PDA

View Full Version : Trojan detected in DTL



cybermcm
30.10.2009, 19:07
McAfee Virusscan Enterprise detects a false positive with dtlite.exe.

I escalated the case to McAfee and awaiting answer soon (hopefully a new dat file).

Jizmo
30.10.2009, 19:38
I downloaded DTL off this site, and when I ran the installation my anti-virus software (mcafee on-access) came up saying that

"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe"

is a

"Artemis!435F79D364B7"

and deletes it. So I have the files, just not the executable. Any ideas what's wrong?

Blazkowicz
30.10.2009, 19:43
McAfee is detecting a false positive, that's all.
Therefore set it to ignore install folder of DT and wait for an update of McAfee.

Jizmo
30.10.2009, 20:32
Ugh... I've set like 5 different exceptions that should all encompass the .exe file, but it still deletes it every time.

sikvdila
30.10.2009, 23:27
I'm using kaspersky 9 and nothing found during installation DT Lite, so it's your antvirisu problem I think

gitslaughingman
31.10.2009, 17:01
Hi, today I downloaded the latest version of daemon tools lite from this page. During the install McAfee Internet Security detected the daemon tools exe-file as "New Poly Win32"-virus and kept it under arrest, so that the installation failed.

I sent the file to McAfee, so that they can fix the detection-file. Has anyone else got this problem.

sikvdila
31.10.2009, 18:12
Hi, today I downloaded the latest version of daemon tools lite from this page. During the install McAfee Internet Security detected the daemon tools exe-file as "New Poly Win32"-virus and kept it under arrest, so that the installation failed.

I sent the file to McAfee, so that they can fix the detection-file. Has anyone else got this problem.

you ar't firs who have same problem, I can say for sure there is't virus. it's your antivirus problem

cybermcm
31.10.2009, 21:50
McAfee confirmed the false positive.
DAT file version 5788 doesn't detect the threat anymore, all fine now...

cybermcm
02.11.2009, 12:22
If you rename the dtlite.exe to daemon.exe (to ensure compatibility with yasu), daemon.exe is still recognized as trojan.

This is solved with DAT 5789.

Arkha
04.11.2009, 19:58
I've just downloaded the new version for Windows Seven and McAfee detects DTLite.exe as a virus (New Poly Win32) :confused:

See attachement

Blazkowicz
04.11.2009, 20:15
@Arkha
Which virus databases do you have installed?

I scanned it with several AVs and McAfee didn't complain:
Virustotal. MD5: 415cacb0ced393bd6949577397fab023 (Suspicious) - DNAScan Win32.NewPoly Packer.Win32.UnkPacker.a (http://www.virustotal.com/en/analisis/21312dd9db1ab0364e835e9f9624a48151beef975526448ada 9be896c2efb279-1257365382)

deucide
16.05.2010, 01:36
dont think its a problem with his antivirus im running avg internet security suite and got same thing. reports it as New Poly virus or variant , its being picked up by the identity protection portion of the antivirus software