Help - Search - Members - Calendar
Full Version: Trojan found while AE Update 0148067
Lavasoft Support Forums > Archived Topics > Archives: Resolved/Inactive Topics > AAW Anniversary Edition - Resolved/Inactive
Andre Braendli
Hello,
on most of my company workstations I have Norman Security Suite and Lavasoft Anniversary Edition installed. This works fine together, but yesterday I had a problem on one workstation when updating the AE version from 0148066 to 0148067 Norman detects the SO.dll as dangerous an set them in quarantine. Do you know this problem? I could not imagine that Lavasoft has Trojan in a download. I ask myself why other workstation do not detect a Trojan with this release 148067.
Thanks for an answer
[size="2"][/size] ohmy.gif
visitor
After 148.67, 149.00 was released, and today 149.01. Usually the def file is bigger, but 149.00 was 1mb smaller than 148.67. I would try another update and see if the problem persists.
LS CalamityJane
Are you using the enterprise version or the Plus or Pro? Or are you referring to our Ad-Aware technology which is used within the Norman Security Suite? I can't tell whether you have Ad-Aware from Lavasoft installed separate or with the Norman product.


In any case for company issues with our paid software, you can use the Support Center here to request assistance if this is interfering with our update (because no, we do not bundle malware into updates). The size is irrelevant.
http://www.lavasoft.com/support/supportcenter/

If you are using the free version of Ad-Aware AE, please be aware that is a violation of license terms as that software is available for personal use on home computers only. (and it is already included in the Normal Internet Security Suite so redundant if you are)

Norman's Security Suite product support is here:
http://www.norman.com/support/en-us

Anytime a program notifies you of malware in a legitimate program, you should submit the file to them for analysis in case it is a false detection. That is so they can examine it and fix the issue if it is.

For Norman AV their submission page is here:
http://www.norman.com/support/support_issu...ive/68518/en-us

If you ever encounter the same using our program and you think it is a false detection, you can submit a report here:
http://www.lavasoftsupport.com/index.php?showforum=93

Edit to clarify and add Norman links
Andre Braendli
QUOTE(visitor @ Jul 9 2009, 02:19 PM) *
After 148.67, 149.00 was released, and today 149.01. Usually the def file is bigger, but 149.00 was 1mb smaller than 148.67. I would try another update and see if the problem persists.

Thanks for your advise, but I also have the issue when I install the 149.01 via imports function. Each time when I start the update function in the AE Version Norman alerts with the SO.dll W32/Adload.gen.769765 .In the meantime several Pc's in my company that will automatically update the Lavasoft AE give now alert that there is a worm coming from the Lavasoft directory AllUsers/ApplicationData/Adaware. Now I ask myself is SO.dll really infected and why are several workstations immediatelly infected in the same way? Look please my attachement.

Thank you for your advise

Best Regards
André
LS CalamityJane
Would you please report that to Norman here:
For Norman AV their submission page is here:
http://www.norman.com/support/support_issu...ive/68518/en-us

Use this forum to report the detection so they can fix it:
http://www.norman.com/support/fp/en-us

No it is not an infected file. That is part of the Ad-Aware program
LS CalamityJane
I have submitted the file, but I still think it best if you also report it since you are a user of their AV


Thank you for your submission.

Norman will analyze the submitted file.

If it turns out to be a false positive, new virus signature files which correct this error will be published shortly.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.