Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Virus, Spyware, and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

> Virus in download from a tutorial link
kwegar
post Oct 22 2009, 12:40 PM
Post #1


New Member
*

Group: Members
Posts: 1
Joined: 21-May 09
Member No.: 334,289



in the tutorial

"How to delete or rename files and folders that are in use or locked in Windows"

there is a virus in the download link file.

Eset 3.0.xxx stopped the download


22/10/2009 10:33:27 AM HTTP filter file http://ccollomb.free.fr/unlocker/unlocker1.8.7.exe a variant of Win32/Adware.ADON application connection terminated - quarantined

Wanted to let someone know.



Go to the top of the page
 
+Quote Post
 
Start new topic
Replies (1 - 3)
garmanma
post Oct 22 2009, 04:31 PM
Post #2


Computer Masochist
******

Group: Moderator
Posts: 23,634
Joined: 27-January 07
From: Cleveland, Ohio
Member No.: 108,618



Would you kindly link us to which tutorial you are referring to?


--------------------
Mark

why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter
Go to the top of the page
 
+Quote Post
Animal
post Oct 27 2009, 01:40 PM
Post #3


Bleepin' Animinion
******

Group: Site Admin
Posts: 9,664
Joined: 18-August 05
From: Now On...
Member No.: 31,547



I'm assuming this one? http://www.bleepingcomputer.com/tutorials/tutorial131.html

An easy way to double check the validity of the DL, is to verify the MD5 checksum info against the DL. Unlocker provides that information on their page. My presumption at this point is that is a false positive by ESET. We are looking into it, as of this post. Thank you for bringing it to our attention.


--------------------
The Internet is so big, so powerful and pointless that for some people it is a complete substitute for life.
Andrew Brown


"On the keyboard of life, always keep one finger on the escape key." — Scott Adams.

Become a BleepingComputer fan: Facebook

Go to the top of the page
 
+Quote Post
Grinler
post Oct 27 2009, 04:06 PM
Post #4


Bleep Bleep!
******

Group: Admin
Posts: 31,601
Joined: 24-January 04
From: USA
Member No.: 3



We do not actually directly link to the download, but confirmed and the md5s do match up on the site and the download from the site. I checked the executable against virustotal and since nod32 is the only one showing it as a problem, my guess is this is a false positive.

CODE
a-squared     4.5.0.41     2009.10.27     -
AhnLab-V3     5.0.0.2     2009.10.27     -
AntiVir     7.9.1.44     2009.10.27     -
Antiy-AVL     2.0.3.7     2009.10.27     -
Authentium     5.1.2.4     2009.10.27     -
Avast     4.8.1351.0     2009.10.27     -
AVG     8.5.0.423     2009.10.27     -
BitDefender     7.2     2009.10.27     -
CAT-QuickHeal     10.00     2009.10.27     -
ClamAV     0.94.1     2009.10.27     -
Comodo     2748     2009.10.27     -
DrWeb     5.0.0.12182     2009.10.27     -
eSafe     7.0.17.0     2009.10.27     -
eTrust-Vet     35.1.7086     2009.10.27     -
F-Prot     4.5.1.85     2009.10.27     -
F-Secure     9.0.15370.0     2009.10.27     -
Fortinet     3.120.0.0     2009.10.27     -
GData     19     2009.10.27     -
Ikarus     T3.1.1.72.0     2009.10.27     -
Jiangmin     11.0.800     2009.10.26     -
K7AntiVirus     7.10.881     2009.10.27     -
Kaspersky     7.0.0.125     2009.10.27     -
McAfee     5784     2009.10.27     -
McAfee+Artemis     5784     2009.10.27     -
McAfee-GW-Edition     6.8.5     2009.10.27     -
Microsoft     1.5202     2009.10.27     -
NOD32     4549     2009.10.27     Win32/Adware.ADON
Norman     6.03.02     2009.10.27     -
nProtect     2009.1.8.0     2009.10.27     -
Panda     10.0.2.2     2009.10.27     -
PCTools     4.4.2.0     2009.10.19     -
Prevx     3.0     2009.10.27     -
Rising     21.53.13.00     2009.10.27     -
Sophos     4.46.0     2009.10.27     -
Sunbelt     3.2.1858.2     2009.10.27     -
Symantec     1.4.4.12     2009.10.27     -
TheHacker     6.5.0.2.055     2009.10.27     -
TrendMicro     8.950.0.1094     2009.10.27     -
VBA32     3.12.10.11     2009.10.27     -
ViRobot     2009.10.27.2007     2009.10.27     -
VirusBuster     4.6.5.0     2009.10.26     -


--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
2 User(s) are reading this topic (2 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 21st November 2009 - 10:58 PM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides

© 2003-2009 All Rights Reserved Bleeping Computer LLC.