User forums > General (but related to Code::Blocks)

Possible Trojan Discovered in \CodeBlocks\MinGW\bin\zip.exe

<< < (2/3) > >>

scarphin:

--- Quote from: John44 on August 28, 2012, 09:02:38 am ---The Code::Blocks version is 10.05 from March 17, 2011.

--- End quote ---
Shouldn't this be version 11.03 if there ever was one or is it the date he installed CB?

John44:
Thank you MortenMacFly and jens for your replies. It did cross my mind that if there was a trojan, the file may have been found earlier.  It also crossed my mind that Spybot – Search & Destroy may be detecting a false positive. I did search the forums prior to posting and found the following topics:

http://forums.codeblocks.org/index.php/topic,14091.0.html

http://forums.codeblocks.org/index.php/topic,8070.0.html

My prior post could be a false alarm. However, I also thought that nothing is ever perfect and for whatever reason, the possibility of a Trojan existing in that file location could be real and may not be known to anyone else.

I do not like writing a post like the one above because it can create unnecessary stress, turn up nothing and be a waste of time. So the question is when should one write about a potential problem, if he/she does not know if it is an actual problem or a false alarm?

John44:
scarphin,

It is the date that I installed Code::Blocks onto my computer.

MortenMacFly:

--- Quote from: John44 on August 28, 2012, 06:01:13 pm ---if he/she does not know if it is an actual problem or a false alarm?

--- End quote ---
As I said: Double-check with services like virustotal. If the detection rate is greater than 5% (so in the case of 41 AV software packages something like >2-3), ask here. In any case, if a lot more files are found to be infected on your PC, not only C::B - never ask here, but clean your PC. ;)

thomas:

--- Quote from: MortenMacFly on August 28, 2012, 10:14:56 am ---
--- Quote from: jens on August 28, 2012, 09:43:17 am ---Or his PC is really infected.

--- End quote ---
Indeed - that's another option. ::)

--- End quote ---
No, in this case the cryptographic checksums would differ. That's what they're for.

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version