WeatherPulse - it is malware?

Discussion in 'other anti-virus software' started by mvdu, Jan 27, 2010.

Thread Status:
Not open for further replies.
  1. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,151
    Location:
    PA
    Hi - AntiVir just detected the latest installation file for WeatherPulse as a trojan. WeatherPulse is a desktop weather program. I scanned it on VT, and to my surprise, 6 AVs detect it. But AntiVir isn't detecting anything while the program is running.

    So is WeatherPulse malware? You can find it at the Tropic Designs site:

    http://www.tropicdesigns.net/
     
  2. Ibrad

    Ibrad Registered Member

    Joined:
    Dec 8, 2009
    Posts:
    1,949
    Can you tell us what Avira detects it as?
     
  3. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,151
    Location:
    PA
    AntiVir says it is the TR/Dldr.Agent.5149621 Trojan.
     
  4. sded

    sded Registered Member

    Joined:
    Jun 4, 2004
    Posts:
    512
    Location:
    San Diego CA
    I am using it on 3 computers, and both Avast! 5 and MSE think Weather Pulse 2,2,4 build 4 and the installer are fine. Did it actually get downloaded via Tropic Designs, the Weather Pulse site? Only Authentium and F-Prot generated FPs with the executable version I am using when I sent it to Virus Total. It does install in Program Data instead of Program Files, which is a bit unusual, but I think it is avoiding possible problems from an earlier version set.
     
    Last edited: Jan 27, 2010
  5. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,151
    Location:
    PA
    Yep, downloaded it from that site.
     
  6. Ibrad

    Ibrad Registered Member

    Joined:
    Dec 8, 2009
    Posts:
    1,949
  7. JRViejo

    JRViejo Global Moderator

    Joined:
    Jul 9, 2008
    Posts:
    20,968
    Location:
    U.S.A.
    FYI. Just downloaded WeatherPulse2244.exe from their site and ran it by VirusTotal (9/41) and Jotti's Malware Scan (2/20). Proceed with caution!

    Because legit sites, such as Softpedia and SnapFiles do host this program, it could be a False Positive. Agree with Ibrad to submit the file as soon as possible.

    JR
     
  8. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,151
    Location:
    PA
    Thanks, all - I have posted at the AntiVir forums.
     
  9. the Tester

    the Tester Registered Member

    Joined:
    Jul 28, 2002
    Posts:
    2,854
    Location:
    The Gateway to the Blue Hills,WI.
    I used Weather Pulse in the past.
    I will be surprised if this isn't a false positive.
     
  10. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,151
    Location:
    PA
    Got an answer from Avira; it's a false positive.
     
  11. cruelsister

    cruelsister Registered Member

    Joined:
    Nov 6, 2007
    Posts:
    977
    Location:
    Paris
    I formerly used Avira and have used WP for years. I guess it was about 2 years ago that I reported the FP to Avira numerous times. Amazing that they still haven't taken any action.
     
Loading...
Thread Status:
Not open for further replies.