Vikrant's PC Glossary 3 download virus

I downloaded Vikrant's PC Glossary 3 Build 555
from Major Geeks. Grisoft AVGFree reported the presence of
SmalLAN virus in vpcg3.exe, during install.
AVGFree reported successful healing of exe, but this is something to
make me think... Here, I was expecting better... I am not amused.

 

I've brought this to the attention of the owners of this forum. Do you recall which server you used? Also, is this - http://www.majorgeeks.com/download.php?det=107 - what you downloaded? I downloaded it from all 7 servers, and avast fails to find anything.

 

Don't get me wrong... I am not trying to say Major Geeks site is at fault. But the report DID happen.
AVGFree (updated every day) reported:

2006/01/13 17:22:59 codemonkey75 Virus C:\Program Files\Vikrant's PC Glossary 3\vpcg3.exe finding:trojan virus: Small.AN

2006/01/13 17:23:13 codemonkey75 Virus C:\Program Files\Vikrant's PC Glossary 3\vpcg3.exe was cleaned

note: i asked avg to "heal" the file and "cleaned" means deleted in this case.

I downloaded from TX server, i think the first listed.
I still have the downloaded zip if you prefer to examine it.
I did nothing to it except to rename it so i would know what it was in the future. I have since returned it to original name.

Let me know if you want the file.

Note: this could have been a false reading for all i know. i tend to take avg's word for everything, because it has been working for me great for 8 months. My machine has been running free of problems for all 8 of those months. Of course i keep avg running and i regularly run adaware, spybot s&d, and spywareblaster (which coincidentally, i got from Major Geeks download). I'm not quitting the site or trying to slam Major Geeks. I am not happy with Vikrant. I will beware of their postings in the future, as probationary caution.

All I want out of life is 0 wait state. cm75

 

I think you are getting a false positive; in addition to downloading from all the servers at MG, I downloaded it from all of the authors servers and avast finds nothing.

No AV (free or paid) is perfect; I used AVG for years, and although it was a decent AV, it did have its issues with false flags, with Java-based items being the most common.

How about for a second opinion, upload the file here and have it scanned:

http://virusscan.jotti.org/

 

good response. i uploaded the installer and got a message:
File to upload & scan: vpcg3.zip
Status: MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time and/or runtime packers were found, this is suspicious. Normally programs aren't packed and don't force the sandbox into lengthy emulation. Do realize no scanner issued any warning, the file can very well be harmless. Caution is advised, however.) (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 6b65d9e4a42f1d9b457d0a03c9ade3a0
Packers detected: PETITE, MMBUILDER
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found nothing
------------------------------
which notice the AVG report of no malware.

...however, when i tried to upload the exe that had been installed, i got this message:
http://virusscan.jotti.org/

The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file

go figure. as i said, i have the file if anyone wants to look at it.

 

okay, maybe my bad. i turned off avg so i could upload the exe.
i uploaded the setup.exe and it was clean except for the sandbox alert.

then i uploaded the installed file:
Service load:
0% 100%
File: vpcg3.exe
Status:
INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 d31277f17183bf0de03707abae2c02d1
Packers detected:
PETITE, MMBUILDER
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found Win32.Trojan.Butano
--------------------------------
now, i uploaded it twice and got the same result.
all i intended was for downloaders to be alert and if anyone else got this result, to put out heads together. i may be alone. i will turn avg back on and continue with files that do not report errors. i have been here for long enough to have seen a number of errors even in the best programming. but i don't have the inclination to take any chances with the data that is on my machine, that is my money... adieu

 

It's not really an error or anyones fault.

False positives occur when a file exhibits, or has behaviour similar to a virus, which the scanner then deems to be suspicious.

It's not very common, but it does happen, and there is really no around it except to be alert and double-check.

 

Which is fine, but when you add comments such as these in your initial post, you add contention and its not productive.

 

okay, i cannot find a way to delete this thread. i repent of the post.

live and learn. i can assure you this will not happen again.

it must be my the relative inexperience on my part. excuse me.

 

Only a Mod can delete posts.

It's not a big deal. Leave it alone and it will go away.