DriverPacks.net Forum - Backdoor trojan detected in Graphics pack

Re: Backdoor trojan detected in Graphics pack

null@example.com (Helmi) — Tue, 12 Aug 2008 23:01:21 +0000

Oh, 669 is out already?

/goes to grab it

Re: Backdoor trojan detected in Graphics pack

null@example.com (mr_smartepants) — Tue, 12 Aug 2008 16:47:47 +0000

That's because there isn't any!

Re: Backdoor trojan detected in Graphics pack

null@example.com (muiz) — Tue, 12 Aug 2008 09:51:04 +0000

NOD32 3.0.669.0 Smart Security didnt find any virus in the packs.

Re: Backdoor trojan detected in Graphics pack

null@example.com (Helmi) — Sat, 02 Aug 2008 21:35:52 +0000

morpheus wrote:

It is not that I'm completely hysterical about it, I'm just laying it out.

Yeah, not trying to say you were, just a general note
Thing is, it may get others hysterical if they see the post and just because it's one virus scanner sounding an alarm does not mean it's a definate sign (hence the online scanners).
OTOH, if you do not post about it we wouldn't have a chance to check it out, so I'm fine with posting.
Just advising to always take such warnings with a grain of salt.

newsposter wrote:

Kasperky and Avast are both notorious for false positives AND for missing some of the more stealthy viruii.

That's news for me with Kas, but I do know Avast and AntiVir for this behaviour.

Better to Pay for something like Trend or McAfee Enterprise. Stay away from Norton.

Personally, I'm a friend of NOD32.

But indeed, Norton should be avoided, unless you get the professional (as in for companies) solution like Endpoint Protection.

Re: Backdoor trojan detected in Graphics pack

null@example.com (newsposter) — Sat, 02 Aug 2008 20:09:29 +0000

Kasperky and Avast are both notorious for false positives AND for missing some of the more stealthy viruii.

Better to Pay for something like Trend or McAfee Enterprise. Stay away from Norton.

Re: Backdoor trojan detected in Graphics pack

null@example.com (morpheus) — Sat, 02 Aug 2008 15:39:57 +0000

Kasperky Labs confirmed this is indeed a false positive. They are trying to figure out why.

It is not that I'm completely hysterical about it, I'm just laying it out. Thanks for the links Helmi, although I actually know the guy behind http://virusscan.jotti.org pretty good. (Hence, I know the page)

Re: Backdoor trojan detected in Graphics pack

null@example.com (Helmi) — Sat, 02 Aug 2008 13:35:08 +0000

morpheus wrote:

I'm not sure if this is a false negative.

False positive, if at all.

http://www.virustotal.com/
http://virusscan.jotti.org/

Upload the file in question here and have it scanned by 20+ different engines of well-known virus scanners.
Then you can tell by yourself whether it's your scanner or a real virus/trojan/malware thing.

It's worth bookmarking these, btw.
I'd recommend scanning any file you got from the net and find somewhat suspicious.

Saves you and other from getting hysterical over a false positive report

(not saying we get many of these and certainly we do not mind reports but still it's better to make sure first )

Re: Backdoor trojan detected in Graphics pack

null@example.com (SamLab) — Sat, 02 Aug 2008 11:11:23 +0000

Kaspersky 2009 8.0.0.454 not find this virus with updated virus-database! DP is clear!

Re: Backdoor trojan detected in Graphics pack

null@example.com (mr_smartepants) — Sat, 02 Aug 2008 07:05:42 +0000

Oh that is hilarious!
I can assure you there is no virus in that DriverPacks!
Scanned today with Symantec Endpoint Protection v11...clean

Backdoor trojan detected in Graphics pack

null@example.com (morpheus) — Sat, 02 Aug 2008 06:39:02 +0000

Kaspersky 2009 reports the following:

Detected: Backdoor.Win32.Bifrose.xgd
DPGB804.7z/D/G/M1/matrox.exe/PE_Patch.UPX/UPX/PDESKSE.msi/WiseCustomCalla21

I'm not sure if this is a false negative.