Trojan Warning On Freeware PKB Database (pkb.zip)

  • Thread starter Thread starter Richard
  • Start date Start date
R

Richard

Just wanted to let the group know that when
I tried to unzip pkb.zip PKB Database from

http://www.marsius.com/

AVG gave me a Trojan warning. I did not
note the type of Trojan as I clear and deleted
the zip file as soon as the warning popped up.

Richard
 
Hi Richard!

Richard said:
Just wanted to let the group know that when
I tried to unzip pkb.zip PKB Database from

http://www.marsius.com/

AVG gave me a Trojan warning. I did not
note the type of Trojan as I clear and deleted
the zip file as soon as the warning popped up.
Click to expand...

Just tried with Antivir (Linux).
No problems.

Greetings,

Joachim
 
Hi Richard!



Just tried with Antivir (Linux).
No problems.
Click to expand...

Same here with F-Prot. Upon executing PKB, I don't see any evidence of
anything nasty going on. No listening ports, unsolicited connections,
or anything like that. Just seems to work as advertised.
 
Richard said:
Just wanted to let the group know that when
I tried to unzip pkb.zip PKB Database from

http://www.marsius.com/

AVG gave me a Trojan warning. I did not
note the type of Trojan as I clear and deleted
the zip file as soon as the warning popped up.

Richard
Click to expand...

Thanks for the feedback. I just felt it would be
better to be safe than sorry.

Richard
 
Richard said:
AVG gave me a Trojan warning. I did not
note the type of Trojan as I clear and deleted
the zip file as soon as the warning popped up.
Click to expand...

What was a hasty decision - a virus cannot crawl out of the ZIP file
itself. You have to open it. Also, some virus have nasty side effects
that are difficult to undo without the right tool.

Therefore, ALWAYS read the warning carefully. (Good AVs freeze
applications they find suspicious till the user clicks). If the warning
says something like "heuristic" or "generic", it is probably an alarm of
the heuristic scanner. That means it /can/ be a virus, but it is not
sure.

Files which trigger the heuristic alarm should be sent to the AV company
with an exact description what happened so that they can investigate and
improve their heuristic engine (and update their database in case it is
a new virus).

bye,

Onno
 
Richard said:
Just wanted to let the group know that when
I tried to unzip pkb.zip PKB Database from

http://www.marsius.com/

AVG gave me a Trojan warning. I did not
note the type of Trojan as I clear and deleted
the zip file as soon as the warning popped up.

Richard
Click to expand...

I also got a virus alert from AVG when scanning pkb.exe (in the zip file).
AVG named the virus as BackDoor.Raid.A.

Marc
 
I also got a virus alert from AVG when scanning pkb.exe (in the zip file).
AVG named the virus as BackDoor.Raid.A.
Click to expand...

I got it too. I just deleted the zip -- why bother with something like this?
Connie
 
Hi Connie!

Signpoet said:
I got it too. I just deleted the zip -- why bother with something like this?
Click to expand...

Because it might be a false positive.

Greetings,

Joachim
 
AVG incorectly reports a virus in PKB. Norton and AntiVir will not.
From my short investigation, it looks like AVG will do so on many (or
all) programs written in Rapid-Q. I found Backdoor.Raid.A was itself
written in that language. Maybe that is why AVG gets confused.
Let me assure you all that PKB is not a virus or trojan in any way.
One of the starting points was not to intrude in the system. It does
not even write a single key in the registry.

Marcelo Corral, the author.
 
AVG incorectly reports a virus in PKB. Norton and AntiVir will not.
From my short investigation, it looks like AVG will do so on many (or
all) programs written in Rapid-Q. I found Backdoor.Raid.A was itself
written in that language. Maybe that is why AVG gets confused.
Let me assure you all that PKB is not a virus or trojan in any way.
One of the starting points was not to intrude in the system. It does
not even write a single key in the registry.

Marcelo Corral, the author.
Click to expand...

I didn't install this program, but I did test it -- for whatever the
results are worth -- with

Local AV Scanners (Free versions except Norton)
AVG - Positive for BackDoor.RaidA
avast - Negative (all disks)
AntiVir - Negative (c: & d:)
Norton - Negative (all disks)
eScorcher - Negative (I was playing with it over the weekend)

Online AV Scanners
Panda ActiveScan - Negative
RAV AntiVirus - Negative
Trend Housecall - Negative
BitDefender - Negative

Other Local Scanners
Ad-aware - Negative
Spybot - Negative
Spy Hunter - Negative
X-Cleaner - Negative
SwatIt - (Recheck needed: might not have included d:)

Other Online Scanners
TrojanScan - Negative
PestScan - Negative

(I ran at least two more applications, but I'm not sure which one(s)
now.)

I don't think some of these would be expected to find this specific
problem but I was running them over the weekend anyway. For some
applications I specifically tested the directory containing the file.
For others I let my PC gind away on c: (system & default) and d:
(includes download). Mostly skipped other disks. In all cases where
applicable, options included opening zips and checking memory even
when testing only the directory.

BillR
 
Back
Top