Print Page | Close Window

Worm.HLLM.BlackWorm in OSSMTP.dll ?

Printed From: www.exp-systems.com
Category: PDF reDirect
Forum Name: Using PDF reDirect
Forum Discription: Questions and Comments on using PDF reDirect Freeware and Pro
URL: http://www.exp-systems.com/Forum_exp/forum_posts.asp?TID=333
Printed Date: 12 Dec 24 at 1:54AM


Topic: Worm.HLLM.BlackWorm in OSSMTP.dll ?
Posted By: kamil
Subject: Worm.HLLM.BlackWorm in OSSMTP.dll ?
Date Posted: 21 Jun 07 at 5:53AM
Hello,

I have installed PDF reDirect from download.com:
http://www.download.com/3001-6675_4-10539357.html

Antivirus on-line scanner from www.mks.com.pl finds
Worm.HLLM.BlackWorm in
c:\Program Files\PDF reDirect\OSSMTP.dll

I have scanned computer, because there were problems with slow work.
I have read this topic:
http://www.exp-systems.com/forum_exp/forum_posts.asp?TID=146&PN=1

but there is nothing about Worm.HLLM.BlackWorm

Best regards,
Kamil





Replies:
Posted By: Michel_K17
Date Posted: 21 Jun 07 at 11:16PM
Hi Kamil,

    PDF reDirect is scanned for viruses (and worms) by myself before being released. The web site "download.com" also scans the files to make sure they are OK.

    I suspect that the scan from www.mks.com.pl is a "false positive". That means that they think there is a problem, even though there is not one. I would recommend you try a different virus scanner such as "Norton", NOD32 (my favorite), or Trend Micro and see if you continue having the report of a problem.

   Please let me know if you continue having difficulties, and I can see what I can do to work with MKS from Poland. However, my Polish is nearly non-existant, so I am not sure that I will be able to resolve the issue with them.

    Thanks for letting me know!



-------------
Michel Korwin-Szymanowski
EXP Systems LLC


Posted By: kamil
Date Posted: 22 Jun 07 at 4:08AM
Hi Michel,

Thank you for your quick and "positive" answer.
I scanned PDF reDirect files with
- avast 4.7 for Windows SB 2003
- on-line scanner at www.kaspersky.pl (http://www.kaspersky.pl/virusscanner.html).
- and ClamWin antivirus (http://sourceforge.net/projects/clamwin)
-
None of them did not find virus in PDF reDirect files including OSSMTP.DLL.

I hope you are right that it was "false positive".
Probably I send my previous post to quickly and it was false alarm - I am sorry - I trust MKS Scanner and on last Thursday I was almost sure that I install a trojan in my company.

Best regards,
Kamil


Posted By: Michel_K17
Date Posted: 23 Jun 07 at 12:23AM
Thanks for the update. Please let me know if you continue experiencing any difficulties.



-------------
Michel Korwin-Szymanowski
EXP Systems LLC


Posted By: Slartibartfast
Date Posted: 15 Jul 08 at 10:15AM
I received a similar warning today.
 
Avira AntiVir reported that OSSTMP.dll "Contains detection pattern of the worm WORM/Israz.86016"
 
 


Posted By: Michel_K17
Date Posted: 15 Jul 08 at 11:02PM
Hi,

   Have you seen the post [ http://www.exp-systems.com/forum_exp/forum_posts.asp?TID=146&PN=1 - here ]? It talks about this quite a bit. Basically, some older, out of date, or foreign anti-virus vendors flag this DLL incorrectly.

   However, all of the major anti-virus software such as NOD32, Norton, McAfee say that this file is safe (which it is).

   This DLL is a component I use for the "Pro" version which I purchased from http://www.ostrosoft.com - www.ostrosoft.com . If you are using PDF reDirect freeware, you can delete this file: it is used only in the Pro version to add the ability to send your PDF files by e-mail.

    I hope that helps,

Michel


-------------
Michel Korwin-Szymanowski
EXP Systems LLC


Posted By: Slartibartfast
Date Posted: 16 Jul 08 at 12:18PM
Thanks for the link and the info.  I searched for "worm" and got no hits.  I will delete the file for now, but perhaps you can get Avira to fix their detections.  AntiVir is actually rated as one of the best antivirus programs available http://www.anti-malware-test.com/ - here .


Posted By: Michel_K17
Date Posted: 16 Jul 08 at 1:06PM
Hi,

   Thanks for the update. I contacted Avira last night and submitted a "false positive" report with them. They said that they will investigate and get back to me, hopefully soon.

   Cheers!



-------------
Michel Korwin-Szymanowski
EXP Systems LLC


Posted By: Michel_K17
Date Posted: 16 Jul 08 at 1:08PM
Hi,

   Just got a reply from Avira. They reported the package as "clean" [ http://analysis.avira.com/samples/details.php?uniqueid=g8XpG96WnntNbXLD8vOnJFAVOBIcwER1&incidentid=173813 - here ]. They made no mention of the DLL, so I asked them for more info, and confirmation that they will fix their definition file.

   Cheers!



-------------
Michel Korwin-Szymanowski
EXP Systems LLC


Posted By: Michel_K17
Date Posted: 17 Jul 08 at 10:25AM
I just received the following e-mail from Avira. I think this says it all. Smile
----------------------------------------
Dear Sir or Madam,


Thank you for your recent inquiry.

We could not find a virus in the attachment you have sent us.
The alert you have got was a false positive. That false positive will not be longer detected by AntiVir with the current VDF.

--
Freundliche Gruesse / Best regards
Avira GmbH

Andreas Pohl
First Level Support

Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Internet: http://www.avira.com - http://www.avira.com



-------------
Michel Korwin-Szymanowski
EXP Systems LLC


Posted By: vgorKys
Date Posted: 25 Aug 10 at 8:02AM
Hi!
I had the same problem with a 'not found' virus when I used Avira. It's a good antivirus, but maybe you should try another option too. I recommend Avast, because is the one I'm using now, but you can find useful information about antiviruses comparison and problems here: www.best-antivirus.co
It's a free reviews and downloads site.

Good luck!


Posted By: Michel_K17
Date Posted: 26 Aug 10 at 12:11AM
Thanks for the tip.

-------------
Michel Korwin-Szymanowski
EXP Systems LLC



Print Page | Close Window