WhatPulse Forums
Trojan found in WhatPulse.exe - Printable Version

+- WhatPulse Forums (http://whatpulse.org/forums)
+-- Forum: Support (/forumdisplay.php?fid=38)
+--- Forum: Client software (/forumdisplay.php?fid=58)
+--- Thread: Trojan found in WhatPulse.exe (/showthread.php?tid=5437)



Trojan found in WhatPulse.exe - Gigabyte12 - 09-28-2014 11:21 PM

Hello

My Antivirus (Norton from Symantec) reports an Trojan in the new WhatPulse Update. Whats wrong, am I the only one with this problem?


RE: Trojan found in WhatPulse.exe - Inquizitor - 09-29-2014 01:32 AM

Scanned with 54 different virus scanners (VirusTotal) and got nothing. This is surely a false positive that should be reported to Symantec/Norton.

Nothing to worry about.

MD5 of installer should be: 555baafdb952586a9daf70ad436bf38f


RE: Trojan found in WhatPulse.exe - Dr_Whooves - 09-29-2014 04:38 AM

(09-28-2014 11:21 PM)Gigabyte12 Wrote:  Hello

My Antivirus (Norton from Symantec) reports an Trojan in the new WhatPulse Update. Whats wrong, am I the only one with this problem?

Sadly confirmed :/. i got the same problem. I hope Symantec gets this rechecked and stuff.

So who will be the first to report it to Symantec?

(Scanned with Norton 360)


RE: Trojan found in WhatPulse.exe - Gigabyte12 - 09-29-2014 06:09 AM

I can't even install it on my Server-Systems. It gets blocked as Trojan :/ I can't do the Update at Work, because the Systemadministrator of the Company will get Crazy if he gets an Virus-Report of my Computer. The whole Company uses Symantec.


RE: Trojan found in WhatPulse.exe - TheWartek - 09-29-2014 07:18 AM

G Data InternetSecurity reports an virus in whatpulse-after-update.exe. Despite this update seems to be completed correctly.

Virus name from G Data IS: Gen:Variant.Kazy.95887 (Skaner A)


RE: Trojan found in WhatPulse.exe - ile89 - 09-29-2014 08:04 AM

F-Secure PSB Workstation Security is alerting about the same virus: Gen:Variant.Kazy.95887


RE: Trojan found in WhatPulse.exe - smitmartijn - 09-29-2014 06:56 PM

Symantec and F-Secure should not alert to the client, as I use this to analyse, which includes both Symantec and F-Secure: https://www.virustotal.com/en/file/4998753eac8887a2340fe201216e5ceff42318881f00b84f6df4a6b00df905a3/analysis/

Only one that's missing in that list is Norton, which I recall had false positives with 2.3 or 2.2 as well or something..Reporting another false positive.

Need to see if I can automatically submit false positives to everyone or something, this is crazy.


RE: Trojan found in WhatPulse.exe - Bloopy - 09-29-2014 08:05 PM

Symantec here at work just popped up a warning that the installer exe was unfamiliar to it, but I was able to dismiss it, so no problems here.

Based on my last experience, Norton is shockingly overprotective these days.


RE: Trojan found in WhatPulse.exe - ile89 - 09-29-2014 08:49 PM

The alert I got was from whatpulse-after-update.exe file, which I can't even see in the whatpulse directory after update on my personal laptop.


RE: Trojan found in WhatPulse.exe - xmsteel - 09-30-2014 06:20 AM

I also used virustotal just now. Nothing detected. My own personal computers also don't detect any file associated with whatpulse to be dangerous.