XWidgetSoft Forum
https://www.bbs.xwidget.com/

Malware within the new version
https://www.bbs.xwidget.com/viewtopic.php?f=3&t=2161		 Page 1 of 1
Author:  Nutu [ September 27th, 2012, 10:15 am ]
Post subject:  Malware within the new version
I use avast! Internet Pro Security, fully licensed and when I installed the 1.7 version, it detected a PUP (Potentially Unwanted Program) so it automatically ran it in the avast! Sandbox. The file detected was InstallManager.exe and when avast! completed the sandboxing, it blocked a Malware Trojan
THIS WAS NOT A FALSE POSITIVE, I USED ANOTHER MALWARE DETECTION SOFTWARE WITH THE SAME RESULT!!!
Please review the file InstallManager.exe immediately!!!
Author:  Evolliop [ September 28th, 2012, 9:05 am ]
Post subject:  Re: Malware within the new version
Hello, i have the same problem and this is not a "FALSE POSITIVE" :

Attachment:
Virus_xLaunchPad.jpg
Virus_xLaunchPad.jpg [ 189.46 KiB | Viewed 10128 times ]

Edit : link on PixuP : http://www.pixyup.com/uploads/281936095065e009ab6e5.jpg
Author:  Nutu [ September 28th, 2012, 9:13 am ]
Post subject:  Re: Malware within the new version
Hello mate. For some reason, I can't look at the image you posted, maybe attach it as an attachment? And I pulled some strings within BitDefender (Best antivirus on the market) and they told me it's not dangerous, still, it's better without it.
Author:  meme [ September 28th, 2012, 12:23 pm ]
Post subject:  Re: Malware within the new version
Is it the same as the post in the xLaunchpad forum -
Quote:
Virus Warnings - unable to start program

viewtopic.php?f=6&t=36

some extracts
Virus Warnings - unable to start program
Quote:
The Installation package contains the optional third-party software,not virus,if you do not need please uncheck it. This can help XLaunchpad to maintain free and continue to develop. thanks.

Quote:
Please note that the installation package did not offer a checkbox for any optional third-party software. It got up to a window with the title of "InstallManager Setup" and a dialog of "Installing": "Please wait while your application is being installed", the window showed a blank frame with "Agree" and "Disagree" below it, the antivirus triggered and blocked the url call, and the program "InstallManager.exe" crashes. Checking the list of installed programs also shows no third-party software, only "XLaunchPad Ver1.08".
Btw, the blocked url now ends in v21.php instead of v20.php that it had when I last posted.

Quote:
What is the name of the "third-party software" so I can uninstall it ?

NO REPLY to the last question :?:
So the programs contain something called "third-party software" that someone is being paid or rewarded for in some way, but they will not tell us what it is and what it does or even how to uninstall it. And our virus scanners don't trust it. :roll:
Author:  Nutu [ September 28th, 2012, 12:29 pm ]
Post subject:  Re: Malware within the new version
I am contradicting you from this point of view, because I worked quite a while with viruses and anti-viruses. The infection presented in both my and Evoliop's cases are NOT false-positives.
Author:  zequi [ September 29th, 2012, 1:04 am ]
Post subject:  Re: Malware within the new version
Just download the portable version, It doesn't come with any of that.
Author:  Nutu [ September 29th, 2012, 3:08 am ]
Post subject:  Re: Malware within the new version
That's not the solution, mate. You can't just go like "Meh, I'ma download another version". No, no, no. The malware must be removed.
Author:  Tony [ September 29th, 2012, 4:45 am ]
Post subject:  Re: Malware within the new version
Hi,
This is a FALSE POSITIVE ," InstallManager.exe " is from http://www.installmonetizer.com, it is only a form to show the Optional Third-part Toolbar ad when your country has availible AD publisher.


After it downloaded,It runs and judgment of your country, if there is Ads publisher available then will displayed Optional third-party toolbar when you Accept and Confirm,If you do not need the Third-part toolbar please just not Accept.

If your countries do not have the available third-party toolbar will automatically exit and clear their own.

you can upload the "InstallManager.exe" to http://www.virscan.org/ to scan with 37 top antivirus software

Some info about "InstallManager.exe" FALSE POSITIVE:

Image
https://www.mcafeesecure.com/RatingVeri ... etizer.com


Image

Image
Author:  Nutu [ September 29th, 2012, 8:42 am ]
Post subject:  Re: Malware within the new version
Okay, that convinced me. o.o Thank you, Tony.
Author:  piqus [ January 12th, 2013, 3:38 am ]
Post subject:  Re: Malware within the new version
/revive

New version and new malware detected in XWidget package|Galery.exe win32:malware-gen (Avast AV 7 130112-0). Both Xwidgets (portable|installer) are infected.

It is great that we can download only patch with updated files :)
Author:  Tony [ January 13th, 2013, 8:56 pm ]
Post subject:  Re: Malware within the new version
piqus wrote:
/revive

New version and new malware detected in XWidget package|Galery.exe win32:malware-gen (Avast AV 7 130112-0). Both Xwidgets (portable|installer) are infected.

It is great that we can download only patch with updated files :)



Just a False Positions, I had submit gallery.exe to Avast to re-check tomorrow.
Page 1 of 1 All times are UTC - 8 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/