Trojan :O

[uygar]

Hi all

Couple of hours ago avast anti virus found win32:agent-gxn trojan in fifth gear video which I downloaded from torrents. I click to torrent link from finalgear.com's web site and I downloaded video twice and checked in different computers. Anti virus reported the same trojan. Also it found similar trojans in season 10. Last virus was found on fifth gear 11x02 [river]. I don't blame any one but I wanted to share my experience with you.


Any idea?

[epp_b]

Check it with another AV scanner and report back...

[cl191]

I don't think virus/trojans/worms can hide in an .avi file, like epp_b said, you may want to check with another AV scanner to make sure there's nothing else on your system.

[Viper007Bond]

False positive.

[uygar]

I downloaded the last series and scanned with avast and found the same trojan. but other anti virus softwares did not see found anything. I scanned in different computers and the result was the same. Trojan in some videos.

[EsPpY]

Originally Posted by uygar

Hi all

Couple of hours ago avast anti virus found win32:agent-gxn trojan in fifth gear video which I downloaded from torrents. I click to torrent link from finalgear.com's web site and I downloaded video twice and checked in different computers. Anti virus reported the same trojan. Also it found similar trojans in season 10. Last virus was found on fifth gear 11x02 [river]. I don't blame any one but I wanted to share my experience with you.


Any idea?

So its avast fucking up.


Use McAfee bro. Like me.

[Quiky]

There is some other virus lurking on your system..

[niccce]

Originally Posted by cl191

I don't think virus/trojans/worms can hide in an .avi file, like epp_b said, you may want to check with another AV scanner to make sure there's nothing else on your system.

There can be anything appended at the end of the file, including a virus body, although this doesn't mean it can run itself from there, *unless the media player in question has some sort of buffer overflow issue. Generally some virii are known to store their data in jpegs and other pictures, although the data is usually encrypted with a multi-layer cipher, so it can't be detected anyway.

To conclude: it is possible, although the media file itself can do no harm*. If the rest of the pc seems to be clean, there's no reason to worry. And you better switch to something more reliable (nod32/kaspersky).

[Fowvay]

I scanned with McAffe and found the same trojans on episode 2 and 5 of this season....

[cvrefugee]

I found this in my video, it looks like a gift of sorts. Should I keep it or not?

[teletubby-warrior]

Originally Posted by cvg

I found this in my video, it looks like a gift of sorts. Should I keep it or not?

[epp_b]

[uygar]

Originally Posted by niccce

There can be anything appended at the end of the file, including a virus body, although this doesn't mean it can run itself from there, *unless the media player in question has some sort of buffer overflow issue. Generally some virii are known to store their data in jpegs and other pictures, although the data is usually encrypted with a multi-layer cipher, so it can't be detected anyway.

To conclude: it is possible, although the media file itself can do no harm*. If the rest of the pc seems to be clean, there's no reason to worry. And you better switch to something more reliable (nod32/kaspersky).

yes, one of my friend is software engineer and he said the same thing. Harmless but you should keep eye on it. My system and the other systems did not have any viruses. Somebody attached the worm to avi file but it did not started. I also found the same virus on Little Britain Christmas Special and on season 10.

[Viper007Bond]

Originally Posted by uygar

I also found the same virus

No, your anti-virus program said there was a virus in it. Big huge difference as you're assuming your AV program is correct, which it isn't. False positives are hardly uncommon and this is one of them.

AV programs go around looking for hashes and strings attempting to detect viruses. Occasionally, things can match that string and still not be a virus, especially in media files as it's a different data type.

[Quiky]

Is this a virus?
http://www.eicar.org/download/eicar.com

No. It only contains the signature of one. Not a false detection, but the AV thinks there is something in it that is potentially dangerous.

[epp_b]

^ Good point.