[false positive] Trojan found in START.EXE

Bug #85130 reported by vasco-t
8
Affects Status Importance Assigned to Milestone
Ubuntu
Invalid
Undecided
Unassigned

Bug Description

Just downloaded the Ubuntu Desktop 6.10 ISO and burnt it on to a CD.

I loaded the CD back into my drive so that I could browse it, (Win 2k), and read any release/install/setup notes and my anti-virus programme immediately warned me of an virus detected in START.EXE details below;

INCIDENT: Virus detected: Trj/Agent.EBT
NOTIFIED BY : Antivirus protection
DATE-TIME : 02/14/07 15:43:29
RESULT : Blocked
ADDITIONAL INFO: Path: i:\start.exe

My I: drive is the CD drive

Will there be a clean START.EXE to replace this one?

(First submission of this bug failed as I tried to fill in the package name but it rejected Ubuntu Desktop 6.10 and the SELECT button gave me no choices)

Cheers

Revision history for this message
David Morris (dave-greenacre) wrote :

what anti virus software are you using out of interest and I'll see if I can recreate this at work.

Revision history for this message
vasco-t (alex-taylor-span) wrote : RE: [Bug 85130] Re: Trojan found in START.EXE

Hello Dave,

I am using Panda Internet Secure 2007 (11.00.02) with TruePrevent

Cheers,
Alex

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>]On Behalf Of David Morris
Sent: 14 February, 2007 17:15
To: <email address hidden>
Subject: [Bug 85130] Re: Trojan found in START.EXE

what anti virus software are you using out of interest and I'll see if I
can recreate this at work.

--
Trojan found in START.EXE
https://launchpad.net/bugs/85130

Revision history for this message
Thomas Hotz (thotz-deactivatedaccount) wrote : Re: Trojan found in START.EXE

> Will there be a clean START.EXE to replace this one?

Could you please try another anti-virus solution or online scanner to confirm that this is _really_ a virus.
Have you downloaded the *.iso from http://www.ubuntu.com/products/GetUbuntu/download?action=show&redirect=download?

Many users use the desktop installer. I think this could be a "false positive".

Revision history for this message
vasco-t (alex-taylor-span) wrote : RE: [Bug 85130] Re: Trojan found in START.EXE

Hello Thomas

I have tried an online scan using Panda Active Scan (http://www.pandasoftware.com/download/utilities/?sitepanda=empresas then at bottom of page click for active scan), and it finds the same Trojan. See attached report.

Yes I did load the ISO from http://www.ubuntu.com/products/GetUbuntu/download?action=show&redirect=download?

Hope this helps, and thanks for the response.

Cheers,
Alex

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>]On Behalf Of Thomas Hotz
Sent: 16 February, 2007 15:46
To: <email address hidden>
Subject: [Bug 85130] Re: Trojan found in START.EXE

> Will there be a clean START.EXE to replace this one?

Could you please try another anti-virus solution or online scanner to confirm that this is _really_ a virus.
Have you downloaded the *.iso from http://www.ubuntu.com/products/GetUbuntu/download?action=show&redirect=download?

Many users use the desktop installer. I think this could be a "false
positive".

--
Trojan found in START.EXE
https://launchpad.net/bugs/85130

Incident Status Location

Virus:Trj/Agent.EBT Not disinfected I:\start.exe

Revision history for this message
Thomas Hotz (thotz-deactivatedaccount) wrote : Re: Trojan found in START.EXE

Try another scanner beside Panda. Test the start.exe here: http://virusscan.jotti.org/

Revision history for this message
vasco-t (alex-taylor-span) wrote : RE: [Bug 85130] Re: Trojan found in START.EXE

Hi,
I tried the http://virusscan.jotti.org/ test and all passed OK
I also downloaded a couple of others and they were OK too so I must conclude that Panda is seeing something that it alone doesn't like.

I have forwarded the retails to Panda technical support and asked them foe help.
I will post any useful replies here

Thanks,

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>]On Behalf Of Thomas Hotz
Sent: 17 February, 2007 22:02
To: <email address hidden>
Subject: [Bug 85130] Re: Trojan found in START.EXE

Try another scanner beside Panda. Test the start.exe here:
http://virusscan.jotti.org/

** Changed in: Ubuntu
       Status: Unconfirmed => Needs Info

--
Trojan found in START.EXE
https://launchpad.net/bugs/85130

Revision history for this message
Thomas Hotz (thotz-deactivatedaccount) wrote : Re: Trojan found in START.EXE

Thank you. Hopefully the Panda guys can fix this soon.

Ubuntu CDs will _never_ contain any viruses, trojans and things like that.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.