Battlezone Universe

Battlezone Universe => Battlezone 2 => Maps and Modding => Topic started by: Red Devil on June 12, 2008, 06:17:56 PM

Title: Virus Alert: Notepad++
Post by: Red Devil on June 12, 2008, 06:17:56 PM
AVG Resident Shield found trojan Horse Vundo.T in Scilexer.DLL in my NotePad++ install whichis on Drive F:

When I run NotePad++, it creates a copy of SciLexer.dll in hidden folder C:\2\Program Files\Notepad++\SciLexer.DLL.

Uninstalling.
Title: Re: Virus Alert: Notepad++
Post by: Red Devil on June 12, 2008, 06:32:51 PM
Found this, so it's possibly a false positive.  I uninstalled the previous version and installed version 4.9.2 and AVG no longer detects Scilexer.DLL as a TH.

http://sourceforge.net/forum/forum.php?thread_id=2077157&forum_id=331753
Title: Re: Virus Alert: Notepad++
Post by: Zero Angel on June 12, 2008, 06:39:31 PM
AVG often reports false positives, so do some other antivirus software. The best thing to do is google the antivirus software, affected software and the reported files. Such as "AVG scilexer.dll notepad++"
Title: Re: Virus Alert: Notepad++
Post by: BNG Da BZ Fool on June 12, 2008, 10:01:26 PM
My virus scanner actually flagged a trojan in BZ2ME but it to turned out to be false positive. I guess even virus scanners have bugs too
Title: Re: Virus Alert: Notepad++
Post by: OvermindDL1 on June 14, 2008, 04:25:35 AM
Most virus scanners have two modes of scanning.  First they look for viruses from a list, then they do a heuristic search to look for things that kind of look and act like viruses.  AVG has been known for catching the most viruses before any signature for the virus is out due to its heuristic detector (it is the most advanced out for that in other words), however, since it *has* a heuristic detector, some things will inevitably have a false positive, which will be fixed when the program is changed, or it is added to a whitelist by Grisoft themselves (which they will do if you send them a copy of the possible file).
(http://www.overminddl1.com/image_scripts/image_sig.php?type=ODL1signitures&image/sig.gif)
Generated by OvermindDL1's Signature Auto-Add Script (http://overminddl1.com) via GreaseMonkey (http://greasemonkey.mozdev.org/)