a-squared scan found trojan in ccsetup files

[wingspan 0]

I have used CCleaner for quite awhile, and like it a lot -- thank you! But when I ran an a-squared malware scan today, it found Trojan-Dropper.Win32Agent.acq in two previously downloaded CCleaner setup files: ccsetup123.exe and ccsetup124.exe. It did not find anything in earlier setup files or in ccsetup125.exe or in ccsetup126.exe.

 

I don't remember where I downloaded the contaminated files from -- but I usually go to castle cops for a link, or to hippo, or major geeks -- and sometimes I think I use the link provided from inside CCleaner. Just don't remember...

 

A-squared said it removed the infected files, but I am off to run more scans...

 

Any comments or suggestions are welcome.

[rridgely 0]

What version of windows are you on?

 

A-Squared is notorious for false positives. No ccleaner dosent have viruses.

[Tarun 0]

Upload it to jotti.

[rridgely 0]

Upload it to jotti.

 

24782[/snapback]

 

 

 

 

Why we know its clean.

[Tarun 0]

Because you always want to check to see if anything else reports a false positive. Whether you know it's clean or not. Don't take a chance. It's best to play it safe, you should know that.

[pwillener 0]

A few weeks ago McAfee VirusScan identified most of my downloaded Ccleaner setup files as infrected (and deleted them without even prompting me!). They actually put a warning onto their website and corrected the virus definitions within a few hours.

 

Have you checked the A-squared website if they have updated virus definitions?

[Andavari 1]

All scanners are subject to false positives and will eventually give one, even the mighty eTrust EZ Antivirus. Also if you already have an infection on your system it can infect other files.

[wingspan 0]

Hi -- I can't upload the files that a-squared flagged as contaminated because I let a-squared delete them. (They were older CCleaner setup files.)

 

I use WinXP Pro, rridgely.

 

It is reassuring to see that folks seem to think this was a false-positive. I will be running some additional online scans to make sure. Thanks, all.

[rridgely 0]

Your on xp, which is good. Get rid of A squared.(it really is a terrible program). Instead use ewido.(Basically the best you will find)

http://www.ewido.net/en/download/

[Greenknight 0]

I took a look at the A-squared Forum to see if there were any other cases of this. I didn't find this exact case, but it appears that A-squared thinks it finds Trojan-Dropper variants in a lot of programs, it's apparently the most common false-positive.

[Brandon 0]

Please send the file(s) to ah@emsisoft.com for further analysis.