rejetto forum

Kaspersky antivirus 2009 detects HFS as virus

youngbucks · 27 · 20005
« previous next »
Pages: 1 2

0 Members and 1 Guest are viewing this topic.

Offline ingo

  • Occasional poster
  • *
    • Posts: 4
    • View Profile
Reply #15 on: July 27, 2009, 10:19:17 AM
This morning Avira (http://www.avira.com) detected a virus in the actual version an in the beta version of hfs. The original message reads:
Die Datei 'D:\_install\_Util\_www\http_Server\hfs242.exe'
enthielt einen Virus oder unerwünschtes Programm 'APPL/HTTPFileServ.1' [program].
I downloaded (all) versions of hfs from rejetto directly.
As Kaspersky found a virus as well, we have to ask the author, Massimo Melina, to remove the critical code.

Offline parade

  • Tireless poster
  • ****
    • Posts: 138
    • View Profile
Reply #16 on: July 27, 2009, 11:30:52 AM
Quote from: ingo on July 27, 2009, 10:19:17 AM
Die Datei 'D:\_install\_Util\_www\http_Server\hfs242.exe'
enthielt einen Virus oder unerwünschtes Programm 'APPL/HTTPFileServ.1' [program].[/color]
As Kaspersky found a virus as well, we have to ask the author, Massimo Melina, to remove the critical code.
Why are you wondering if you download a HTTP-Server and you Antivirus program says, that it is a HTTP-Server?

Offline ingo

  • Occasional poster
  • *
    • Posts: 4
    • View Profile
Reply #17 on: July 27, 2009, 11:35:53 AM
Maybe there is something wrong with the version on the server. And maybe some other virus on the server or on the compiling computer adds something to hfs.exe
So it is not a bad idea for Massimo Melina to check it and to tell us, if everything is o.k.

Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile
Reply #18 on: July 27, 2009, 11:44:20 AM
There is no critical code in HFS
Your antivirus tells you simply that HFS connects to Internet, that which is potentially risky.

APPL/HTTPFileServ = APPLICATION/HTTP FILE SERVER = HFS

Your message is a recurring message, as the message of some antiviruses programs.   :D

Performs a search on the forum ... you'll see.  ;)

eg:

http://www.rejetto.com/forum/index.php?topic=5991.msg1044195;topicseen#msg1044195

http://www.rejetto.com/forum/index.php?topic=7256.0

http://www.rejetto.com/forum/index.php?topic=6318.0

....  ;D


EDIT:

I use Avira Premium Security Suite, which did not mention anything about HFS
 
« Last Edit: July 27, 2009, 12:03:50 PM by SilentPliz »

Offline TSG

  • Operator
  • Tireless poster
  • *****
    • Posts: 1935
    • View Profile
    • RAWR-Designs
Reply #19 on: July 27, 2009, 01:03:13 PM

Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile
Reply #20 on: July 27, 2009, 01:06:33 PM
Mea culpa, I had never read this one!  :-[ :D

Offline ingo

  • Occasional poster
  • *
    • Posts: 4
    • View Profile
Reply #21 on: July 27, 2009, 02:06:42 PM

Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile
Reply #22 on: July 27, 2009, 03:15:35 PM
   
You should not just be afraid of what is written in red colour, you should also read the content of messages. ;)
Some are more explicit than others:

not-a-virus: Server-FTP.Win32.SFH

What has changed between 2 versions of HFS?

The date of publication, among others.
   
hfs_2.2f_242.exe does not exist ... It's you who have renamed the executable?

Otherwise the two links you have posted, show almost the same things.


You will notice that many anti virus don't report anything ... ineffectiveness or wisdom? ;)
« Last Edit: July 27, 2009, 03:56:22 PM by SilentPliz »

Offline ingo

  • Occasional poster
  • *
    • Posts: 4
    • View Profile
Reply #23 on: July 27, 2009, 04:11:48 PM
Yes, I have changed the names. And you are right: The results of the anti virus scanners often seem to be exact but lack a deeper explanation.

By the way. The Author just stated in an e-mail that everything is fine and free of any virus. He complained about the bad working anti virus progs as well.

I hope the antivirus guys will learn soon to throw no wrong warnings regarding HFS and notice that this is a great http-server.

Offline MarkV

  • Tireless poster
  • ****
    • Posts: 764
    • View Profile
Reply #24 on: July 28, 2009, 09:18:03 AM
Quote
I hope the antivirus guys will learn soon to throw no wrong warnings regarding HFS and notice that this is a great http-server.
You wish.
http://worldipv6launch.org - The world is different now.

Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13510
    • View Profile
Reply #25 on: July 28, 2009, 02:29:40 PM
please, kaspersky users report your problem at
http://forum.kaspersky.com/index.php?showtopic=13881

Guest

  • Guest
Reply #26 on: August 05, 2009, 04:39:42 PM
Update 09.08.2009

Avira v. 8.02.00.240 detected a "unwanted program" (category: Maleware) in the actual version 2.2f of hfs.

The original message reads:
"Maleware"
"hfs.exe wurde ein Virus oder unerwünschtes Programm 'APPL/Agent.572928' [program] gefunden"
NO VIRUS !!!
Avira Filepath contains: "\...\hfs.exe:Zone.Identifier" ???

This happens if " Search for APPL" (Applications) is activated.
And it is maybe not a false alarm because "APPL-warning" is defined as "... APPL could maybe include a risk".

" SilentPliz is right.
... Your antivirus tells you simply that HFS connects to Internet, that which is potentially risky.
APPL/HTTPFileServ = APPLICATION/HTTP FILE SERVER = HFS"

bye

Pages: 1 2