SolveSpace Logo SOLVESPACE -- parametric 2d/3d CAD
Examples
Tutorials
Features
Download
Reference
Technology
Library
Forum
Contact
USER FORUM

(you are viewing a thread; or go back to list of threads)

Trojan detected by virus scanners (by Laszlo)
Dear Jonathan,
first thank you for this great program! It is just magic, packed small.

Unfortunately two virus scanners (Panda at home and F-secure at work) says the .EXE contains Trojan.GenericKD.1179256.
At home I can set Panda that it is secure but at work F-secure deletes your program. Unfortunately I can not allow the scanner to ignore it.

Why do these scanners think there is a trojan?
Could you maybe fix this issue by taking out the suspicious code?
No one else had this problem yet?...

best regards
Laszlo
Wed Dec 4 2013, 05:13:54
(no subject) (by Jonathan Westhues)
This is an issue with anti-virus programs that use the BitDefender engine. I haven't investigated what signature they're looking for. The first time I got a report, I just recompiled the program (so that nothing except the compile date stored in the .exe changed), and the problem went away:

http://r.virscan.org/report/62dbca62f7b084ac059200a073cfc267.html

(This is a scan of the exact binary that's available on the website now; you can compare the hash.)

Your report would seem to suggest that the problem is back, perhaps after BitDefender made changes to their engine. I'd suggest that you contact BitDefender directly, and perhaps they can fix their software.

If you can't get a resolution, then let me know and I can try to reverse-engineer what they're looking for and modify the binary not to do it. That would take some time, though.
Wed Dec 4 2013, 14:14:50
Seems to be solved (by Laszlo)
Answer from F-Secure Security Labs :

Hello,
Thank you for your submission.

The file you submitted is indeed clean. A database update will be released to resolve this issue.

We have white-listed the site as well.

For the meantime, you may exclude this file from Real-time Scanning.

:)
Thu Dec 5 2013, 09:39:24
(no subject) (by Jonathan Westhues)
Excellent, thanks.

If anyone else has trouble, then please try contacting your antivirus vendor first; this is a false positive, and they should have a procedure to fix that. Let me know if they can't resolve the problem, though.
Sun Dec 8 2013, 04:21:00
Post a reply to this comment:
Your Name:
Your Email:
Subject:
(no HTML tags; use plain text, and hit Enter for a line break)
Attached file (if you want, 5 MB max):
© 2008-2022 SolveSpace contributors. Most recent update June 2 2022.