gbadev.org forum archive

This is a read-only mirror of the content originally found on forum.gbadev.org (now offline), salvaged from Wayback machine copies. A new forum can be found here.

DS development > devkitPro virus?

#86310 - arog - Tue Jun 06, 2006 6:12 am

Maybe this is just a false positive or maybe it's just my computer (though I run Kerio Firewall and AVG AntiVirus on a fully patched WinXP SP2 box). Has anyone else seen this? It just started happening today after AVG updated its definitions.

[Images not permitted - Click here to view it]

It thinks C:\devkitPro\uninst.exe and devkitProUpdater-1.2.8 is infected with the trojan horse Downloader.Zlob.AOG.

AVG AntiVirus Free
engine: 7.1.394
definitions: 268.8.2/356

devkitPro 1.2.8 with updates before the last major update to 1.3.0

- Aaron Rogers
http://www.aaronrogers.com/nintendods/

#86316 - JaJa - Tue Jun 06, 2006 9:13 am

It's likely to be a false positive, as the updater contains code to connect to a site and download.
It probably looks similar to the trojan (from AVGs point of view).
_________________
LAWL HOOGE
My Blog

#86324 - dXtr - Tue Jun 06, 2006 10:36 am

JaJa wrote:
It's likely to be a false positive, as the updater contains code to connect to a site and download.
It probably looks similar to the trojan (from AVGs point of view).


wouldn't supprise me.. a similar thing happend on my computer when AVG decided that the editor (YY-CHR) I use for nes/snes graphic was a trojan >=/

..that reminds me, if anyone know how to tell avg that it's ok to run a file that it thinks is infected.. please tell me :)
_________________
go back to coding and stop screaming wolf :)

#86332 - wintermute - Tue Jun 06, 2006 2:17 pm

Heh, unfortunately things like this happen on a regular basis. At one point several anti virus solutions decided that all devkitARM compiled nds binaries were the bricker trojan because they didn't bother signature checking properly.

False positives are becoming all too common if you ask me.
_________________
devkitPro - professional toolchains at amateur prices
devkitPro IRC support
Personal Blog

#86340 - tepples - Tue Jun 06, 2006 2:48 pm

I run without resident anti-virus software, instead preferring to 1. maintain "safe hex" practices, such as not opening executable attachments, and 2. do periodic scans for anything that I missed.
_________________
-- Where is he?
-- Who?
-- You know, the human.
-- I think he moved to Tilwick.