FALSE ALARM -- Re: [omniORB] VIRUS ALERT: BackDoor-G2.cfg TrojanHorse detected in omniORB_280 _x86_win32.zip

Kelvin Lim kelvinlim@mailcityasia.com
Thu, 26 Oct 2000 08:14:12 +0800


 That was my speculation when I first read the post about the back door virus. These days, anti-virus software are too paraniod for their own good, not to mention greedy on memory.

I never use anti-virus products, waste of time and money ! 



--

On Wed, 25 Oct 2000 11:20:42   Michael J. Donahue wrote:
>
>
>
>Sorry All -
>
>It appears that McAfee had a bug in the definitions files that incorrectly
>reported a virus attached to the OMNIORB280_RTD.DLL.  After seeing Armin's
>e-mail I downloaded the 10 october 2000 version and the problem went away.
>
>This is the first time I've ever been bit by being carefull.  ;-)
>
>Thanks to Armin and Sai-Lai for taking the time to check this.
>
>- Mike
>
>
>
>
>
>
>Sai-Lai Lo <S.Lo@uk.research.att.com> on 10/25/2000 10:58:03 AM
>
>To:   Michael J. Donahue/MCLEOD@MCLEOD
>cc:   omniorb-list@uk.research.att.com
>Subject:  Re: [omniORB] VIRUS ALERT: BackDoor-G2.cfg Trojan Horse detected in
>      omniORB_280 _x86_win32.zip
>
>
>
>Hi! On receiving your email, I've download omniORB_280_x86_win32.zip from
>ftp.uk.research.att.com and have checked this file and the unpacked files
>using Norton Anti-Virus. This is using the latest virus information file.
>
>NOTHING SHOWS UP!
>
>Is this a false alarm or Norton is unable to detect this virus? By the way,
>what does "BackDoor-G2.cfg" do? I can only find reference to "BackDoor-G2".
>
>Sai-Lai
>
>>>>>> Michael J Donahue writes:
>
>> All -
>
>> After downloading a new update to my Anti-Virus sofware last night, I
>> detected the BackDoor-G2.cfg virus in the OMNIORB280_RTD.DLL from the
>> omniORB_280_x86_win32.zip file.
>
>> To make I then cleaned my system of the virus, and re-downloaded this zip
>> file.  Before the file was completely downloaded, McAfee detected the
>> same virus on the same file within the omniORB_280_x86_win32.zip file.
>
>> I'm very surprised noone else has caught this one, but I'm fairly sure it
>> has been present in the omniORB_280_x86_win32.zip file since at least
>> March 15th, 2000.
>
>> - Mike Donahue
>
>> McAfee VShield 4.0.3
>> Definitions:   4.0.4099
>> Date:               10/11/2000
>> Scan Engine:   4.0.70
>
>
>--
>Sai-Lai Lo                                   S.Lo@uk.research.att.com
>AT&T Laboratories Cambridge           WWW:   http://www.uk.research.att.com
>24a Trumpington Street                Tel:   +44 1223 343000
>Cambridge CB2 1QA                     Fax:   +44 1223 313542
>ENGLAND
>
>
>
>
>
>
>
>


Get your FREE Email at http://www.mailcityasia.com