Quote:
Originally Posted by allengwinn
Trojan? Has anyone else seen Microsoft Forefront alert on an Orsam!RTS trojan in the hard spl unlocker? It just alerted on the hard spl package (1.03) tonight.
|
It's a false positive.
The problem is that the installer uses an EXE compression algorithm to make it harder for someone to grab and break the "security" in there to prevent someone from using it to bulk unlock.
From the outside all a virus scanner can see is an obfuscated compressed executable file. Some virus scanners overreact and declare it a virus (because viruses use exactly the same method to try to avoid detection), some just declare is suspicious, and others ignore it entirely.