CoreVorbis 1.0 trigger trojan alarm

Avast Free Antivirus / Premium Security
1

http://corecodec.org/frs/download.php/50/CoreVorbis_1.0_20040823.exe

Is this a bug or a torjan (or perhaps it is just me being a newbie)?

Best regards and thx for a great product
Nikolaj

2

Hi, welcome to the forums.

If you are getting a virus warning that you believe is a false positive, then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem, the fact that you believe it to be a false positive and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner www.virusscan.jotti.dhs.org if any other scanners here detect them it is less likely to be a false positive.

HTH David

Edit: If however this is a large file, then you could send the URL you gave above for them to download and investigate.

3

Thx David :slight_smile:

I’ve now sent a mail

4

This is a very small file. Looks like it is a online installer to me. I think that is why it is detected as a trojan.

5

I don’t know for you guys,but my avast! doesn’t detect this file as trojan (EICAR is detected as usual).
Not even when i try to launch it (i get 16-bit program error anyway). I also tested in Win98 emulation machine and i still get 16-bit error).
I saw on Jotti scanner that its detected as Win32:Trojan-Gen {Other}.
Strange…

EDIT: Upper download link is corrupted.
You need to go to CoreCodecs webpage and download it from there. Its a false positive,thats for sure.

I have also submitted report to Alwil about this FP directly via email.