Trojan Alert

Bugs found in XnView Classic. Please report only one bug per topic!

Moderators: helmut, XnTriq, xnview

Post Reply
Concerned Guest

Trojan Alert

Post by Concerned Guest »

Beware
The complete version of XnView in .zip form contains a trojan in the pngout.exe file. It also dropped a file in the C:\System Volume Information \... folder.

Goto:
http://www.trendmicro.com/vinfo/virusen ... V&VSect=Sn
to download a fix tool for this. Click on "Download the fixtool here", unzip the file and run it.
marsh
XnThusiast
Posts: 2443
Joined: Sun May 15, 2005 6:31 am

Post by marsh »

See following topic: :arrow: pngout.exe
User avatar
helmut
Posts: 8704
Joined: Sun Oct 12, 2003 6:47 pm
Location: Frankfurt, Germany

Post by helmut »

Yes, a known false alert of TrendMicro virus scanner.
User avatar
ckv
Posts: 786
Joined: Wed Feb 02, 2005 2:30 pm
Location: Glow
Contact:

Post by ckv »

And the reason it goes in C:\System Volume Information\ is the Windows XP system restore. When changes are made to the system (e.g. install new software) XP automatically creates a restore point and it backsup some of the new stuff in there. :)

Pngout is getting lot of warnings from AVs cause it's packed with scrambled UPX (Which I think is pretty stupid. :? ).
http://www.virustotal.com/analisis/fe34 ... 712a067de5
XnView Tweak UI - Tool to customize your XnView beyond the regular XnView options.
UI-less Settings - Documentation of all the hidden settings in XnView.
XFAM - Tool to create and customize XnView file associations.
(now un)Concerned Guest

false positive

Post by (now un)Concerned Guest »

Cheers for the info. 8)
User avatar
helmut
Posts: 8704
Joined: Sun Oct 12, 2003 6:47 pm
Location: Frankfurt, Germany

Post by helmut »

ckv wrote:... Pngout is getting lot of warnings from AVs cause it's packed with scrambled UPX (Which I think is pretty stupid. :? ).
http://www.virustotal.com/analisis/fe34 ... 712a067de5
False warnings and alerts are no good and irritatating - even if they are false. pngout is bundled into the XnView complete package, so we should care and contact the author of pngout.

@Pierre: Could you please contact him and ask whether he's aware of the virus scanner problem and whether can/will do something about this?
User avatar
xnview
Author of XnView
Posts: 46255
Joined: Mon Oct 13, 2003 7:31 am
Location: France
Contact:

Post by xnview »

helmut wrote:
ckv wrote:... Pngout is getting lot of warnings from AVs cause it's packed with scrambled UPX (Which I think is pretty stupid. :? ).
http://www.virustotal.com/analisis/fe34 ... 712a067de5
False warnings and alerts are no good and irritatating - even if they are false. pngout is bundled into the XnView complete package, so we should care and contact the author of pngout.

@Pierre: Could you please contact him and ask whether he's aware of the virus scanner problem and whether can/will do something about this?
The author of pngout don't reply anymore to emails... :-(
Pierre.
User avatar
helmut
Posts: 8704
Joined: Sun Oct 12, 2003 6:47 pm
Location: Frankfurt, Germany

Post by helmut »

xnview wrote:The author of pngout don't reply anymore to emails... :-(
Is he/she German? If so, I could try to contact him/her.
Post Reply