Database Info

[Q]Dropbox Windows version Trojan infected?

Hello!
I installed Dropbox on my Android phone and also installed Dropbox for Windows. After some time I got a warning from Microsoft Security Essentials which linked to the following website:
microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Trojan%3aWin32%2fJpgiframe.A&threatid=2147626408[/url]
It says there is a Win32/Jpgiframe.A trojan in the appcache folder of Dropbox.
Does anyone has problems with this?

[Q] upd_1 trojan

Good Morning,
i want to use a newer Android Version on my Samsung Galaxy Ace and for that i want use this tutorial: [ok, i cant post links. But in this tutorial is a link for a upd_1.zip download from this site]
If i click on the link to download the upd_1.zip i get a trojan alert from avast free antivirus. Can I assume that it is a false alarm?
(Maybe i should buy a second fullversion of eset for this notebook.)
Or will each windows antivirus programm give an alarm beacause the upd_1.zip is a non windows data?

Name is already in use said:
Good Morning,
i want to use a newer Android Version on my Samsung Galaxy Ace and for that i want use this tutorial: [ok, i cant post links. But in this tutorial is a link for a upd_1.zip download from this site]
If i click on the link to download the upd_1.zip i get a trojan alert from avast free antivirus. Can I assume that it is a false alarm?
(Maybe i should buy a second fullversion of eset for this notebook.)
Or will each windows antivirus programm give an alarm beacause the upd_1.zip is a non windows data?
Click to expand...
Click to collapse
i dont know the answer to your queston, but i would try finding other methods. if they all give you an alert, its probably safe to assume that they are safe.
for samsung galxay ace, there is a website novafusion, http://novafusion.pl/downloads/
which has good files, i use them.

Name is already in use said:
Good Morning,
i want to use a newer Android Version on my Samsung Galaxy Ace and for that i want use this tutorial: [ok, i cant post links. But in this tutorial is a link for a upd_1.zip download from this site]
If i click on the link to download the upd_1.zip i get a trojan alert from avast free antivirus. Can I assume that it is a false alarm?
(Maybe i should buy a second fullversion of eset for this notebook.)
Or will each windows antivirus programm give an alarm beacause the upd_1.zip is a non windows data?
Click to expand...
Click to collapse
some exploits trigger as a virus, this is normal. just make sure you get the files from a good site like xda, so you don't get tricked and it is a virus for real.

Kobro said:
i dont know the answer to your queston, but i would try finding other methods. if they all give you an alert, its probably safe to assume that they are safe.
Click to expand...
Click to collapse
I had previously tried that, but I could not find a download that worked, which I trust or with the correct file.
bweN diorD said:
some exploits trigger as a virus, this is normal. just make sure you get the files from a good site like xda, so you don't get tricked and it is a virus for real.
Click to expand...
Click to collapse
Ok thanks for that information.
And for the case that there is a real trojan in the download can it only be a Windows trojan right? I supposed that a anti virus programm for windows cant find malicious software for android.

[Q] Kingoroot - malware?

Hi
I just downloaded this app from the CNET link (following the link on www kingoapp.com/ android-root . htm) on the basis that CNET is reputable and that the app is likely to be safe.
Upon running the installer it connects to the internet and then downloads an app. My antivirus kicks in saying that the installer contains Pua.Adware.Proinstall
Has anyone experienced reviewed the rooting app and considered it safe? (I know that they issued an explanation, but not clear that they ever followed it up and fixed the issues that led to the initial banning here)

Ok - used the installer from their ftp, no suggestion of adware, but note that app still tries to connect to the internet when running. Why?
Also just ran it through virustotal:
CAT-QuickHeal (Suspicious) - DNAScan 20141210
Cyren W32/MalwareHiderPatched-based!M 20141210
F-Prot W32/MalwareHiderPatched-based!M 20141210
TrendMicro-HouseCall Suspicious_GEN.F47V1121 20141210

Because they are known to send you device I go to their server. Things like you IMEI and other device info

odywd
zelendel said:
Because they are known to send you device I go to their server. Things like you IMEI and other device info
Click to expand...
Click to collapse
I thought they stopped that?
What other root method is better?

I have use Kingoroot for my phone is work well

Kingoroot connects to the Internat because it checks for execuable scripts for this device.

[Q] trojan. ..

recently downloaded a zip file for a rom.
ran norton and it found a trojan.
norton dealt with the issue, all is clean now it says.
2?'s
is the rom safe to use now if norton gave the green light?
where did this trojan come from?
was it the dev? i have used his roms before, and no issues...
hard for me to think, as was said in another post that he would take the time to cook up the rom just to slip a trojan in. but i understand it's a possibility.
is there a chance that it was not injected by the dev though?
somehow in transit through the net or on the hosting site?
really would like to beleive it did not come from the dev but another source...

xda___ said:
recently downloaded a zip file for a rom.
ran norton and it found a trojan.
norton dealt with the issue, all is clean now it says.
2?'s
is the rom safe to use now if norton gave the green light?
where did this trojan come from?
was it the dev? i have used his roms before, and no issues...
hard for me to think, as was said in another post that he would take the time to cook up the rom just to slip a trojan in. but i understand it's a possibility.
is there a chance that it was not injected by the dev though?
somehow in transit through the net or on the hosting site?
really would like to beleive it did not come from the dev but another source...
Click to expand...
Click to collapse
- also, another idea... a "false positive"?

You are using windows pc, and a android device which is based on linux. Its not possible to run a windows program in linux based mobile platform. I think, the virus you have found,that must be entered when the rom is packed.

IsolatedKM said:
You are using windows pc, and android based on linux. Its not possible to run a windows program in linux based mobile platform. I think, the virus you have found,that must be entered when the rom is packed.
Click to expand...
Click to collapse
I downloaded the rom onto my pc and ran norton before putting onto my phone....
what would suggest a rom is packed with a virus vs. a false positive or coming from a different source?

xda___ said:
- also, another idea... a "false positive"?
Click to expand...
Click to collapse
AND, if i was able to clean the files, how do i know if norton removed something the rom needs to funtion?
can i tell by any code info. norton gives me on the virus?

flash it nothing will happen to your phone since it detects windows viruses + norton is crappy i suggest using kaspersky

Most likely a false positive.

adb virus?

Recently I installed the minimalistic platform tools pakage with adb from Google. Then yesterday I tried to test it out and connected my phone to the computer. In the first trial, it didn't seem to work and so I typed adb reconnect, all of a sudden the antivirus software Avast installed on my computer prompts that the adb.exe has been infected with Idp.generic virus and it has blocked its action and put the file in something like quarantine. I would like to know if anyone is experiening such weird behavior and if it is a false positive or is my ROM has been infected with virus?