Hello, everyone.

Ad-Aware (now the "Anniversary Edition) reported a file to me as a "suspicious" file.

It actually came with a windows theme-changing program, which is called "Visual Styler" by a small company called "Auslogics". They had it on their web site, but it seems to have been withdrawn. At least it I cannot find it there anymore listed there anymore.

A search engine will show a lot of results, however, because it seems to have been licensed to computing magazines as well (saw it several times on magazine discs).


The relevant passages of the log file seem to be this:



I've tried to upload the log file here, hopefully it will work (I don't do this regularly).

I've also tried to upload the file itself, in a compressed form (via .zip format - use 7zip for that).


I'd like to know whether this was really dangerous or not, as a small feedback. Because it is wasn't dangerous, then I'd like to have my program working again. Otherwise I must seek an Alternative.


Regards,

Alrik

Hi AlrikFassbauer !

We will investigate this and If it turns out to be a FP it will be removed.

Thanks for your report.

Albin

Lavasoft Malware Labs

Well, now I had a really hard time logging in here ... - My Opera 9.64 browser just didn't let me to !

Considering this, I had similar problems with a few other forums before ... And then it was because of the Cookies.

But - even after deleted the Cookies of this site here from within Opera, the browser didn't let me in !

I'm posting now with the help of Mozilla Firefox ... at least THAT works !


Okay, what I originally wanted is just ask what happened to this seemingly false positive. Ad-Aware still deletes the file, thus making the program unusuable (just a few seconds ago again, as I did a new test run/scan of it).

I'd like to know whether this is a real threat or just a false positive ?

Hi!

The file indicates suspicious behavior and is linked to the Win32.Backdoor.Hupigon family. The file is also detected by several other vendors. You can choose to upload the file to http://www.virustotal.com to see the result.

Thanks

Albin

Lavasoft Malware Labs

Okay, I see.

Have you contacted the developers ? The complete program was sold as commercial software, as far as I know. I think it would be a good idea to inform them.