UE 32bit flagged by AV on Vista 32 SP2/Symantec 12

Post Reply
therumour
Posts: 7
Joined: Tue Aug 07, 2007 4:01 am

UE 32bit flagged by AV on Vista 32 SP2/Symantec 12

Post by therumour »

Since 4.5 (and now 4.3 thru 4.7) Symantec is flagging UE with Backdoor.Greybird. Even with exclusions. it gets flagged. In fact totalvirus.com has 6 of 33 scanners flag UE.exe for some risk:

Agnitum Packed/PECompact 20140521
Bkav HW32.CDB.Ffa5 20140521
Jiangmin TrojanSpy.Banbra.up 20140521
McAfee Artemis!B344FE097CFB 20140522
McAfee-GW-Edition Artemis!B344FE097CFB 20140522
Symantec Backdoor.Graybird 20140522

How can I use Usenet Explorer? :?:

-therumour
alex
Posts: 4514
Joined: Thu Feb 27, 2003 5:57 pm

Re: UE 32bit flagged by AV on Vista 32 SP2/Symantec 12

Post by alex »

PE compact is the executable compressor I'm using to compress the executable, it is not more than zipping or raring.

Try uncompressed 32 bit version http://www.usenetexplorer.com/download.htm

The direct link:

http://www.usenetexplorer.com/ue47reg32u.zip

Is it ok?

It just means Symantec started targeting all programs compressed with this particular executable compressor (maybe).

Did you get my email reply yesterday 14 hours ago with the link above? Your post on the forum is from about 9 hours ago, 5 hours after my reply.
therumour
Posts: 7
Joined: Tue Aug 07, 2007 4:01 am

Re: UE 32bit flagged by AV on Vista 32 SP2/Symantec 12

Post by therumour »

Alex,

Yes, sorry, missed your email. Last attempt browsed archive with 7Zip and UE.exe dragged into destination folder. So far SAV is quiet...

Thanks,

-Vince
alex
Posts: 4514
Joined: Thu Feb 27, 2003 5:57 pm

Re: UE 32bit flagged by AV on Vista 32 SP2/Symantec 12

Post by alex »

Are you sure you had the latest symantec update?

I had an email from another user 3 days ago:

"I have the 32 bit version. I contacted Norton and they kept “UE” in quarantine. They changed that and now I can use “UE” as before. But I do not understand what is happening. It began after I updated to 4.7. There was no problem with the earlier versions."
Post Reply