Antivir, virus found in PWP50.exe

[Dieter Mayr]

After its update, my AV-program (Avira Antivir) claimed to have found a virus in PWP50.exe
PWP version is the actual download , version 5.0.1.10
Downloaded new, installed new, same found.
Virus name is TR/CryptXPACK.Gen3
I suppose it's a false alarm, but unfortunately you never know these days.

[ksinkel]

We have received a smattering of similar reports and are following up with the anti-virus vendor. We use Symantec (Norton) Antivirus here, updated to the latest version of the software and virus definition files. It reports no issues of any kind. I also tested with Avast, another anti-virus program, with the same result. So I believe this is a false positive.

Kiril

[den]

FYI... there are no issues as well on my system with 02-26-2011 latest version/definitions of Microsoft Security Essentials when specifically checking "...\Program Files\Digital Light & Color\..." with installed PWP5.0.1.10 folders and files

[swo]

I also get a virusalert when trying to open PWP50.EXE
I am using Kaspersky Internet Security 2010 (latest virusdefinitions) and it is reporting "HEUR:Trojan.Win32.Generic"

-Søren-

[bulrichl]

Same here: today Avira, my anti-virus software, reported the discovery of malware "TR/CryptXPACK.Gen3" in the file "pw50.exe".

Best regards, Bernd

[Dieter Mayr]

I have just received a report from Avira (Antivir AV-software) that it was a false alarm and they will remove the pattern that caused that problem in one of the next updates.

[mjdl]

It's actually a good idea for software developers to submit all their installers (and principal executables too, perhaps) before they release them to a web service like VirusTotal.com, where they'll be scanned by 40+ different anti-virus with the most recent signatures. False positives can then be dealt with before final release.

I just uploaded the recently updated PWPro installer to VirusTotal, see http://www.virustotal.com/file-scan/rep ... 1298920737 for the report. Nothing detected by 42 anti-virus based on today's signatures (Avira's anti-virus is called "Antivir", I think), so everything looks fine.

[ksinkel]

Thank you for the information and for closing this issue.

Kiril