 Rank: Newbie
Groups: Registered
Joined: 29/08/2010(UTC)
Posts: 2
Location: EU
|
Hello. Firstly i want to thank for great and free program - it really helped me a lot doing my calculations. But i was trying to launch it after some time and i got this report from my antivirus. Also i downloaded SMath Portable again, but again Avira AntiVir still reports virus and denies access:
Virus or unwanted program 'BDS/Poison.bsbg [backdoor]'
detected in file 'C:\Documents and Settings\me\Desktop\Xenocode\Sandbox\SMath Studio Desktop\1.1.15.0\2010.07.23T01.30\Virtual\STUBEXE\8.0.1135\@DESKTOP@\SMathStudio_Desktop.exe.
Action performed: Deny access
I use Avira AntiVir Personal - Free Antivirus, OS: Windows XP.
|
|
|
|
|
|
  Rank: Administration Groups: Developers, Registered, Knovel Developers, Administrators, Advanced Member Joined: 11/07/2008(UTC) Posts: 1,616   Was thanked: 1978 time(s) in 666 post(s)
|
Hello. 1) Maybe Avira AntiVir Personal doesn't like Xenocode Environment execution. 2) Maybe virus program on your PC is already exists and infecting all exe-files in real time. 3) Maybe Avira AntiVir Personal found "Check For Updates" feature of SMath Studio and thinks that this is backdoor. I think that the most possible is a second item because SMathStudio_Desktop.exe has no code to be executed directly on CPU. SMathStudio_Desktop.exe contains intermediate (IL) code that should be interpreted by .Net Framework (I'm sure, that your antivirus application can't parse IL - so it can't find anything interesting there). FYI: As I wrote couple of days ago about SMath Studio 0.89 Portable: smath wrote:"Softpedia guarantees that Portable SMath Studio 0.89 Build 3856 is 100% Clean, which means it does not contain any form of malware, including but not limited to: spyware, viruses, trojans and backdoors."  ( details) I just can advise you to install another antivirus, try to check SMath Studio Portable with Avira AntiVir but on another PC or to try to use Setup version instead. Best regards, Andrey Ivashov.
|
|
|
|
|
|
Rank: Newbie
Groups: Registered
Joined: 30/08/2010(UTC)
Posts: 1
Location: Russia
|
I scanned it with the same antivirus running on the same OS. It found nothing. 
|
|
|
|
|
|
Rank: Newbie
Groups: Registered
Joined: 02/09/2010(UTC)
Posts: 2
|
He there,
I came across this very usefull tool a couple of days ago... Thanks for it.
And I also experienced the same virus found on the same file with the same antivirus software.
@TripleKill rus: Note that you scanned a different file then coreInterest did.
The mentioned file is deep into the folder structure that Smath STudio Portable creates when first executed.
I did a run with 2 different virus scanners launched from an linux system and they both did not find anything.
I'm unsure what to make out of this, but for the moment I am thinking that ANtivir is misinterpreting something.
Regards, Sven
|
|
|
|
|
|
Rank: Newbie
Groups: Registered
Joined: 02/09/2010(UTC)
Posts: 2
|
He,
I did send the file to Avira and let them know the troubles described above.
Their response was that the virus message was a "false positive" recognition.
In one of the next updates the issue will be solved.
Sven
|
|
|
|
|
|
Rank: Administration Groups: Developers, Registered, Knovel Developers, Administrators, Advanced Member Joined: 11/07/2008(UTC) Posts: 1,616 Was thanked: 1978 time(s) in 666 post(s)
|
|
|
|
|
|
|
Rank: Newbie
Groups: Registered
Joined: 29/08/2010(UTC)
Posts: 2
Location: EU
|
Thanks for your quick response, smath, and thanks to everybody who posted on this issue! I checked this file with TrendMicro online AV and it showed no threat. Also, after a few days i updated my Avira AntiVir, started SMath Portable and guess what - now there were no problem. That was false alarm - i had this thought from beginning, just wanted to be sure.
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.
