ZIP.SFX a danger?

A

Andrew

I have WIN.RAR that I downloaded in my temp directory before installing it.
It has been there since July but only yesterday did a Norton scan point to
that folder saying that ZIP.SFX within it presents a danger. Is it a danger
or a standard file that exists within WIN.RAR
Andrew
 
C

Conor

I have WIN.RAR that I downloaded in my temp directory before installing it.
It has been there since July but only yesterday did a Norton scan point to
that folder saying that ZIP.SFX within it presents a danger. Is it a danger
or a standard file that exists within WIN.RAR
Andrew
Flase positive. sNortin is really really shit.

--
Conor

Greedo shot first. Greedo ALWAYS shot first. You did not see Solo shoot
first.
It never happened. Never, ever. Not in any version. Remember: Greedo
shot first.
 
V

_Vanguard_

Conor said:
Flase positive. sNortin is really really shit.


Conor:
Yep, a professional and qualified opinion, especially from someone
incapable of using a spelling checker.

Andrew:
You never say what IS the Win.Rar file (i.e., what is in it). Could be
something you archived into the .rar file is now getting detected by
Norton Antivirus. SFX files are SelF-Extracing archive files; you can
run the .exe file to extract the contents without requiring a copy of
the archival tool. See their KB site at
http://www.win-rar.com/index.php?aid=knowl&lang=eng for info on SFX
files.

Obviously they could not be proliferating a .rar file to install their
product since you would need WinRAR already installed to then read the
..rar file to do the installation. The download for WinRar is a file
named wrar341.exe (notice the .exe extension). So we don't have a clue
what is actually in that Win.RAR file you built or downloaded. Is there
a reason you cannot delete that non-described Win.RAR file and go get it
again from whatever unmentioned site you got it?

It is possible that Norton AntiVirus alerted with a false postive on
this file. It is also possible that this file is infected but you
haven't been performing regular updates or it was just recently
discovered. You never mentioned WHAT virus that NAV was warning you
about, which might not even be a virus but perhaps spyware (since
anti-virus products are now diversifying into covering malware other
than viruses). You could also try checking the file with some of the
freebie online virus scanners, like at McAfee, Trend, and Kaspersky,
along with using the online scanners for spyware, like at PestScan and
SpySweeper (but be warned that these services WILL generate false
positives so you need to look at their manual removal instructions to
see if you actually have the infection that they claim you have).
 
A

Andrew

Conor said:
Flase positive. sNortin is really really shit.
I thought that it might be that. It must be their latest update that caused
it to be found after being on file for months.
Andrew.
 
M

Michael

Andrew said:
I thought that it might be that. It must be their latest update that caused
it to be found after being on file for months.
Andrew.

I had the exact same problem on when Norton ran on my system. It
found that the ZIP.SFX file that came with WINRAR330.zip contained the
HACKTOOL.HIDEWINDOW virus/trojan in it.

Solution:
I went to WINRAR's website using the link provided by a previous
poster and downloaded version 3.41 of WINRAR. This file doesn't have
that problem.

Hope this helps.

Michael
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top