Potential Virus/Trojan in ..\Wiking67\Testaware_AmigaSoft\

SuperPlay · 01 February 2017, 10:24

Hi Folks

Just a quick heads up!

Windows Defender on my PC has identified that the following file:

~Uploads\Wiking67\Testaware_AmigaSoft\WinLZH_Freeware\WinLZH\WinLZH.exe

as being infected with: Trojan: Win32/Orsam!rts

May be a false positive?

Cheers

zipper · 01 February 2017, 12:49

Maybe, F-Secure doesn't find anything. But virustotal.com gives something like 31/56 positives for it. The nature of the exe (UPack packed) might mislead.
ClamAV: "Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat."

ma693541 · 02 February 2017, 00:16

AVG reacts nearly the same way as Windows Defender on the same file. Maybe false positive, but it's best to be on the safe side. If you need to unpack .LZH files on a PC, use Easy 7-Zip.

01 February 2017, 10:24	#1
SuperPlay Registered User Join Date: Sep 2013 Location: Staffordshire / UK Posts: 119	Potential Virus/Trojan in ..\Wiking67\Testaware_AmigaSoft\ Hi Folks Just a quick heads up! Windows Defender on my PC has identified that the following file: ~Uploads\Wiking67\Testaware_AmigaSoft\WinLZH_Freeware\WinLZH\WinLZH.exe as being infected with: Trojan: Win32/Orsam!rts May be a false positive? Cheers

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
[FOUND] Trojan Lightpen Drivers?	roy bates	support.Apps	54	30 October 2023 23:43
Trojan Light Pen drivers	JumpingAnaconda	request.Other	3	10 January 2010 22:22
potential new project	boing_1000	support.Hardware	2	10 July 2007 21:26
Potential A600 HD problems	NytroX86	support.Hardware	13	27 December 2004 19:17
Possible bug, and potential Disk Swapper improvment	ervin	support.WinUAE	3	15 August 2004 02:46

01 February 2017, 12:49	#2
zipper Registered User Join Date: Mar 2004 Location: finland Posts: 1,838	Maybe, F-Secure doesn't find anything. But virustotal.com gives something like 31/56 positives for it. The nature of the exe (UPack packed) might mislead. ClamAV: "Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat."

02 February 2017, 00:16	#3
ma693541 Computer Wizard Join Date: Aug 2007 Location: Ramberg/Norway Posts: 928	AVG reacts nearly the same way as Windows Defender on the same file. Maybe false positive, but it's best to be on the safe side. If you need to unpack .LZH files on a PC, use Easy 7-Zip.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)