dadkins
Can you do Blu?
Premium,MVM
join:2003-09-26
Hercules, CA
 ·Comcast
| reply to davidnason
Re: PestPatrol says: eAcceleration/StopSign are Clean!
Then why when one goes to this site...
and one clicks on the "Scan Now" button, they still download a trojan(As reported by Kaspersky Labs?
--
Nuke 'em all, let God sort 'em out. |
|
b11ngO0
join:2004-08-02
Canada
| Re: PestPatrol says: eAcceleration/StopSign are Cl
said by dadkins  :
Then why when one goes to this site...
and one clicks on the "Scan Now" button, they still download a trojan(As reported by Kaspersky Labs?
 ? |
|
dadkins
Can you do Blu?
Premium,MVM
join:2003-09-26
Hercules, CA
·Comcast
| reply to dadkins
Re: PestPatrol says: eAcceleration/StopSign are Clean!
It seems that RAV doesn't like it either. 
--
Nuke 'em all, let God sort 'em out. |
|
b11ngO0
join:2004-08-02
Canada
| Re: PestPatrol says: eAcceleration/StopSign are Cl
Not only did I get a virus from the spyware scan. But I couldn't repair with Avast !
Boo. Hiss. 
Now I gotta delete this account.
Peace.
b11ng00 |
|
davidnason
Premium
join:2004-08-04
Poulsbo, WA
2 edits | reply to dadkins
Re: PestPatrol says: eAcceleration/StopSign are Clean!
said by dadkins :
Then why when one goes to this site...
and one clicks on the "Scan Now" button, they still download a trojan(As reported by Kaspersky Labs?
dadkins: I'm sure you've read the other topics on this forum in which a number of others here have already noted that PestPatrol, and subsequently others, had previously labeled the stub download component of eAcceleration's installer as a trojan. That is, of course, what you're seeing. And that is part of what PestPatrol is now saying is clean.
b11ng00: same answer - stop-sign_stp.exe (internal module name "wren") is the stub component being identified in your test.
As I said in an earlier posting, I was unwilling to "get around" that labelling by renaming/rebuilding the component, although it would have worked, because it might seem as if we were trying to "pull something". I opted to wait until it had been validated by an objective third-party (I think everyone would agree that PestPatrol meets that criterion). Now that it has been validated as "clean", we can rebuild it.
BTW, I have also offered to release the source to this and similar components.
--
David Nason
CTO
eAcceleration Corporation
davidnason@eacceleration.com |
|
SnowyOne
Premium
join:2003-04-05
Kailua, HI
·RoadRunner Cable
 ·Clearwire Wireless
1 edit | "(I think everyone would agree that PestPatrol meets that criterion)."
Me thinks an answer to my question above is warranted.
edit: sentence structure issue.
--
Dave said "By the way, 4294967295 is just another way to write -1".
|
|
davidnason
Premium
join:2004-08-04
Poulsbo, WA
1 edit | said by SnowyOne :
"(I think everyone would agree that PestPatrol meets that criterion)."
Me thinks an answer to my question above deserves a response.
SnowyOne - all of them, of course. We've already approached many, and will initiate discussion with all as we find them.
PestPatrol was the first, as they seem to be a common source of information for many other entities. They are also a major component of COAST, to which we are also applying.
David Nason
CTO
eAcceleration Corporation
davidnason@eacceleration.com |
|
dadkins
Can you do Blu?
Premium,MVM
join:2003-09-26
Hercules, CA
·Comcast
| reply to davidnason
Please correct me if I am wrong, but isn't that *YOUR* downloader? From *YOUR* website(s)?
Is it not part of *YOUR* online scan?
That makes three websites that are connected to your company that this "Item" is downloadable from. Not good.
Here's a thought...disinfect/kill/replace the downloader that is being used for your online scan. Also, if you read towards the end of the other thread, you will see that the uninstaller that is being used by your company needs some serious work. Just ask novaflare what get's left behind.
I'm sorry, but you haven't convinced me that you have "Cleaned Up Your Act" yet.
Good luck!
--
Nuke 'em all, let God sort 'em out. |
|
SnowyOne
Premium
join:2003-04-05
Kailua, HI
·RoadRunner Cable
·Clearwire Wireless
| reply to davidnason
"PestPatrol was the first, as they seem to be a common source of information for many other entities."
OK, PP was your first. If that were my question that would be an excellent answer. "All of them" doesn't speak to my original question either. You can start with who is "Second" if that helps.
--
Dave said "By the way, 4294967295 is just another way to write -1". |
|
davidnason
Premium
join:2004-08-04
Poulsbo, WA
| reply to dadkins
said by dadkins :
Please correct me if I am wrong, but isn't that *YOUR* downloader? From *YOUR* website(s)?
said by davidnason :
dadkins: I'm sure you've read the other topics on this forum in which a number of others here have already noted that PestPatrol, and subsequently others, had previously labeled the stub download component of eAcceleration's installer as a trojan. That is, of course, what you're seeing. And that is part of what PestPatrol is now saying is clean.
said by dadkins :
Here's a thought...disinfect/kill/replace the downloader that is being used for your online scan. Also, if you read towards the end of the other thread, you will see that the uninstaller that is being used by your company needs some serious work. Just ask novaflare what get's left behind.
dadkins: thanks for the suggestion; it will be replaced soon - but there is nothing to disinfect. If you won't believe PestPatrol, I'll refer you to the same thread you referenced - read the significant number of posts by Eric Howes (eburger68) and Keith2468 where they describe the downloader as an installer component that does not fit the definition of "trojan downloader". By the way, on the same thread it was observed that using Spybot or AdAware to remove eAcceleration components is certainly likely to hamper a complete uninstall. And you forgot to mention that as a result of the uninstall, 8 registry entries were left - that's all that was left.
David Nason
Chief Technology Officer
eAcceleration Corporation
davidnason@eacceleration.com |
|
SnowyOne
Premium
join:2003-04-05
Kailua, HI | Are you responding to questions/concerns chronologically or selectively?
--
Dave said "By the way, 4294967295 is just another way to write -1". |
|
dadkins
Can you do Blu?
Premium,MVM
join:2003-09-26
Hercules, CA
·Comcast
| reply to davidnason
Ok, eburger68 has a bigger set than I do, Thanks for the writeup Eric!
davidnason, whether the downloader(bad name) is or is not the Wren trojan, several reputable antivirus company's programs see it as being infected...it would be a good idea to change it.
Your company's past practices have put a damper on the possibility of your software being installed on my machine. I'm fairly certain that others share my concerns.
Keep at it though, it is always good to see a software company improve design/practices.
David
--
Nuke 'em all, let God sort 'em out. |
|
William Mc
Premium
join:2004-07-27
Washougal, WA
| reply to davidnason
I don't think so and no thanks, Spybot S&D says its a spybot, Spybot S&D hasn't changed with the last update.
--
Ground Control, SRS(DW4000), G11 1370, BE 4.2.1.10 |
|
