Author Topic: [bug] WinRAR and Avast (Win32:Trojan-gen. {Other})  (Read 2572 times)

0 Members and 1 Guest are viewing this topic.

Offline hlloyge

  • Jr. Member
  • **
  • Posts: 28
  • New-B!
[bug] WinRAR and Avast (Win32:Trojan-gen. {Other})
« on: August 06, 2006, 01:59:47 AM »
This is the story: when I download some game or program that doesn't have install routines, I tend to make me one with WinRAR, as it can be customised. What I do is make SFX with some options and custom icon, and here lies the problem. If I used only 32x32, 8bit icon, no problem, exe file is created with that icon, and I can extract it. If I use multiple icon source (you know, ICO file with various size icons in there), I get the error.
I recall there was a problem with Total Commander not showing these icons (and files inside archive) because of unpacking header larger than 128k.

I'm sending it to virus@avast.com.

Avast v4.7.844
VPS 04.08.2006. v0631-3

WinRAR is the free one v3.51. No skins.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67275
Re: [bug] WinRAR and Avast (Win32:Trojan-gen. {Other})
« Reply #1 on: August 06, 2006, 03:00:05 PM »
Do you know the name and path of the file that is being reported as Win32:Trojan-gen. {Other} infected?
The best things in life are free.

Offline hlloyge

  • Jr. Member
  • **
  • Posts: 28
  • New-B!
Re: [bug] WinRAR and Avast (Win32:Trojan-gen. {Other})
« Reply #2 on: August 06, 2006, 09:33:44 PM »
Yeah, it's the archive I've created... d:\tmp1\avast_problem\problem.exe  ;)
Another archive, no_problem.exe is exactly the same, with same compression method used, only different icon.

If you wish, I can upload it to rapidshare so you can test it yourself. The same archive and icons I sent to avast team. It's a freeware game - no warez.
« Last Edit: August 06, 2006, 09:39:53 PM by hlloyge »

Offline hlloyge

  • Jr. Member
  • **
  • Posts: 28
  • New-B!
Re: [bug] WinRAR and Avast (Win32:Trojan-gen. {Other})
« Reply #3 on: August 07, 2006, 12:04:49 AM »
Complete scanning result of "problem.exe", received in VirusTotal at 08.07.2006, 00:00:23 (CET).

Antivirus   Version   Update   Result
AntiVir   6.35.1.0   08.06.2006   no virus found
Authentium   4.93.8   08.06.2006   no virus found
Avast   4.7.844.0   08.04.2006   Win32:Trojan-gen. {Other}
AVG   386   08.05.2006   no virus found
BitDefender   7.2   08.06.2006   no virus found
CAT-QuickHeal   8.00   08.04.2006   no virus found
ClamAV   devel-20060426   08.06.2006   no virus found
DrWeb   4.33   08.06.2006   no virus found
eTrust-InoculateIT   23.72.88   08.06.2006   no virus found
eTrust-Vet   12.6.2324   08.04.2006   no virus found
Ewido   4.0   08.06.2006   no virus found
Fortinet   2.77.0.0   08.06.2006   suspicious
F-Prot   3.16f   08.06.2006   no virus found
F-Prot4   4.2.1.29   08.06.2006   no virus found
Ikarus   0.2.65.0   08.04.2006   no virus found
Kaspersky   4.0.2.24   08.06.2006   no virus found
McAfee   4822   08.04.2006   no virus found
Microsoft   1.1508   08.04.2006   no virus found
NOD32v2   1.1694   08.05.2006   no virus found
Norman   5.90.23   08.04.2006   no virus found
Panda   9.0.0.4   08.06.2006   no virus found
Sophos   4.08.0   08.06.2006   no virus found
Symantec   8.0   08.06.2006   no virus found
TheHacker   5.9.8.186   08.04.2006   no virus found
UNA   1.83   08.04.2006   no virus found
VBA32   3.11.0   08.06.2006   no virus found
VirusBuster   4.3.7:9   08.06.2006   no virus found

Aditional Information
File size: 2816191 bytes
MD5: 5b2b6b0211e10411fcd5c894a5a323df
SHA1: c4c81aa661c8b82a0820828c1968bf40d48f7355
packers: RAR

Offline hlloyge

  • Jr. Member
  • **
  • Posts: 28
  • New-B!
Re: [bug] WinRAR and Avast (Win32:Trojan-gen. {Other})
« Reply #4 on: August 10, 2006, 09:02:18 PM »
Today I got the latest update, 4.7.871, and the problem is solved.

Thank you all!

Ivan.