Page 1 of 1

Report of trojan in WAI demo?

Posted: Fri Jan 30, 2009 12:05 pm
by gunnergoz
I was downloading and installing the demo which I obtained from this site when my AVAST antivirus announced the presence of a trojan in the AGEsettings.exe file. Here is the info given me by AVAST:
Scanning of selected files

Action was completed successfully!

Virus has been detected!
File Name: AGESettings.exe
FileID: 3
Virus Description: Win32:Trojan-gen {Other}

What is going on? Any ideas or suggestions? I'll uninstall until this is cleared up.

Posted: Fri Jan 30, 2009 1:12 pm
by Carnium
Please also test it with:
http://virusscan.jotti.org/
http://www.virustotal.com/

It might also be a false alarm.

Posted: Fri Jan 30, 2009 1:22 pm
by arsan
Hi
I'm too a happy avast user since 3 years ago, but since last week it has also failed to me detecting my AGEOD Napoleon campaigns AGEsettings.exe file (installed year an a half ago :bonk :) as a possible trojan virus.
I think it's just a FALSE POSITIVE case i hope the solve it soon. I send them a false positive report about this.
A year ago their was other antivirus that give false positive detection with this same file but they corrected the issue soon
Check the old thread here
http://www.ageod-forum.com/showthread.php?t=8368&highlight=avast

I'm 99% sure there is no virus there. :thumbsup:

Posted: Fri Jan 30, 2009 1:50 pm
by Nikel
AGEsettings.exe is packed with Execryptor, my guess is that here is the problem. Execryptor itself was considered a trojan by Avast some years ago!

http://www.strongbit.com/showtopic.asp?tid=320


Of course this is a problem of Avast.

AGEsettings.exe is clean according to Kaspersky just updated

Posted: Fri Jan 30, 2009 1:55 pm
by arsan
Nikel wrote:AGEsettings.exe is clean according to Kaspersky just updated


Thanks for the info Nikel! :thumbsup:

Yes, i remember reading somewhere Pocus explanation about the issue. It seems the file uses some encryption function (i guess to protect the serial info) that can mislead some antivirus programs.
Hope Avast take notice of this and update their virus definitions soon letting AGEsettings out of the "black list".
Regards!

Posted: Sat Jan 31, 2009 4:58 pm
by gunnergoz
Thanks guys, I figured it was something innocuous like that.