wingspan 0 Report post Posted December 20, 2005 I have used CCleaner for quite awhile, and like it a lot -- thank you! But when I ran an a-squared malware scan today, it found Trojan-Dropper.Win32Agent.acq in two previously downloaded CCleaner setup files: ccsetup123.exe and ccsetup124.exe. It did not find anything in earlier setup files or in ccsetup125.exe or in ccsetup126.exe. I don't remember where I downloaded the contaminated files from -- but I usually go to castle cops for a link, or to hippo, or major geeks -- and sometimes I think I use the link provided from inside CCleaner. Just don't remember... A-squared said it removed the infected files, but I am off to run more scans... Any comments or suggestions are welcome. Quote Share this post Link to post Share on other sites
rridgely 0 Report post Posted December 20, 2005 What version of windows are you on? A-Squared is notorious for false positives. No ccleaner dosent have viruses. Quote Share this post Link to post Share on other sites
Tarun 0 Report post Posted December 20, 2005 Upload it to jotti. Quote Share this post Link to post Share on other sites
rridgely 0 Report post Posted December 20, 2005 Upload it to jotti. 24782[/snapback] Why we know its clean. Quote Share this post Link to post Share on other sites
Tarun 0 Report post Posted December 20, 2005 Because you always want to check to see if anything else reports a false positive. Whether you know it's clean or not. Don't take a chance. It's best to play it safe, you should know that. Quote Share this post Link to post Share on other sites
pwillener 0 Report post Posted December 21, 2005 A few weeks ago McAfee VirusScan identified most of my downloaded Ccleaner setup files as infrected (and deleted them without even prompting me!). They actually put a warning onto their website and corrected the virus definitions within a few hours. Have you checked the A-squared website if they have updated virus definitions? Quote Share this post Link to post Share on other sites
Andavari 1 Report post Posted December 21, 2005 All scanners are subject to false positives and will eventually give one, even the mighty eTrust EZ Antivirus. Also if you already have an infection on your system it can infect other files. Quote Share this post Link to post Share on other sites
wingspan 0 Report post Posted December 22, 2005 Hi -- I can't upload the files that a-squared flagged as contaminated because I let a-squared delete them. (They were older CCleaner setup files.) I use WinXP Pro, rridgely. It is reassuring to see that folks seem to think this was a false-positive. I will be running some additional online scans to make sure. Thanks, all. Quote Share this post Link to post Share on other sites
rridgely 0 Report post Posted December 22, 2005 Your on xp, which is good. Get rid of A squared.(it really is a terrible program). Instead use ewido.(Basically the best you will find) http://www.ewido.net/en/download/ Quote Share this post Link to post Share on other sites
Greenknight 0 Report post Posted December 23, 2005 I took a look at the A-squared Forum to see if there were any other cases of this. I didn't find this exact case, but it appears that A-squared thinks it finds Trojan-Dropper variants in a lot of programs, it's apparently the most common false-positive. Quote Share this post Link to post Share on other sites
Brandon 0 Report post Posted December 23, 2005 Please send the file(s) to ah@emsisoft.com for further analysis. Quote Share this post Link to post Share on other sites