WeatherPulse - it is malware?

Discussion in 'other anti-virus software' started by mvdu, Jan 27, 2010.

Thread Status:
Not open for further replies.
  1. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    Hi - AntiVir just detected the latest installation file for WeatherPulse as a trojan. WeatherPulse is a desktop weather program. I scanned it on VT, and to my surprise, 6 AVs detect it. But AntiVir isn't detecting anything while the program is running.

    So is WeatherPulse malware? You can find it at the Tropic Designs site:

    http://www.tropicdesigns.net/
     
  2. Ibrad

    Ibrad Registered Member

    Joined:
    Dec 8, 2009
    Posts:
    1,972
    Can you tell us what Avira detects it as?
     
  3. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    AntiVir says it is the TR/Dldr.Agent.5149621 Trojan.
     
  4. sded

    sded Registered Member

    Joined:
    Jun 4, 2004
    Posts:
    512
    Location:
    San Diego CA
    I am using it on 3 computers, and both Avast! 5 and MSE think Weather Pulse 2,2,4 build 4 and the installer are fine. Did it actually get downloaded via Tropic Designs, the Weather Pulse site? Only Authentium and F-Prot generated FPs with the executable version I am using when I sent it to Virus Total. It does install in Program Data instead of Program Files, which is a bit unusual, but I think it is avoiding possible problems from an earlier version set.
     
    Last edited: Jan 27, 2010
  5. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    Yep, downloaded it from that site.
     
  6. Ibrad

    Ibrad Registered Member

    Joined:
    Dec 8, 2009
    Posts:
    1,972
  7. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    98,052
    Location:
    U.S.A.
    FYI. Just downloaded WeatherPulse2244.exe from their site and ran it by VirusTotal (9/41) and Jotti's Malware Scan (2/20). Proceed with caution!

    Because legit sites, such as Softpedia and SnapFiles do host this program, it could be a False Positive. Agree with Ibrad to submit the file as soon as possible.

    JR
     
  8. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    Thanks, all - I have posted at the AntiVir forums.
     
  9. the Tester

    the Tester Registered Member

    Joined:
    Jul 28, 2002
    Posts:
    2,854
    Location:
    The Gateway to the Blue Hills,WI.
    I used Weather Pulse in the past.
    I will be surprised if this isn't a false positive.
     
  10. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    Got an answer from Avira; it's a false positive.
     
  11. cruelsister

    cruelsister Registered Member

    Joined:
    Nov 6, 2007
    Posts:
    1,649
    Location:
    Paris
    I formerly used Avira and have used WP for years. I guess it was about 2 years ago that I reported the FP to Avira numerous times. Amazing that they still haven't taken any action.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.