FBA The Creator

The True Multiplatform PC / PocketPC Opensource Development Tool - Read Only Mode - Kept only for historical purposes - Thank you all ;)
It is currently Sat Apr 01, 2023 7:05 am

All times are UTC




Post new topic  Reply to topic  [ 9 posts ] 
Author Message
 Post subject: virus in DLL ?
PostPosted: Tue Nov 10, 2009 10:49 pm 
Offline
User avatar

Joined: Mon Apr 13, 2009 2:22 pm
Posts: 23
Location: Italy
Hi all. After a disk scan for viruses, I was very surprised to find the main FBA DLLs infected by a virus. My Avira Antivir scanner found the trojan TR/DROPPER.GEN in FBIde.dll and in the "registered" version FBIdeR.dll . I hope it would be a false positive; please, give me an answer about this critical question: may my own FBA applications, freely distributed on my internet site, be infected by the same virus ?
:( ... bye

_________________
http://ficara.altervista.org


Top
   
 Post subject: Re: virus in DLL ?
PostPosted: Wed Nov 11, 2009 1:21 pm 
Offline
FBA Administrator
FBA Administrator
User avatar

Joined: Fri Mar 21, 2008 11:19 pm
Posts: 238
Location: Rome - Italy
It could be a false positive, surely original DLL are not infected in any way :)
Btw, they hold the pocketpc and windows runtime executables (there are IDE sources linked somewhere on this forum, you can watch them in order to know how FBIDE.DLL and FBIDER.DLL are used).
Obviously I can't tell you if you're infected in some other way (provided it isn't a false positive which infects system DLLs); you could try a full system scan with other AV packages.


Top
   
 Post subject: Re: virus in DLL ?
PostPosted: Thu Nov 12, 2009 10:56 am 
Offline
User avatar

Joined: Mon Apr 13, 2009 2:22 pm
Posts: 23
Location: Italy
Thank you for prompt answer, evilmaio. I don't have any other (visible :-) ) virus on my system, so the alert for FDIde.dll it's probably a false positive. It will be interesting if some other forum's friend can check the dll with the same antivirus (last version of Avira free) and post here if the alert appears. I will appreciate this sort of crossed test; thanks in advance to friends that can help me. Bye...

_________________
http://ficara.altervista.org


Top
   
 Post subject: Re: virus in DLL ?
PostPosted: Thu Nov 12, 2009 10:48 pm 
Offline
FBA Administrator
FBA Administrator
User avatar

Joined: Fri Mar 21, 2008 11:19 pm
Posts: 238
Location: Rome - Italy
I don't know what kind of heuristic scan Avira uses, maybe it doesn't like a dll with more executables resources inside ;)
(although I think it isn't an uncommon approach!)


Top
   
 Post subject: Re: virus in DLL ?
PostPosted: Sat Nov 21, 2009 12:30 am 
Offline

Joined: Wed May 21, 2008 3:02 pm
Posts: 4
Location: Russia,Voronezh
It is false positive =)
http://www.virustotal.com/ru/analisis/e ... 1258762915


Top
   
 Post subject: Re: virus in DLL ?
PostPosted: Sun Nov 29, 2009 8:34 pm 
Offline
User avatar

Joined: Mon Apr 13, 2009 2:22 pm
Posts: 23
Location: Italy
Thank you, SergeyK. I haven't understand any word from the Russian site you proposed, but seems evident, even for a latin reader, that the FBIde.dll has no infections. That's good. Bye...

_________________
http://ficara.altervista.org


Top
   
 Post subject: Re: virus in DLL ?
PostPosted: Tue Dec 01, 2009 8:11 pm 
Offline
Tutorials Contributor
Tutorials Contributor
User avatar

Joined: Tue Jun 17, 2008 3:39 am
Posts: 59
Location: Midwest, US
That site has several different languages. I found the English button right away. ;)

Thanks, Sergey!

_________________
Don't look at me. I'm new here.


Top
   
 Post subject: Re: virus in DLL ?
PostPosted: Wed Dec 02, 2009 1:06 am 
Offline

Joined: Wed May 21, 2008 3:02 pm
Posts: 4
Location: Russia,Voronezh
Robotop
I'm sorry for inattention 8-) . Click my link and select your language on top the site.


Top
   
 Post subject: Re: virus in DLL ?
PostPosted: Fri Dec 04, 2009 3:54 pm 
Offline
User avatar

Joined: Mon Apr 13, 2009 2:22 pm
Posts: 23
Location: Italy
Many thanks, SergeyK. The link for italian language worked fine and I've seen the complete report about the FBIde tested under various antivirus programs. It's a good and useful service. I don't understand why some antivirus (3 in all) shown the FBIse containing a virus and others don't. I have the heuristic option disabled on my AVira free antivirus, but it everytime sounds for alarm when scanning such file. Well, I decided to don't care anymore for the virus alert and inserted FBide.dll in the list of trusted applications (hoping to not became the most infected man in the universe !!!).
Thank you, again. Bye

_________________
http://ficara.altervista.org


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 9 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Limited