Trojan in faststone image viewer?

[SJP]

Did a scan of my PC today as normal with a squared from
http://www.emsisoft.com/en/ 2 malwares were detected both relating to
Faststone image viewer that I had installed the day previous.
http://www.faststone.org/index.htm
False positives or genuine problem??
Faststone was recomended in thos group.

 

[Saxman]

Did a scan of my PC today as normal with a squared from
http://www.emsisoft.com/en/ 2 malwares were detected both relating to
Faststone image viewer that I had installed the day previous.
http://www.faststone.org/index.htm
False positives or genuine problem??
Faststone was recomended in thos group.

I installed the Firefox extension 'Siteadvisor', and it's amazing what so
-called 'clean' sites have on offer for us.

 

[jmatt]

A few choices.

1: Put the names into a search engine like google.
2: Put them into quarantine.
3: See if the program is still happy, if so keep using.

Even a brand new install of an operating system, will have stuff that 1
of the 6 or so checks I do, objects to.

 

[Art]

Did a scan of my PC today as normal with a squared from
http://www.emsisoft.com/en/ 2 malwares were detected both relating to
Faststone image viewer that I had installed the day previous.
http://www.faststone.org/index.htm
False positives or genuine problem??
Faststone was recomended in thos group.

Kaspersky was able to scan files "within" the install file, and
nothing was found.

What are the malware names a^2 reported? Did it offer to delete?
If so, did you allow it? Does a^2 identify certain files as being
infested? If so, you can upload suspicious files here for scanning
by multiple av scanners:

http://www.virustotal.com/flash/index_en.html

Art
http://home.epix.net/~artnpeg

 

[powerstation]

Kaspersky was able to scan files "within" the install file, and
nothing was found.

What are the malware names a^2 reported? Did it offer to delete?

FSIcons.db=Trojan-Dropper.Win32.Small.hl

Category
Dropper : In viruses and trojans, the dropper is the part of the
program that installs the hostile code onto the system.



64.132.20.112/kaspersky/vlist.txt (dead link?)

 

[Art]

FSIcons.db=Trojan-Dropper.Win32.Small.hl

So where's the Virus Total result on the file?

Art
http://home.epix.net/~artnpeg

 

[ab5cvjl]

Does anyone have any more information on this issue?

Two things concern me.

I haven't heard anything from Faststone assuring everyone that there is
no trojan in it. I would have thought that we would have seen a denial
in this group by now, especially since they know what it is and
announced their beta in it.

This company or organiztion doesn't have any names or addresses on its
web sites that I could find. They sell commercial licenses but only
through pay pal and share it. Many large corporations have policies
against buying anything without a legal name and address of with whom
they are dealing. Why don't they say who and where they are?

 

[CoMa]

I haven't heard anything from Faststone assuring everyone that there is
no trojan in it. I would have thought that we would have seen a denial
in this group by now, especially since they know what it is and
announced their beta in it.

I tested the latest "a-squared" updates on
FastStone Image Viewer latest beta
and no hits.


/CoMa

 

[CoMa]

This company or organiztion doesn't have any names or addresses on its
web sites that I could find. They sell commercial licenses but only
through pay pal and share it. Many large corporations have policies
against buying anything without a legal name and address of with whom
they are dealing. Why don't they say who and where they are?

I think that FastStone is a 1 person "company"
If you look in the "help--about" you see the name
Andrew Lu.

Btw.
Why don't you send your questions to FastStone
Andrew answer most of the time very quickly.



--

Regards
CoMa

http://hubbabub.deviantart.com/