ran it through Kaspersky Anti-Virus, which has good heuristics analysis. VirusTotal will tell you that many other AV vendors say its safe. There is a clear correlation between the less retutable AV programs and false positive detection, if you look at VirusTotal. Results <a href="%5C"><img alt="\&quot;link\&quot;" src="%5C">Here</a>.<br>They all say something along the line of Trojan.Packed, which means it's packed, which is typical practice for Malware authors, but does convey anything else other than it is packed, meaning its safe.<br>It being packed is part of the challenge.