Trojan detected in SIW

floppybootstomp

floppybootstomp

sugar 'n spikes
Moderator
Joined
Mar 5, 2002
Messages
20,281
Reaction score
1,794
On my Vista machine shown in sig.

Antivir detected a Trojan in the .exe file of the system information software.

Unfortunately I didn't make a note of the Trojan's identity.

I have since uninstalled SIW.

Anybody else have this prob?

This is the software I'm referring to.
 
Weird - just scanned the installer and standalone versions with NOD32 and Kaspersky and nothing........perhaps a false positive with AntiVir??
 
Adywebb said:
Weird - just scanned the installer and standalone versions with NOD32 and Kaspersky and nothing........perhaps a false positive with AntiVir??
Click to expand...

I will try another install on my Vista setup and if it happens again I'll note the Trojan's identity.

I've Googled and there have been other instances of this as SIW gathers information it may be being seen as a detail harvester.
 
Well I never... I downloaded and installed the latest version of SIW from the link I supplied in the first post, played with it for a bit and scanned the .exe file with Antivir.

Nothing was found, it's all good.

This was on my Vista setup.

How odd. I can only assume the latest version of SIW is a newer one than I was using and the problem has been remedied.
 
Just in case it's of any interest... I scanned SIW with KIS and it came up with clean. When I started SIW, KIS threw up one of it's warning messages. When I clicked for details, it just wanted to "tell" me that SIW was accessing Registry keys. I'll add a pic just so you can see what I mean. So perhaps that's what your Antivir didn't like.
attachment.php

 

Attachments

  • KIS comment.webp
    KIS comment.webp
    17.8 KB · Views: 844
We have to remember that SIW investigates your whole machine setup to give you the information you require - therefore it probably isn't suprising that some AV will regard it as suspicious activity or even a trojan of some kind.
 
Ok, here it is. This popped up on my XP machine when I entered the Control Panel/Add Or Remove Hardware.

When I clicked on the link that Antivir gave for a description of the Trojan it came up with... nothing. So it doesn't seem to be listed on Antvir's database of nasties.

attachment.php
 

Attachments

  • trojan.webp
    trojan.webp
    14.7 KB · Views: 1,020
That 'trojan' was added to AntiVirs latest definition list today - I suspect its giving a false positive, and I have read a post elsewhere today that someone else has had this alerted by AntiVir but not by another AV - doesn't say what he was scanning though.


Personally I don't think its anything to worry about.
 
Back
Top