VIRUS INCLUDED
Friday, October 20, 2006 by cocteau48 | Discussion: WindowBlinds
I downloaded about half a dozen just of them for a better appreciation and soon discovered that,according to my security suite, both FROIS - 01 and VVA both downloaded with the W32/HLLP.Philis.ini virus onboard.
Needless to say my security suite promptly removed both.
Just thought I would bring it to your attention.
Reply #2 Friday, October 20, 2006 8:34 AM
Reply #3 Friday, October 20, 2006 8:39 AM
Reply #4 Friday, October 20, 2006 8:47 AM
W32/HLLP.Philis.ini is a sub-set of the W32/HLLP.Philis virus. The *.ini variant is at this time ONLY detected by McAfee, and if you look at the description of the "virus" here:
http://vil.nai.com/vil/content/v_140656.htm
You'll see that it's not actually a virus that it's detecting, but an artifact of W32/HLLP.Philis. The _desktop.ini file can not contain the virus, it is merely potentially a record of the virus executing.
Looking at the _desktop.ini file included with the latest version of FROIS-01, there is a timestamp inidicating that Dexter2005 has been infected by the W32/HLLP.Philis virus, which prepends itself to .exe files.
The _desktop.ini file is NOT AN INFECTED FILE. It is only a sign that the system on which it was created is infected (and even then, only sometimes, there may be legit apps that create an _desktop.ini file). Since there are no .exes packed in a skin, this isn't even the beginnings of a concern.
However, any skin author that is told their skin is triggering this warning, they need to get their systems cleaned, because they might very well have the actual virus.
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Friday, October 20, 2006 8:15 AM
I'll bet that's McAffee ....that 'suite' of yours....and it's a false positive...
Checked with 4 or 5 alternate AVs [yesterday]...and clean as a whistle...