Page 1 of 1

[Invalid] trojan

Posted: Thu Jul 07, 2016 1:27 am
by bucaneiro
Please describe the problem in as much detail as possible:
HandBrake-20160705-7745f42_x86_64-Win_GUI.exe Download 816ca9045d48f31c513867dbb39ab0f017005765

06.07.2016 22.19.33;O objeto detectado (arquivo) foi excluĂ­do.;C:\Program Files\HandBrake Nightly\uninst.exe;C:\Program Files\HandBrake Nightly\uninst.exe;Trojan-Ransom.NSIS.Onion.xfy;Cavalos de Troia;07/06/2016 22:19:33

detected with kaspersky

Re: trojan

Posted: Thu Jul 07, 2016 1:24 pm
by bucaneiro
06.07.2016 22.19.33;O object detected (file) was excluded.;C:\Program Files\HandBrake Nightly\uninst.exe;C:\Program Files\HandBrake Nightly\uninst.exe;Trojan-Ransom.NSIS.Onion.xfy;Trojan horse;07/06/2016 22:19:33

Re: trojan

Posted: Thu Jul 07, 2016 1:39 pm
by Woodstock
Submit the link you downloaded from to your antivirus program's test site. Quite often, antivirus products use overly-broad tests, with the idea that it is better to have 99 false positives than miss 1 real threat. There are some tests that would flag important Windows files as dangerous, but there are exclusions written into the programs to let them go.

That problem showed up a couple of months ago over on the MakeMKV forum - because the update server is in Russia, one antivirus vendor flagged it as malware, until someone submitted the download link for review. Just as quickly as it was flagged as malware, it was flagged as being safe.

Re: trojan

Posted: Sat Jul 09, 2016 11:40 pm
by Extee
I just got a trojan detection from Microsoft Security Essentials on Windows 7.
It didn't like the C:\Program Files\HandBrake Nightly\uninst.exe file and quarantined it due to "Trojan:Win32/Rundas!plock"
This was while installing the latest nightly build
HandBrake-20160709-0fc54d0_x86_64-Win_GUI.exe

I submitted the file to Microsoft here:
https://www.microsoft.com/en-us/securit ... ubmit.aspx

But I'm not sure if I need to extract the files and submit that one separately?