Alphasort Program

[moranacus]

I have been using the Alphasort program for awhile with out any problems but after I installed the free
version of A-Squared Free and did a malware scan I get a high risk Trojan-Spy.Win32.Banker!IK in the
exe file for the program.
Anyone else use this program or know anything about the virus????
After the scan, I had the program removed from my main computer but kept it installed on my
lap top because I love the program and my lap top doesn't have internet access for the trojan
to bother it.

[app103]

Exactly what Alphasort program are you referring to? Could you provide more information to identify it? Perhaps a link?

[moranacus]

Below is the website where I got the program:

http://appsapps.info/alphasort.php

[app103]

That would be one of my applications. And I assure you there is no trojan in it. (I am not skilled enough to write a trojan even if I wanted to  )

What you are seeing is a false positive.

Alphasort does not change any settings on your system or in any other applications, does not save any data to your registry, does not connect to the internet, can not phone home for any reason.

All it is, is a list box and entries are sorted by toggling the sort property off/on whenever you load a list or add anything to an existing list.

It's very simply designed and does nothing more than what you have seen it do.

[moranacus]

Thanks for the info!!!!
I know that you didn't do this!!!!
That trojan somehow got attached to your program from somewhere else.
I have a program called High Folders 2009 and they recently found an old
trojan that is just now being found with virus updates that somehow
got attached to this program and other programs that were created by others.
When I looked up for a description of this trojan it said the following:
A password stealing Trojan horse that logs keystrokes and steals information entered into certain banking web sites. The Trojan may also take screenshots of certain banking web pages in an attempt to collect passwords and other sensitive information.
The evil people are getting smart and are finding ways to corrupt other people's programs.

[app103]

Your antivirus is throwing off a false positive. You don't have a trojan in that file. Nothing attached itself to it. No matter what A-Squared is telling you about that file, it's wrong. Nothing corrupted your copy of the program.

Does A-Squared have anything within the application for uploading "infected" files to them to be checked and verified? If it does, please submit the file to them so they can fix the problem in their software.

I just uploaded my copy to Virus Total and let them scan it. It is throwing off some false positives in 3 different products: a-squared, eSafe, and Prevx.

My guess was because I had packed the file with UPX to make it smaller, but after unpacking it and uploading it again, there are still 2 different products (out of 43 different antivirus applications) that are still calling it malware, one of them being A-Squared and the other Ikarus. (weird)

If you would like to take a look at the report, you can view it here:

original packed file: http://www.virustota...48df84402-1243743604

unpacked file: http://www.virustota...9e6040246-1251740543

You can also upload the copy you have here and check it with all 43 different antivirus applications, yourself: http://www.virustotal.com

[moranacus]

Thanks again!!!!
I like the A-Squared program but programs that scan for malware tend to get false positives.
When I do a scan with AVAST, SuperAntivirus and TrojanHunter nothing shows up.
A-Squared also keeps saying that the BSPLAYER program that I'm using has medium
risk items but that doesn't mean anything either.
There is nothing wrong with that program.
HAVE A GREAT DAY AND THANKS FOR THE QUICK REPLIES!!!!

[app103]

Thank you for letting me know about this issue. 

[moranacus]

For your info the support staff for the A-Squared malware program released an update so it no long flags
AlphaSort with a TROJAN.

[app103]

I sent them a copy of the app and a link to this thread.

Glad to hear they straightened it out.

Thanks for letting me know.

[moranacus]

Your very welcome!!!!
HAVE A GREAT WEEKEND!!!!