List Info

Thread: Virus or false alarm?




Virus or false alarm?
user name
2006-06-07 11:01:46
Hello,

I've been running Installer Version 184-16-RC2 for almost a
month now. 
I just updated my Windows Live OneCare antivirus definitions
and now 
WLOC is complaining that uninstall.exe is infected with 
TrojanDownloader:Win32/Agent!DE3E .

Is this a known false-positive, or should I be worried? I'm
not trying 
to uninstall Ruby, but anytime a process gets file
information for that 
folder's contents, I get a virus warning as my foreground
window.

The MD5 of my uninstall.exe is
D41D8CD98F00B204E9800998ECF8427E . Is 
this the proper checksum? Or did a virus actually infect my
uninstaller?

I saw nothing on the wiki regarding this, and I couldn't
find a good 
channel on freenode to ask.

Thanks,

--Matt

-- 
/*
  * Matt Lewandowsky    mattiamcode.net
  * Random Geek         http://www.iamcode.net/
  * +1 (866) 606-9696   +44 (0) 844 484 8254
  */

_______________________________________________
Rubyinstaller-users mailing list
Rubyinstaller-usersrubyforge.org
http://rubyforge.org/mailman/listinfo/rubyinstaller-use
rs
Virus or false alarm?
user name
2006-06-07 14:40:05
On 6/7/06, Matt Lewandowsky <iamcode.net">mattiamcode.net> wrote:
Hello,

I've been running Installer Version 184-16-RC2 for almost a month now.
I just updated my Windows Live OneCare antivirus definitions and now
WLOC is complaining that uninstall.exe is infected with
TrojanDownloader:Win32/Agent!DE3E .

Is this a known false-positive, or should I be worried? I'm not trying
to uninstall Ruby, but anytime a process gets file information for that
folder's contents, I get a virus warning as my foreground window.

The MD5 of my uninstall.exe is D41D8CD98F00B204E9800998ECF8427E . Is
this the proper checksum? Or did a virus actually infect my uninstaller?

I saw nothing on the wiki regarding this, and I couldn't find a good
channel on freenode to ask.

My checksum is for the uninstall.exe is 45bd1df7777952903d912b7bae251021, so I think there is something wrong with yours. I have attached my copy of the uninstaller so that you can replace yours. I had to rename the extension from exe to dat because gmail wouldn't let me attach an exe file.

Curt


[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )