Trojan Horse

This section is now closed.

Audacity 1.2.x is now obsolete. Please use the current Audacity 2.0.x version.

The final version of Audacity for Windows 98/ME is the legacy 2.0.0 version.

Trojan Horse

Permanent link to this post Posted by finburke » Tue Jun 01, 2010 9:51 am

Attempts to download Audacity 1.2.x activate my North antivirus saftware with the folllowing message
"Norton Safe Web
Threat Report

Threats found: 1
Here is a complete list:
Threat Name: Trojan Horse
Location: http://switch.dl.sourceforge.net/project/ophcrack/ophcrack/3.3.1/ophcrack-win32-installer-3.3.1.exe"


Should this cause concern?
finburke
 
Posts: 1
Joined: Tue Jun 01, 2010 9:39 am

Re: Trojan Horse

Permanent link to this post Posted by Irish » Tue Jun 01, 2010 1:03 pm

That file found by Norton is not an Audacity file. You may have clicked on the wrong link somewhere.

The Audacity 1.2 installer is http://audacity.sourceforge.net/latest/audacity-win/audacity-win-1.2.6.exe

PO'L
________________________________________FOR INSTANT HELP: (Click on Link below)
* * * * Tips * * * * Tutorials * * * * 1.3 Quick Start Guide * * * * Audacity 1.3 Manual * * * * Audacity wiki * * * *
Irish
Forum Crew
 
Posts: 548
Joined: Sat Sep 05, 2009 9:25 pm
Location: Dublin, Ireland

Re: Trojan Horse

Permanent link to this post Posted by jazzpicker » Sat Sep 24, 2011 5:18 pm

I must have clicked the same "wrong link". Just finished formatting my computer to get rid of the trojan I picked up in the audacity site.
jazzpicker
 
Posts: 2
Joined: Fri Sep 23, 2011 6:05 pm

Re: Trojan Horse

Permanent link to this post Posted by Gale Andrews » Sat Sep 24, 2011 8:45 pm

Assuming you might have clicked the SourceForge "Alternative Download Links" on http://audacity.sourceforge.net/download/windows

I chose the switch.dl mirror on Sourceforge:
http://sourceforge.net/projects/audacit ... ror=switch

and scanned the Audacity executable in Avast! without finding any malware.

I guess though you have not used switch.dl.

In most cases you don't need to format your computer to remove trojans, just use an anti-virus program.

If you view your browser history and give us the web address of the URL you downloaded Audacity from, we can look at any action we could take.



Gale
________________________________________FOR INSTANT HELP: (Click on Link below)
* * * * * Tips * * * * * Tutorials * * * * * Quick Start Guide * * * * * Audacity Manual
Gale Andrews
Quality Assurance
 
Posts: 14615
Joined: Fri Jul 27, 2007 12:02 am

Re: Trojan Horse

Permanent link to this post Posted by jazzpicker » Sun Sep 25, 2011 12:48 am

Gale, thanks for the info . I understand that it isn't always necessary to format and reinstall after getting infected by a trojan but the phrase "in most cases" worries me a bit. I've found it's easier in the long run to make sure there is nothing on my computer that could cause problems later. I never trust a computer after an infection without formatting. I keep everything backed up so it wasn't a big deal. Again, thanks for your input and advice.
jazzpicker
 
Posts: 2
Joined: Fri Sep 23, 2011 6:05 pm

Re: Trojan Horse

Permanent link to this post Posted by Gale Andrews » Sun Sep 25, 2011 1:13 am

Again, we are not knowingly (or I believe unknowingly) serving trojans on audacity.sourceforge.net or on any Audacity-controlled sites that audacity.sourceforge.net links to.

Without the URL that you visited to download Audacity there is nothing we can do except repeat the advice only to use http://audacity.sourceforge.net/download/ . Even if you used that URL it is perfectly possible you got a "drive-by" virus from some other site you visited at the same time. Most anti-virus software should provide an option to continuously scan web traffic and alert you if a virus is detected (if of course the virus definitions are kept up-to-date).


Gale
________________________________________FOR INSTANT HELP: (Click on Link below)
* * * * * Tips * * * * * Tutorials * * * * * Quick Start Guide * * * * * Audacity Manual
Gale Andrews
Quality Assurance
 
Posts: 14615
Joined: Fri Jul 27, 2007 12:02 am

Re: Trojan Horse

Permanent link to this post Posted by seni143 » Tue Sep 27, 2011 4:52 am

m a file scanner specialist

what ever is in my knowledge is this that if some one scan a file on antiviruse's site online, after 50+ scans, dumb antiviruses suspect it as virus!

so there's nothing to worry in it, you should believe the Provider of software, if Microsoft is provider, we people do believe, then why not on Audacity which is a free software with options I've never seen in paid software's too

So if you think its a trojan better not to use it because no one forced you to do it.

Regards.
seni143
 
Posts: 4
Joined: Sun Sep 25, 2011 10:10 am

Re: Trojan Horse

Permanent link to this post Posted by steve » Tue Sep 27, 2011 4:15 pm

I've also got a lot of experience cleaning up virus and trojan damage, but my advice would be that if you have a reputable anti-virus product and it flags up a virus, then be very cautious and check it out thoroughly. Viruses and Trojans can cause a huge amount of damage if not attended to straight away, not only to your own machine, but to any other machine that your computer infects.

It's true that anti-virus products will sometimes flag up "false positives" (indicate that there is a problem when there isn't), but to my knowledge this has never happened with Audacity.

If anyone downloads Audacity from the official download page and receives a virus warning, then I would hope that they would immediately contact Audacity so that it can be properly investigated.
9/10 questions are answered in the FREQUENTLY ASKED QUESTIONS (FAQ)
steve
Senior Forum Staff
 
Posts: 34852
Joined: Sat Dec 01, 2007 11:43 am

Re: Trojan Horse

Permanent link to this post Posted by Gale Andrews » Wed Sep 28, 2011 1:13 am

seni143 wrote:what ever is in my knowledge is this that if some one scan a file on antiviruse's site online, after 50+ scans, dumb antiviruses suspect it as virus!

It may be possible that happens but one would hope a virus would be added to an antivirus definition as soon as it had been scanned and found positive, not merely because it has a large number of scans.

Internet Explorer 9 takes the default view that all downloads which as yet have not had many download counts according to Microsoft's database are suspicious, irrespective of the download source. So when we release 1.3.14 Beta it will be flagged by IE9 as potential malware and you will have to confirm you really want to download it.

As for viruses allegedly found in Audacity downloads, we get told about these several times a week at our "feedback" address. We do want to hear about them but most are false positives because the compressed Audacity installer for Windows looks a bit like a virus to some antivirus software. Most of the other reports are users who have already acquired drive-by viruses from other sites, possibly Audacity scam sites like Download-Audacity.com.


Gale
________________________________________FOR INSTANT HELP: (Click on Link below)
* * * * * Tips * * * * * Tutorials * * * * * Quick Start Guide * * * * * Audacity Manual
Gale Andrews
Quality Assurance
 
Posts: 14615
Joined: Fri Jul 27, 2007 12:02 am


Return to Windows



Who is online

Users browsing this forum: No registered users and 6 guests