Virus in Show Analyzer

[RonZimmerman]

I am running Norton Internet Security 2010 and SA v 1.0.58.782. Norton says it has a high threat virus. I am attaching a screen shot of the warning. It says the virus is named saregproxy.

[jgp32]

yes, Norton reports that as a virus, I get the same notification. There is definitely not a virus in the file, its a false positive. Just ignore it.

[jgp32]

one more thing, Norton is picking up that threat during a scan of compressed files, ie the .msi installation file in your downloads folder. You can probably delete the .msi after installation and the warnings will go away

[Jere_Jones]

As discussed in multiple threads, this is a false positive if you downloaded it directly from this site.

My recommendation is that you send the file to the vendor of the antivirus software so that they can updated their virus definitions.

Sincerely,
Jere

[RonZimmerman]

Thanks for the quick reply.

[enzominator]

A good place to check a file is VirusTotal - Free Online Virus and Malware Scan They check your file with 40+ virus checkers and provide you a report with detailed results, fantastic way to determine if your AV is generating a false positive.

[Sagebrush]

As of the latest (June 1, 2010) updates from AVG, SA 1.0 appears to install a verified virus infection. AVG says that it's name is "Trojan horse Generic2_c.WCD" Here's AVG's reply (note the last sentence):

AVG Research Lab has analyzed the file(s) you have sent from your AVG Virus Vault. Below you can find the results for each file. The final verdict on the file is either a correct detection or a false positive detection.

Further information about the verdicts are available at our website:
AVG Antivirus and Security Software - Result of AVG detection analysis

"C:\Program Files\Dragon Global\ShowAnalyzerSuite\SARegProxy.exe" - detection is correct

..............

Since I have the free version of AVG, it appears that I'm not able to request that they contact Dragon Global to address the problem.

To avoid issues with AVG continuing to flag this file, I'll continue using the a pre 1.0 version until the false virus detection issue is resolved. Sorry.

[spockers]

Originally Posted by Sagebrush

As of the latest (June 1, 2010) updates from AVG, SA 1.0 appears to install a verified virus infection. AVG says that it's name is "Trojan horse Generic2_c.WCD" Here's AVG's reply (note the last sentence):

AVG Research Lab has analyzed the file(s) you have sent from your AVG Virus Vault. Below you can find the results for each file. The final verdict on the file is either a correct detection or a false positive detection.

Further information about the verdicts are available at our website:
AVG Antivirus and Security Software - Result of AVG detection analysis

"C:\Program Files\Dragon Global\ShowAnalyzerSuite\SARegProxy.exe" - detection is correct

..............

Since I have the free version of AVG, it appears that I'm not able to request that they contact Dragon Global to address the problem.

To avoid issues with AVG continuing to flag this file, I'll continue using the a pre 1.0 version until the false virus detection issue is resolved. Sorry.

"Detection is correct." Ha! Sounds like a form letter/scripted answer. It's certainly not true. I used to use AVG and I simply added saregproxy to it's exceptions list with no problems. I stopped using it though, because it's rather resource-heavy. MS's free Security Essentials is much lighter, and has the added benefit of not going nuts about SA.