[Windows] ClamAV detects Meld as a Trojan.



Hi everyone!

I'm new to this newslist. Please, excuse me if I'm in the wrong place.

I've subscribed just to report that ClamAV detects "meld-1.8.4.0.exe" as a Trojan:

D:\Downloads\meld-1.8.4.0.exe: Win.Trojan.Autoit-734 FOUND

I downloaded the Zip version and the problem persisted:
D:\Downloads\meld-1.8.4.0\meld\meld.exe: Win.Trojan.Autoit-734 FOUND
D:\Downloads\meld-1.8.4.0\meld\meldc.exe: Win.Trojan.Autoit-734 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 3099685
Engine version: 0.98
Scanned directories: 771
Scanned files: 12171
Infected files: 2

I uploaded the file meld.exe to virustotal.com 5/49 and out of them reported as Trojan:

Antivirus Result Update
Kingsoft                          Win32.Troj.IAgent.wt.(kcloud) 20130829
McAfee-GW-Edition        Heuristic.BehavesLike.Win32.ModifiedUPX.C 20140202
Rising                             PE:Spyware.KeyLogger!1.9F7B 20140202
TheHacker                       Trojan/AutoHK.ed 20140202
TrendMicro-HouseCall      TROJ_GEN.F47V1205 20140202

Interestingly their ClamAV didn't detect it (my definitions are up to date).

I did not research into whether this is a false positive or actual infected files.
Looks like I will have to try compiling from source, which doesn't look straightforward.

Cheers
Matias
 
IMPORTANT:
The information contained in this email may be commercially sensitive and/or legally privileged.
It is intended solely for the person(s) to whom it is addressed. If the reader of this message is not the intended recipient, you are on notice of its status and hereby notified that your access is unauthorized, and any review,
dissemination, distribution, disclose or copying of this message including any attachments is strictly prohibited.
Please notify the sender immediately by reply e-mail and then delete this message from your system.




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]