A virus or a trojan in CyberInstaller?

Again?! Yes, another customer of ours warned us that his antivirus thought to have found a trojan in a CyberInstaller archive.

I explained that this is only a FALSE POSITIVE some time ago, but now I want to replicate it, because it seems that many antivirus are always more paranoid and their heuristic scan is very aggressive, with the result of many false positive.

No, no trojans or any other kind of malware is contained in archives of our software, how it is demonstrated by the following logos:

"100% clean - no spyware, no adware, no viruses" by Softpedia

"Safe to install" certified by FindMySoft.com

that can be found in our Download page.

The warning from the antivirus is a false-positive, due to fact that CyberInstaller uses UPX to compress the size of the executables with a real time decompression in memory. This tool is often used by the most of the malware and so the heuristic scan from many antivirus find the UPX signature and "thinks" that the archive is malware. But it’s not!

I’m sorry if this has caused troubles. We are planning not to compress our software with UPX anymore in future releases, because of these false-positives that sometimes occur.

Monday, October 5th, 2009 : CyberInstaller Suite : No Comments

You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.