DriverPacks.net Forum - [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (TigerC10) — Sun, 25 Nov 2007 20:39:36 +0000

McAfee isn't doing as hot as it used to. It's sub-Norton at the moment (just barely - there's almost no difference).

NOD32 > Kaspersky > Avast > Norton > McAfee > Trend Micro > OneCare > AVG

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (newsposter) — Sun, 25 Nov 2007 20:00:44 +0000

or check with your broadband provider. Often they have special subscriber deals (some even free) for McAfee antivirus.

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (TigerC10) — Sun, 25 Nov 2007 18:27:56 +0000

AVG Antivirus doesn't catch anything. Rather, it catches so few that I've decided it's a gateway virus. It lulls the user into a false sense of security and lets all the really bad viruses in.

If you want a good free antivirus - go with Avast Antivirus. Their home edition is free, all you have to do is request a home key from their website and they give it to you. You have to renew that free home key every year, but it's at least a good antivirus.

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (OverFlow) — Sun, 25 Nov 2007 17:11:20 +0000

AVG Free v7.5 Did indeed report it as a trojan...

But it's not it disables the beep for the driversigning popup window (very annoying if KTD is on.)

Either create an exception or report it as a false positive to AVG

you can delete it if you want its not mission critical

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (Wim Leers) — Sun, 25 Nov 2007 16:27:48 +0000

It's because we use AutoIt. AutoIt can easily be used to create malicious scripts. Unfortunately, pretty much every anti-virus app has once flagged *any* AutoIt executable as a virus because of that. Simply because their algorithms suck that bad.

Not much we can do about it.

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (mr_smartepants) — Sun, 25 Nov 2007 16:16:25 +0000

I just downloaded the DP Base package again (same MD5 hash), decompressed ALL the files then scanned the lot with Symantec Endpoint Protection v11 (supersedes SAV and SCS) and all files were clean.

Then to be safe, scanned the files again in VirtualPC using ESET Smart Security v3, also clean.

False positive.

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (pillerstol) — Sun, 25 Nov 2007 14:18:24 +0000

"DPs_BASE_7052.exe": 804c193146f3fe37334bc2afd79c11d6, with md5deep

Everything the latest, dpbase and driver packs, and also AVG. You must extract the contents of the 7-zipped file, otherwise the virus scan will fail.

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (OverFlow) — Sun, 25 Nov 2007 14:14:10 +0000

that file hasnt been touched in 6 months (we log)

its a false positve did you verify the hash on your download ?

i have avg on a UBCD4win disk im loading it now... which engine and definition dates?

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (pillerstol) — Sun, 25 Nov 2007 14:13:04 +0000

If you extract "\DPbase\bin\DPsFnshr.7z", to a folder and enter that directory, AVG finds a trojan horse in "mute.exe". Tried it 3 times

Re: [solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (OverFlow) — Sun, 25 Nov 2007 14:08:23 +0000

from a clean system redownload base from us and verify the hash... then scan
(not the same machine as before unless you format)

thousands of other users have not reported anything...

what virus scanner / version / definition dates supplied this positive...
what is the SARC or other description of this payload

[solved] False Positive (trojan horse) in MUTE.EXE (DPbase 7.05.2)

null@example.com (pillerstol) — Sun, 25 Nov 2007 13:58:46 +0000

In this package DPsFnshr.7z, "mute.exe" contains a troja horse. It changes the homepage in internet explorer.. to something else. I don't know to where, but I wouldn't visit it with my computer............

Version: 7.05.2