demonbuddy.exe infected with TR/strictor.9072640.2

[denemeci]

my antivir popped up with the warning.. "written in the title"
was using same demonbuddy.exe for a week or maybe more.(edit: added this info)
then I downloaded zip version of the DB414
and popped up again with the same trojan alert to the zip this time..

what should I do?

 

[Tony]

just set exceptions

 

[denemeci]

does it mean it's safe?

 

[Tony]

it is safe

its a false positive

 

[foam_follower]

it is safe

its a false positive

As I understand it the false positive is caused by the way Demonbuddy hides itself from detection. The way it does this is through obfuscation.

Please see this article for a simple explanation.

https://en.wikipedia.org/wiki/Obfuscation_(software)

 

[sasde221]

Got the same problem but making exceptions for dont work tried to to make a new folder with the bot in it and set the folder and the exe as exceptions but dont work

 

[DiscoDancer]

Got the same problem but making exceptions for dont work tried to to make a new folder with the bot in it and set the folder and the exe as exceptions but dont work

make the whole folder an exception

 

[sasde221]

Got the same problem but making exceptions for dont work tried to to make a new folder with the bot in it and set the folder and the exe as exceptions but dont work

as i wrote it don't work for me

 

[Tony]

whats your antivirus?

 

[Coitza]

whats your antivirus?

i have AVG and it gives me the same problem, i even tried to add exception to the folder.. wich it works untill i start the bot.. afterwards the .exe just gets deleted.. same problem with both the installer and the zip

https://virusscan.jotti.org/en-US/filescanjob/3d3hf3yr2p

 

[Tony]

tried to set exception for the exe itself?

 

[Coitza]

tried to set exception for the exe itself?

did it now.. and aprently it works.. i can open it now.. success !!

 

[Tony]

great!