igive.com Shopping Window , virus?

[Daniel Prince]

I just tried to install the igive.com Shopping Window and I got a
warning from Antivir (r) Guard saying that it contained a virus
signature. I canceled the installation. Does anyone know if this
is a false alarm or if it really has a virus/trojan?

Is there another newsgroup that would be more appropriate for this
question? Thank you in advance for all replies.

 

[Ionizer]

I just tried to install the igive.com Shopping Window and I got a
warning from Antivir (r) Guard saying that it contained a virus
signature. I canceled the installation. Does anyone know if this
is a false alarm or if it really has a virus/trojan?

If the file is 2MB or smaller, send it here for a second opinion:
http://www.virustotal.com/flash/index_en.html What name did Antivir give
to the virus it identified? I took a look at the iGive site, but it's not
entirely clear what this Shopping Window is. If one of its functions is
to deliver banner advertising, your antivirus might have spotted it as
adware/spyware.

 

[Daniel Prince]

If the file is 2MB or smaller, send it here for a second opinion:
http://www.virustotal.com/flash/index_en.html

It was only about 250 KB so I sent it.

What name did Antivir give to the virus it identified?

12/13/2004,9:13:57 WARNING: Contains signature of the worm
Worm/Appkills!
D:\PROGRAM FILES\IGIVE_SHOPPINGWINDOW\IGIVESHOPPINGWINDOW0.EXE

Are you familiar with this one?

 

[Ionizer]

It was only about 250 KB so I sent it.


12/13/2004,9:13:57 WARNING: Contains signature of the worm
Worm/Appkills!
D:\PROGRAM FILES\IGIVE_SHOPPINGWINDOW\IGIVESHOPPINGWINDOW0.EXE

Are you familiar with this one?

Oh- it looks like you installed it anyway.

I did a bit of Googling and found several references to this "Appkills"
thing. It was often associated with something called Webrebates0.exe:
http://www.iamnotageek.com/a/webrebates0.exe.php This Shopping Window of
yours may not be such a good idea. Antivirus programs don't focus much on
detecting adware and spyware, but it looks like your Antivir program has
this one on its list.

Are you seeing more popup ads now that you've installed this thing? Did
you submit it to virustotal for a second opinion?

Based on my brief research, I'd recommend you get rid of that Shopping
Window and just contribute to your favorite charity directly. It's an
animal-related charity, isn't it?

Regards,
Ian.

 

[Daniel Prince]

news:[email protected]...

Oh- it looks like you installed it anyway.

I thought at the time that I had not installed it. I later used
msconfig to prevent it from loading.

I did a bit of Googling and found several references to this "Appkills"
thing. It was often associated with something called Webrebates0.exe:
http://www.iamnotageek.com/a/webrebates0.exe.php This Shopping Window of
yours may not be such a good idea. Antivirus programs don't focus much on
detecting adware and spyware, but it looks like your Antivir program has
this one on its list.

For some reason Antivir no longer seems to recognize it as a worm.

Are you seeing more popup ads now that you've installed this thing?

I disabled it with msconfig and I use Mozilla and Mozilla FireFox
both of which I have configured to block unrequested popups.

Did you submit it to virustotal for a second opinion?

I did and only one program found anything.

Panda 7.02.00/20041217 found [Adware/TopRebates]

Based on my brief research, I'd recommend you get rid of that Shopping
Window and just contribute to your favorite charity directly. It's an
animal-related charity, isn't it?

You can select several different charities with igive. I selected
National CFIDS Foundation, Inc, because I have been disabled with
CFIDS for more than 32 years.