Are These a Problem?
Sunday, March 29, 2009 by angus1949 | Discussion: Stardock Support General
I just finished running an in-depth AV/Trojan scan with Online Armor, and had the following suspicious files listed. Are these legitimate?
Reply #2 Sunday, March 29, 2009 1:18 PM
Every once in a while false positives pop up. I can't imagine that SD is going to allow anything nasty to happen. What I would do though is email [email protected] and give them the information that way they can get back to Online Armor.
Reply #3 Sunday, March 29, 2009 1:27 PM
How very odd....those are just bitmap images from this windowblind: https://www.wincustomize.com/skins.aspx?skinid=5120&libid=1
Not suspicious at all.
Reply #4 Sunday, March 29, 2009 1:42 PM
Since these are Skin files and not WB's files I believe it would not fall under a WB false positive. but it still could be a false positive..
It suprises me that all of a sudden it finds a 4 year old file suspicious, as I doubt you installed the skin any time recently since its no longer available here for download. So IMO i think it would be a false positive, but if you dont want to take the chance you can always remove it.
I was going to download and investigate it but alas as I stated earlier is not available for download..
Reply #5 Sunday, March 29, 2009 2:09 PM
Tim offered me a link to the skin at Skinbase... I have downloaded it and scanned it with AVG8, I even unpacked the WBA and scanned the files individually. It has come up with no suspicious files.
From what I can remember an image can contain a virus, but it would need the coresponding Exe to run it. Which WB would not be. So as far as I can tell even if the files were infected.. without the exe used to extract and run the data it would be rendered null.
Hopefully yrag or someone with a bit more knowlege can confirm this..
Reply #6 Sunday, March 29, 2009 3:25 PM
Thanks guys. I'll be sure that Stardock gets this just so they can contact OA and report it as an FP.
Reply #8 Monday, March 30, 2009 10:59 PM
That's a weird one. We've had false positives in the past of .dlls and what not in the apps themselves, but to detect bitmaps as a threat is unusual. Not really much we could do with them, as it's not detecting part of the app itself, other than report a false positive through the same channels as anyone else.
Any report on what it actually detected them as?
Reply #9 Saturday, April 4, 2009 1:17 PM
Maybe the scanner didn't know what to make of the spaces at the end of the file name? Do the other files (in that folder) have similar spaces before the .bmp?
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Sunday, March 29, 2009 1:14 PM
EDIT