Build Your Own Arcade Controls Forum

Main => Software Forum => Topic started by: BrianAg95 on July 25, 2014, 06:13:55 pm

Title: Romlister virus?
Post by: BrianAg95 on July 25, 2014, 06:13:55 pm
Norton 360 just quaranteened romlister when I tried to run it.... 

Anyone seen this?
Title: Re: Romlister virus?
Post by: drventure on July 25, 2014, 06:21:38 pm
I have an older version, and I use NOD32, but I've never had any issues with Romlister.

What ver are you on?
Title: Re: Romlister virus?
Post by: Slippyblade on July 25, 2014, 06:27:25 pm
I trust Norton about as far as I can throw my car...  Did you run it past any other scans or just the one?

Grab the exe file and run it past https://www.virustotal.com/ (https://www.virustotal.com/) - that tends to be pretty reliable.
Title: Re: Romlister virus?
Post by: BrianAg95 on July 25, 2014, 06:29:35 pm
romlister_029

Just installed the new norton a few weeks ago, and had not run romlister since then.  I had no issues with the old version of norton seeing it as a virus.  Weird.  Probably chalk it up to norton, just wanted to share the info...
Title: Re: Romlister virus?
Post by: JDFan on July 25, 2014, 06:30:09 pm
Norton 360 just quaranteened romlister when I tried to run it.... 

Anyone seen this?

Probably a False Positive -- figure Romlister does some things that might lead AV software into thinking it is malicious due to the way it works.
Title: Re: Romlister virus?
Post by: NOP on July 27, 2014, 10:57:31 am
As the author of romlister, I can assure you I am not attempting to do anything malicious with your machine.  If there is a virus in there it would have to be some kind of injection-during-compile attack on visual studio.  (that's actually a pretty neat trick now that I think about it)

Anyway, I publish the source code on the romlister website too- if you really want to make sure you're virus free you can always build your own.

edit:
I pushed release 29 onto jotti's malware scan site.  Someone had done it before me, so here's the permalink with the results:
http://virusscan.jotti.org/en/scanresult/76d4132fcf5dba06ddbb1bfedcd1ef62ebf96eaf/89e69cf937498931757135006d019a85a4502f70 (http://virusscan.jotti.org/en/scanresult/76d4132fcf5dba06ddbb1bfedcd1ef62ebf96eaf/89e69cf937498931757135006d019a85a4502f70)

I don't know what "PUA.Win32.Packer.Armadillo-59" but since clam is the only one finding anything, I'm guessing it's a falsey.