Win32:Trojan-gen. {VC}

Viruses and worms
1

I am a user of Activ Ebook Compiler but in the past few days, I haven’t been able to open any AEC related files or compilations without getting a virus warning.

Is this a false alarm? I even downloaded the compiler setup file again from www.ebookcompiler.com but it triggers an alarm when I try to install it.

2

Most probably, the last VPS update included a lot of trojan gen signatures and, as a consequence, more false positives than usual.

To know if a file is a false positive, please submit it to JOTTI and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used. :wink:

3

Yes I noticed an old ebook (ClickbankStorefront.exe file) that I have had for ages was detected as Win32:Trojan-gen. {VC} on a routine scan hours after the 0603-0 VPS update, which I sent off.

Only avast picked it up on Jotti none of the other scanners.

4

Guess that’s a false positive then. Do I need to send the compiler setup file or can you just download it from www.ebookcompiler.com? That would be easier…

JOTTI:

POSSIBLY INFECTED/MALWARE (Note: this file was only classified as malware by scanners known to generate more false positives than the average scanner. Do not consider these results definately accurate. Also, because of this, results of this scan will not be recorded in the database.)

Scanner results
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found Win32:Trojan-gen. {VC}
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
UNA
Found nothing
VBA32
Found nothing

5

I would say send one of the complied ebooks (small) so they can see an output file, referring to the ebookcompiler.com in the email. When you compile it, avast may well alarm so you could pause standard shield or let avast detect it and send it to the chest and send it from the chest (no hassle of zipping and password protecting).

A link to this thread would also help.

6

The latest VPS update now corrects the Win32:Trojan-gen. {VC} detection in my ClickbankStorefront.exe that I reported earlier, a very quick correction considering it happened during the weekend.

@ Eebah Gumme
You might want to check yours and see if it too has been corrected.

7

Excellent! I had given some stuff away and was seriously worried that it somehow contained a virus.

Phew - all working OK again.

Thanks to whoever fixed that so quickly…

8

Yes, thanks indeed to the Alwil team for the speed in resolving this one.

Welcome to the forums.