Trojan

[alfalahi]

Hello there

i just download HB and my antivirus VIPRE cought a file called AMDEx3.msi

C:\Windows\installer\AMDEx3.msi



Risk name:
Trojan.Win32.Generic!BT

Source:
Active Protection

Quar date:
11/7/2012 9:10 PM

Risk level:
High

Risk category:
Trojan


Description:
Trojan is a general term for malicious software that is installed under false or deceptive pretenses or is installed without the user's full knowledge and consent. Most Trojans exhibit some form of malicious, hostile, or harmful functionality or behavior.


Advice:
This is a high risk and should be removed immediately as it may compromise your privacy and security, make dangerous changes to your computer's settings without your knowledge and consent, or severely degrade your computer's performance and stability.

 

[Spraymaster]

I scan every day with Avast, Never any problems with Honorbuddy.

 

[jaymehx]

please upload the file on www.virustotal.com

 

[Niv]

Are you sure this file originates from Honorbuddy? Never seen this before and google knows nothing about the filename. Oh and why is it in C:\Windows\ anyway?

Anyway, check it with virustoal.com to learn

 

[Tony]

its a false positive

 

[wilbo007]

yeah I get this too from Kapersky, what on Earth is it?

 

[Tony]

yeah I get this too from Kapersky, what on Earth is it?

nothing to worry about,false positive

 

[Extreme_kid]

nothing to worry about,false positive

I also JUST got this AVAST Warning first time installing Honor buddy on my newly installed OS.
The Antivirus Moved the file to Quarantine chest, I tried Honor buddy and it seems to be working perfectly fine without this file that was just removed.

Tony could you please explain a little about functionality of this file ? Just trying to understand what is it this file exactly do ?

Heres a link to Virus total.com result on this file https://www.virustotal.com/file/179c57fda7e8d7fc20d72dd304a4b9910568b9f7b2a5f98d068de00131d152dd/analysis/1353312575/

 

[CodenameG]

pretty sure this [FONT=Helvetica Neue, Helvetica, Arial, sans-serif]AMDEx3.msi isnt one of ours, and wouldn't come in a default honorbuddy install. [/FONT]

 

[Extreme_kid]

pretty sure this [FONT=Helvetica Neue, Helvetica, Arial, sans-serif]AMDEx3.msi isnt one of ours, and wouldn't come in a default honorbuddy install. [/FONT]

What if I tell you it was in the Default honorbuddy zip file that I downloaded from the http://www.thebuddyforum.com/ website ?

 

[CodenameG]

you should always download it from here
http://updates.buddyauth.com/GetNewest?filter=Honorbuddy

so what link are you getting it from, because that file isnt in there. i just checked.

 

[Extreme_kid]

you should always download it from here
http://updates.buddyauth.com/GetNewest?filter=Honorbuddy

so what link are you getting it from, because that file isnt in there. i just checked.

I downloaded it from here >>>> Honorbuddy - Downloads - Home of the Buddy Bots - Honorbuddy, Gatherbuddy, Demonbuddy, Buddy Wing, Tankleader

I'm a little confused to be honest with you.... Tony says its a false positive when 11 antiviruses detected it as a trojan malware and you tell me it isn't one of ours....

 

[CodenameG]

this file AMDEx3.msi the one you linked the scan for does not come with honorbuddy.

here is a link to the scan for the latest honorbuddy build right from our build server, and i can assure you everything here.
https://www.virustotal.com/file/06c...65c1c5bb23827b9846e6533a/analysis/1353314147/

is a false positive and nothing to worry about.


i dont know where you managed to find that other file, but its not one of ours.

 

[Extreme_kid]

i dont know where you managed to find that other file, but its not one of ours.

It can't only be me tho , I mean the owner of this thread and somebody else apparently got the same warning after using honorbuddy ?
coincidence ?

 

[Charles2k]

Kids, don't do drugs.

 

[Menaxerius]

Got the same after update btw..

 

[CodenameG]

like i said, that file AMDEx3.msi isnt ours, not sure where it came from or what. so i cannot tell you as per that file if its safe.

i can say the releases you pull off our update server.
Home

are clean, and while do report false positives on some anti-virus products are clean and safe to use.

 

[Menaxerius]

I've downloadet the newest Version now with my mobile, uploaded the Honorbuddy.exe to Virustotal and got this:
https://www.virustotal.com/file/d67...095c2c357a786963493f0505/analysis/1353317830/

SHA256:

d676048e8c5600d687e727866f50774776f166a3095c2c357a786963493f0505





















File name:

Honorbuddy.exe









Detection ratio:

5 / 44



Analysis date:

2012-11-19 09:37:10 UTC ( 0 Minuten ago )

hmm...

Mena

The exe seems false positiv, but i will take a look at it when i'm @home

 

[verbo]

Eset Antivirus with the latest definitions scans the zip just fine.

 

[nooblet]

Zone alarm suite scans with no positives of any kind.

And i trust Zone Alarm 100%