Reported Trojan Virus

Things you’d like to miss in the future...
Dsibley
Posts: 14
Joined: 06 Dec 2018 17:12

Reported Trojan Virus

Post by Dsibley » 19 Feb 2019 14:02

My computer will not allow the portable version on my computer.

It is so adamant that it keeps deleted the main application file.

I try to override but it refuses to override.

It is absolutely insistent that the main application file contains a Trojan virus.

Dsibley
Posts: 14
Joined: 06 Dec 2018 17:12

Re: Reported Trojan Virus

Post by Dsibley » 19 Feb 2019 14:12

I tried this on a different computer and same result.

I also got the same result with the installer version as opposed to the portable version.

Windows Defender is insistent that these files contain trojan virus.

I am not saying they do, but I am unable to install.
Last edited by Dsibley on 19 Feb 2019 14:12, edited 1 time in total.

admin
Site Admin
Posts: 47703
Joined: 22 May 2004 16:48
Location: Cologne, Win 8.1, Win 10
Contact:

Re: Reported Trojan Virus

Post by admin » 19 Feb 2019 14:12

19.70 will be released soon and the hubbub will be over...

Magnus
Posts: 23
Joined: 21 Oct 2012 21:51

Re: Reported Trojan Virus

Post by Magnus » 19 Feb 2019 16:06

Even the installed (non-portable) version...

From Windows Security*...

Code: Select all

Trojan:Win32/Occamy.C
Alert level: Severe
Status: Quarantined
Date: 2/19/2019 9:57 AM
Category: Trojan
Details: This program is dangerous and executes commands from an attacker.

Affected items:
file: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XYplorer\XYplorer.lnk
file: C:\Users\Magnus\AppData\Roaming\Microsoft\lnternet Explorer\Quick
Launch\User Pinned\TaskBar\XYplorer.lnk
file: D:\Program Files (x86)\XYplorer\XYplorer.exe
process: pid:13732,ProcessStart:131950618242458907
regkey: HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\XYplorer
startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XYplorer\XYplorer.lnk
uninstall: HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\XYplorer
*Typos possible... OCR text.

admin
Site Admin
Posts: 47703
Joined: 22 May 2004 16:48
Location: Cologne, Win 8.1, Win 10
Contact:

Re: Reported Trojan Virus

Post by admin » 20 Feb 2019 10:42

19.70 is released, and the madness should be history:
Attachments
VirusTotalXY1970.png
VirusTotalXY1970.png (7.26 KiB) Viewed 482 times

altoclef
Posts: 18
Joined: 12 Oct 2012 18:54

Re: Reported Trojan Virus

Post by altoclef » 20 Feb 2019 14:46

Windows Defender does not like v19.70:

XYTrojan.PNG
XYTrojan.PNG (55.51 KiB) Viewed 465 times

admin
Site Admin
Posts: 47703
Joined: 22 May 2004 16:48
Location: Cologne, Win 8.1, Win 10
Contact:

Re: Reported Trojan Virus

Post by admin » 20 Feb 2019 14:55

Oh man, :blackstorm: what kind of spell is that? I feel a bit powerless right now... :eh:

VeeGee
Posts: 196
Joined: 27 Jul 2015 20:00

Re: Reported Trojan Virus

Post by VeeGee » 20 Feb 2019 15:14

Good morning,
Checked the 19.70 and 19.70.0001 beta on 2 workstations. US, Windows 10 x64 1803 using Windows Defender and MBAM Premium - all come up clean using latest definitions (and previous ones).

Ran full scans using :

Code: Select all

"C:\program files\windows defender\mpcmdrun.exe" /SignatureUpdateAndQuickScan
and manual XY folder/file specific scans - all clean.

admin
Site Admin
Posts: 47703
Joined: 22 May 2004 16:48
Location: Cologne, Win 8.1, Win 10
Contact:

Re: Reported Trojan Virus

Post by admin » 20 Feb 2019 15:23

Glad to hear that, thanks.

You know, if this virus bullshit is going on there is no point in doing this any longer. Might as well look for a job... :maf:

admin
Site Admin
Posts: 47703
Joined: 22 May 2004 16:48
Location: Cologne, Win 8.1, Win 10
Contact:

Re: Reported Trojan Virus

Post by admin » 20 Feb 2019 16:23

FYI, I have built myself a quick single file Defender scanner (works nicely in Win8.1, not sure about Win10):

1. Create file "DefenderScan.bat" in folder <xyscripts> with these contents:

Code: Select all

@ECHO OFF
"C:\Program Files\Windows Defender\MpCmdRun.exe" -Scan -ScanType 3 -File %1
PAUSE
2. Add this to Tools | Customize File Associations... (aka POM):
|"Defender Scan"*><xyscripts>\DefenderScan.bat

Now you can easily scan any file via Ctrl+Alt+Enter or "Open With" toolbar button.
DefenderScan1.png
DefenderScan1.png (28.75 KiB) Viewed 438 times
Result (puuh, lucky this time):
DefenderScan2.png
DefenderScan2.png (4.05 KiB) Viewed 438 times
PS: learned about the Defender command line here: https://www.winhelp.us/windows-defender ... ows-8.html

VeeGee
Posts: 196
Joined: 27 Jul 2015 20:00

Re: Reported Trojan Virus

Post by VeeGee » 20 Feb 2019 17:05

Thanks for sharing. I added it and it works great. We all know XY is clean and there are far too many false-positives out there for all types of apps; however, I can say, if I was to get infected, I wouldn't mind an XY infection :shock:

Open With Toolbar, another awesome feature in XY. I only have a few custom entries in mine so far. Right now I have been either clicking the toolbar button or using the keyboard shortcut. Is there a way to incorporate it's flyout/popup into the standard right-click menu ? I didn't see anything in the help/scripts forum, so not sure. As I start using it more, I want to make sure I am doing it properly.

admin
Site Admin
Posts: 47703
Joined: 22 May 2004 16:48
Location: Cologne, Win 8.1, Win 10
Contact:

Re: Reported Trojan Virus

Post by admin » 20 Feb 2019 17:14

Yes, Configuration | General | Menus, Mouse, Safety | Context Menus | File List..., though it does not fly out:
Attachments
2019-02-20_171319.png
2019-02-20_171319.png (11.89 KiB) Viewed 427 times

pixelsearch
Posts: 28
Joined: 21 May 2018 18:45

Re: Reported Trojan Virus

Post by pixelsearch » 20 Feb 2019 19:00

Hi Don,
If it can reassure you, I just checked XYplorer.exe 19.70.0001 at VirusTotal
Nothing found after being scanned by 68 Antivirus engines :
xplorer.exe 19.70.0001 safe.jpg
xplorer.exe 19.70.0001 safe.jpg (214.36 KiB) Viewed 413 times

Justin42
Posts: 1
Joined: 20 Feb 2019 21:00

Re: Reported Trojan Virus

Post by Justin42 » 20 Feb 2019 21:03

Seems like it was fixed in the latest updates as of today; 19.70 triggered for me as well (as did 19.60.01) so I reported it as a false positive and they've already replied saying the detection was removed.

Hopefully they'll get the hint and not discourage everyone, XYPlorer is too critical for too many of us for Microsoft to be screwing around with it... :evil:

admin
Site Admin
Posts: 47703
Joined: 22 May 2004 16:48
Location: Cologne, Win 8.1, Win 10
Contact:

Re: Reported Trojan Virus

Post by admin » 20 Feb 2019 21:43

Thanks! :tup:

Post Reply