AntiVir is silent now

I just got the response from Avira, the company behind the popular virus scanner "AntiVir":

MobMapInstaller.exe CLEAN

Die Datei 'MobMapInstaller.exe' wurde als 'CLEAN' eingestuft. Unsere Analytiker haben in dieser Datei keinen Schadcode gefunden.


(it is in German because it's a german company, but it means something like: The file 'MobMapInstaller.exe' has been classified as clean. Our Analysts could not find any malicious code in this file.)

And Avira has already updated the signatures accordingly - the MobMapUpdater is not being found to contain a virus anymore!

This seems to apply to the "Webwasher Gateway", too, which probably uses AntiVir as its scanning engine.

[update] And while I was writing this, the Austrian company behind the virus scanner "Ikarus" responded:

Sehr geehrter Herr Schneider,
der Fehlalarm wurde ausgebaut und tritt mit dem nächsten Update nicht mehr
auf!

Mit freundlichen Grüßen
IKARUS Support Team
Christian SCHWARZ


("Dear Mr. Schneider, the false alarm has been removed and will not occur anymore with the next update.")

[update 2] Okay, this is strange: The file "MobMapUpdater.exe" does not trigger the AntiVir alarm anymore, but the installer package "MobMapInstaller.exe" still does (though it just contains the MobMapUpdater.exe which is not triggering the alarm when it's scanned)!

Funny thing: I had to recompile the Installer package using a different compression setting in Inno Setup (that is the program I use to create the package) to get rid of the false alarm. Recompiling with the same setting did not help. Maybe the compression setting I used earlier was confusing AntiVir somehow...well, the alarm is fixed, so who cares ;-)

Trackbacks

    No Trackbacks

Comments

Display comments as (Linear | Threaded)

  1. Seppi says:

    Yes... I wrote it to the antivir company too... today they made the update ^^
    Finaly this thing become silent again ^^

    Hab die datei auch vor einigen tagen überprüfen lassen...
    Ist clean ^^ hab die gleiche mail bekommen...
    virenmeldung wurde nun mit dem neuen update ausgeschaltet... ^^

    scheiß "ignorieren" knopf ^^ kann den nichmehr sehn... :P

  2. petitsuisse says:

    Also bei mir schlägt Avira immer noch an, trotz update, Produktupdate und ähnlichem

  3. PJ says:

    I think you should put some screenshots on http://mobmap.de to show us how it works

  4. PJ says:

    Well, i've tested it, and I've found at least one fake quest someone has hacked in, where you turn in arcane tomes for thousands of gold in stormwind.

  5. PJ says:

    In fact, do a quest search for quests which reward more than 30 gold and you'll find many fake quests which seem to be from private (ie illegal) servers. Not really that usefully...

  6. humfras says:

    OMG, PJ...
    You could have say this in max. 2 Posts.

    "Not really that usefully..."
    Well, at least spend a thought on that.
    This is not Slarti's problem.
    But...
    A solution might be to 'connect' collected data to the specific realm and let Mobmap validate it in comparisation with the official realms.
    I don't know if this is possible in simple ways but I think this would have an effectivity around 90% (because nearly all private server have notable names, afaik).

    On thing left: Support your Addon-developer with bug-reporting or donations :-)

  7. Slarti says:

    I already have numerous measures to detect or otherwise omit private server data in place which should catch around 98% of it before it gets into the database. The problem is: according to my statistics, around 10-15% of all data uploads can be classified as "private server data" with absolute certainty, and there are like 10k uploads a day, so that makes around 1.500 single uploads from private servers, most of them containing pure garbage. If I can filter 98%, that still leaves 30 uploads which pass the filters.

    I'm trying to catch some of that faulty stuff that actually makes it into the database by "information aging" techniques (that is, if some data does not get "confirmed" by another upload in a set timeframe, it gets dropped) and some other forms of verification, but unfortunately there is no "magic" solution there that fits all the different sorts of data equally well. So in the end, in some few cases it still comes down to me having to clean up the database manually...which I don't have time for to do it every day, of course.

  8. Anonymous says:

    one solution would be to have it automatically flag any quest that rewards more than say 100g. The flagged quests would not be included in the database that gets downloaded and would be set aside for manual review.

  9. Brian says:

    There's an anti spyware program out there called A-squared (homepage is http://www.emsisoft.com/en/software/free/ ) which is still giving false positives of trojans in MobMap (even after the changes).

    As far as I know, neither Spybot nor Ad-Adaware seem to be having this issue. Just figured I'd pass this info along. It's more of an annoyance than anything to me, but it would be nice to stop having a window alert popping up at me every time I scan my system to ensure there's no infections.


Add Comment


Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA 1CAPTCHA 2CAPTCHA 3CAPTCHA 4CAPTCHA 5