Re: Vdownloader - Kaspersky and Avira reporting it as malware..site suspended!?

[Duh_OZ]

On Oct 4, 5:40 am, phreewarep...@yahu.net wrote:
> The latest version of Vdownloader is being reported by Avira as infected
> with:
>
> SPR/Dldr.VDown.A
>
> Kaspersky scans it as:
>
> not-a-virus: Downloader.Win32.VDown.a
>
> Boclean has also added a "RSK-VDOWNLOADER" to its definitions and blocked
> it on my computer.
>
> Does anyone have any more info. It looks likewww.vdownloader.es(the
> official site) has been suspended:
>
> The page just brings this info up:
>
> Status: 403 Forbidden
> Content-Type: text/html
>
> This site has been suspended
>
> Any more information?

============
Used Google cache to get to a mirror site and download it. I then
submitted it to Virus Total and just a few flagged it.

eSafe7.0.15.0 2007.10.04 suspicious Trojan/Worm
Fortinet3.11.0.0 2007.10.04 Download/VDown
Kaspersky7.0.0.125 2007.10.05 not-a-virusownloader.Win32.VDown.a
Prevx1 V22007.10.05 Heuristic: Suspicious File With Outbound
Communications
Webwasher-Gateway 6.0.1 2007.10.04 Riskware.Dldr.VDown.A

[hummingbird]

On Thu, 04 Oct 2007 22:41:18 -0500 'phreewarephan@yahu.net'
posted stuff on alt.comp.freeware:

>Duh_OZ <ozzy.kopec@gmail.com> wrote in
>news:1191551842.935047.103840@d55g2000hsg.googleg roups.com:

>> Used Google cache to get to a mirror site and download it. I then
>> submitted it to Virus Total and just a few flagged it.
>>
>> eSafe7.0.15.0 2007.10.04 suspicious Trojan/Worm
>> Fortinet3.11.0.0 2007.10.04 Download/VDown
>> Kaspersky7.0.0.125 2007.10.05 not-a-virusownloader.Win32.VDown.a
>> Prevx1 V22007.10.05 Heuristic: Suspicious File With Outbound
>> Communications
>> Webwasher-Gateway 6.0.1 2007.10.04 Riskware.Dldr.VDown.A


>If you submit it to Jotti, you'll find that Avira's Antivir does, too. I'm
>not sure why Virustotal doesn't reflect that, though. The Avira forums
>indicate that they're not sure whether the packer is causing the malware
>decision, though.

v0.4 is packed with UPX ... don't know about later versions but I've
never heard of UPX causing such an alarm but I s'pose there's always
a first time.

--
If politicians resent being accused of spinning & lying,
there's a very simple solution: they should stop doing it.

ACF freeware: http://freeware.wikia.com/wiki/Main_Page