Trojan virus in oem package?

Jeremysjunk · #1 (**permalink**) 12-24-2007, 06:37 AM

Can someone else confirm this? I was a work and opened up the latest oem package for the kitchen and our anti virus program found a Trojan virus in the package and removed it. I was at work and didn't have time to research what Trojan it was but I was wondering if anyone else has had this problem. This was on the 22nd and downloaded from FTP for PPCGEEKS. I downloaded it today and unpacked it and scanned it with AGV but none were found. I believe we use Norton at work.

Thanks for all the hard work and making these 6700's fun

Jeremysjunk

jtrag · #2 (**permalink**) 12-24-2007, 08:02 AM

Norton is junk. Use Bit Defender, Kaspersky, or NOD32. They are excellent antivirus programs.

Regarding the trojan, it's probably just a program being detected as one that isn't. It probably just has similar properties to a trojan virus. Also, which file is it on the FTP that says it has a trojan?

**tiermann** · #3 (**permalink**) 12-24-2007, 12:19 PM

I scan all files with Avast before they get uploaded. I also provide the MD5 Hash for each incase they're tampered with on the public FTP here. Most likely it's what jtrag said, a false positive from Norton.

Alternatively you can use the ppckitchen.org mirrors listed their. That server is not publicly uploadable so I can pretty much guarantee they haven't been tampered with.

Jeremysjunk · #4 (**permalink**) 12-26-2007, 06:42 PM

I double checked today and my company uses McAfee not Norton. It was the RAR file for the programs that had the "virus". I'll download them again and scan the files online but I can't do this at work I have to wait untill I get home today. I was just checking to see if anyone else had this problem. The antivirus didn't even see it untill I unpacked the RAR file in it's own folder and as soon as it unpacked it showed up. I don't want to do it again at work because IT department might throw a fit.

Jeremysjunk

**GaMedic** · #5 (**permalink**) 12-26-2007, 07:09 PM

Well first of all, if you are talking about the ppcgeeks_oem.rar it is is not supposed to be unpacked. You just put it in root folder. It never gets unpacked. I would think that if a virus existed in that file we would all be seeing some issues. 100's if not 1000's have use this kitched with that rar file.

Jeremysjunk · #6 (**permalink**) 12-26-2007, 09:25 PM

Yes thats what I would think as well. I just wanted to make sure. I know it's not suppose to be unpacked but I wanted to see how things were done and learn and thats how I do it. I bet the majority of people would not unpack it because it has been said in the forums that your not suppose to. Now the "virus" that was detected was not detected until I did the unpacking. So I imagine that it is possible there could be one because as I remember some anti virus programs in the past did not scan files that were compressed or zipped very well. We might not be hearing about it because no one is unpacking. I was just checking if people would check with their anti virus software because I only use agv and figured it would be easy for someone to unpack it and scan it with different software. I also remember there being a problem at one time that people would delete things they had no right to delete and if they had that access I would think that someone could add a program with a virus and upload it back in. I never heard if they solved that issue with allowing access.

Thanks for the input guys
Jeremysjunk

I hope I'm not offending anyone that put this package together I truly appreciate all the hard work and countless hours put into this project. Thanks again!