Hi … I am trying to download this program for yahoo messenger and Avast is alerting me of a trojan , Is it or isn’t it a torjan? Thanks
…
Dr. Web says the link (webpage) is clean, but the programs that eventually could be downloaded from there, I don’t know.
Please, do not post live links to files/sites that are malware infected or could be. Edited it.
To know if a file is a false positive, please submit it to JOTTI or VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.
This link is a tutorial on how to help correct a virus detection that you believe to be false:
http://forum.avast.com/index.php?topic=25009.msg204838#msg204838
Well DrWeb doesn’t find anything at the web link nor does avast for the page, but alerts when you download.
Uploading to VirusTotal now, but there is a long queue so it might take some time.
Update:
Well avast isn’t alone in detecting this. What is notable is the part of the malware name associated by many of the other AVs ‘HackTool.’ This in itself would lead me to think it is being detected as a tool that could also be used for malicious or good intentions.
So should it be detected. I think so, but perhaps under a different more appropriate name.
Sorry about that , I didn’t know , Its my first time , Though I will do such next time around , Any ways I found a little more details about this download alert , It has something to do with a dll which log in to yahoo , From my understanding it causes the anti-virus softwares to send a alert , Though still I am not 100% sure its ok until I do as suggested here , Thanks for all your respones
No problem, that is how you learn.
From what you believe it does this ‘tool’ could well be used for harm as well as good and that is likely why it is detected by the AVs on the image I posted. Now how do you decide, well if you install the tool and are aware of it and exactly what it does no problem, however if you didn’t install it, etc. then it would be potentially malicious. “Removing YOUR name from somebody else’s Yahoo! friends list” is effectively modifying someone else’s computer data is it not and I guess this what the ‘Hack’ is about in the ‘hacktool’ element of the detections.
This one is strange in that it is detecting the installer and not a file within the installation .exe file. It isn’t detecting any dll file within the installation exe but the installer itself.
You have to decide if the potential risk is greater than the purpose you want to use it for and if there isn’t another such tool that doesn’t set off these alerts.
Do you have the name and the path of this particular dll?
Which virus warning is being shown, I mean, the name of the virus.
It isn’t a dll that is being detected but an installer exe file as in my post.
Just check my virustotal image where I uploaded it for scanning, the malware name/s and file name is there.
I see… sorry for the useless question.