PDA

View Full Version : Same?



trenzterra
May 1st, 2002, 08:46
I don't know whether its the right forum, but I want to ask:


You know those stuff where some antivirus programs detect that this installer has viruses inside?


Does this happen to almost every installer?


Because it happened in Inno Setup.

meow
May 1st, 2002, 09:06
False alerts you mean? I know McAfee is a pain when it comes to that but it doesn't report every installation file as contaminated.

Never happened to me - but I don't use McAfee. Do you?

Jan
May 1st, 2002, 09:06
Uhhhhh more information please trenz :confused:

trenzterra
May 1st, 2002, 09:10
I read this from Inno's newsgroup and one program said that it had the RadLight thing inside. Heres the full message:

I just ran PestPatrol 3.1
(http://www.sunbelt-software.com/product.cfm?id=911) on my computer.
According to its makers, PestPatrol is "a powerful anti-hacker utility that
finds and eliminates hacker tools, spyware and trojans from your personal
computer or corporate network."

One of the files it marked as a pest file was the unins000.exe file that is
shipped with Inno Setup. More specifically, it claimed it contained the
RadLight trojan. This is what the PestPatrol database says about RadLight:

---
Installs SaveNow.
NewNet is also installed and performs a great deal of damage to your
internet connection. The sporder.dll is installed on your computer with the
newdotnet3_36.dll. Winsock entries are adjusted and not fixed after
un-install, re-connecting after an un-install would be difficult.
Additionally Ad-Aware files
and registry entries are removed. The uninstaller does not perform all
functions required for a full uninstall.

Category: Trojan.
Any program with a hidden intent. Trojans are one of the leading causes of
breaking into machines. If you pull down a program from a chat room, new
group, or even from unsolicited e-mail, then the program is likely trojaned
with some subversive purpose. The word Trojan can be used as a verb: To
trojan a program is to add subversive functionality to an existing program.
For example, a trojaned login program might be programmed to accept a
certain password for any user's account that the hacker can use to log back
into the system at any time. Rootkits often contain a suite of such trojaned
programs.
---

I can hardly believe that one of the Inno Setup files would contain a
trojan, especially since I can't detect any of the symptoms described for
RadLight on my computer (e.g. the dll files). This would suggest it's a
false alarm. Does anyone know more about this?

Thanks!
Ron