Threaded Mode | Linear Mode

Nige_40 · (This post was last modified: 07-29-2012 08:03 PM by Nige_40.)

Hi all.

I ran a scan with Emsisoft Emergency Kit - Version 2.0

So after the scan finished a Pop-up box telling me about Emsisoft Emergency Kit and what it found.

The info below is what I got from the Report file inside Emsisoft Emergency Kit.
-----------------------------------------------------------------
a2scan_120726-195016-Notepad

Emsisoft Emergency Kit - Version 2.0
Last update: 26/07/2012 19:49:27

Scan settings:

Scan type: Deep Scan
Objects: Rootkits, Memory, Traces, C:\
Scan archives: On
ADS Scan: On

Scan start: 26/07/2012 19:50:16

C:\Program Files\IObit\IObit Unlocker\Freeware\UnLock_FreeSoftwareDownloader.exe detected: Trojan.Win32.Pasta!E2

Scanned 509459
Found 1

Scan end: 26/07/2012 21:03:06
Scan time: 1:12:50

C:\Program Files\IObit\IObit Unlocker\Freeware\UnLock_FreeSoftwareDownloader.exe Quarantined Trojan.Win32.Pasta!E2

Quarantined 1

----------------------------------------------------------------------
The Reason why I'm posting this, is to make the users aware of this, especially if you have IObit Unlocker installed on your Machine.

Therefore if you have this IObit Unlocker on your system try a scan and see if you find the Trojan like I found.

Therefore, I hope this information helps the people/Members who have this software installed.

Kind Regards

Nigel

Malware Maniac · (This post was last modified: 07-27-2012 12:58 AM by Malware Maniac.)

(07-26-2012 11:26 PM)Nige_40 wrote: I ran a scan with Emsisoft Emergency Kit - Version 2.0

If Emsisoft has not detected this earlier, then it may be a false positive. Emsisoft has several false positives that may go away later when you're updating. Just give it a few days Emsisoft will release an update, search for false positives and put IObit Unlocker back on your system.

IObit already got bad publicity from the Malwarebytes incident. I don't think that they would want any more by having their product be known as malware.

Update: You can't just rely on one engine. Before you state that a company's software is malware please run it through VirusTotal or Jotti.

Update #2: The trojan is not for IObit Unlocker. It is for their UnLock_FreeSoftwareDownloader.exe file as it state in report (unless if that is the Unlocker correct me if I'm wrong).

**Littlebits** · 07-27-2012, 02:01 AM

If you downloaded IObit Unlocker from a trusted source, like IObit's homepage, Softpedia, MajorGeeks, Download.com, etc. then it is completely safe. Just a false positive, report it to Emsisoft.

If you downloaded it from other sources then it could possibly be malware.

Upload the file to VirusTotal, if you downloaded it from an unknown source.

Thanks. Big Grin

Edit: UnLock_FreeSoftwareDownloader.exe is a downloader to download IObit's other products like Advanced SystemCare, Smart Defrag, IObit Malware Fighter Free, etc. It only runs if you choose to download other IObit products during installation of IObit Unlocker. It is completely safe, not a Trojan. However you can safely delete it and it will not affect IObit Unlocker.

Nige_40 · 07-27-2012, 07:10 PM

(07-27-2012 12:31 AM)Malware Maniac wrote:
(07-26-2012 11:26 PM)Nige_40 wrote: I ran a scan with Emsisoft Emergency Kit - Version 2.0

If Emsisoft has not detected this earlier, then it may be a false positive. Emsisoft has several false positives that may go away later when you're updating. Just give it a few days Emsisoft will release an update, search for false positives and put IObit Unlocker back on your system.

IObit already got bad publicity from the Malwarebytes incident. I don't think that they would want any more by having their product be known as malware.

Update: You can't just rely on one engine. Before you state that a company's software is malware please run it through VirusTotal or Jotti.

Update #2: The trojan is not for IObit Unlocker. It is for their UnLock_FreeSoftwareDownloader.exe file as it state in report (unless if that is the Unlocker correct me if I'm wrong).

Thanks Manic, I will look into it.

Mind you I still got it on my main Laptop, but not this machine.

Plus that for the advise.

Nige_40 · 07-27-2012, 07:15 PM

(07-27-2012 02:01 AM)Littlebits wrote: If you downloaded IObit Unlocker from a trusted source, like IObit's homepage, Softpedia, MajorGeeks, Download.com, etc. then it is completely safe. Just a false positive, report it to Emsisoft.

If you downloaded it from other sources then it could possibly be malware.

Upload the file to VirusTotal, if you downloaded it from an unknown source.

Thanks.

Edit: UnLock_FreeSoftwareDownloader.exe is a downloader to download IObit's other products like Advanced SystemCare, Smart Defrag, IObit Malware Fighter Free, etc. It only runs if you choose to download other IObit products during installation of IObit Unlocker. It is completely safe, not a Trojan. However you can safely delete it and it will not affect IObit Unlocker.

I downloaded it from Iobit main site 2 months ago.

But the Emsisoft Emergency Kit did a long update and it was after that update I got that Malware on what I have already said

But I will upload my saved info up to Virustotal and see how I got from there.

So thanks for your help as well

Regards

Nige

Nige_40 · 07-27-2012, 07:41 PM

Yep all clean on this Machine I will run the main file thought my laptop later and see what I get.

Nige_40 · 07-28-2012, 06:01 PM

(07-27-2012 07:41 PM)Nige_40 wrote: Yep all clean on this Machine I will run the main file thought my laptop later and see what I get.

My Laptop was clean.

Mind you I ran a test with Jotti on Iobit Uninstaller and it said that it had a
PUA.W32.Packer.Upx-28 found by Clam AV

So I ran the same file under Virustotal and it said nothing found. Not even by Clam AV

So I guess that is a false malware finding under Jotti ?

anyway I will leave it for now

Nige_40 · (This post was last modified: 07-29-2012 07:45 PM by Nige_40.)

I got a report from Malwarebyes,And Microsoft Safety Scanner of same name I reported last post.

Malware Maniac · (This post was last modified: 07-29-2012 07:47 PM by Malware Maniac.)

(07-29-2012 07:43 PM)Nige_40 wrote: I got a report from Malwarebyes,And Microsoft Safety Scanner of same name I reported last post.

... And what did they say?

And IObit Unlocker is not now IObit uninstaller. IObit uninstaller removes installed programs and leftover keys and files. IObit Unlocker removes files that are hard to becoming hard to remove.

Nige_40 · 07-29-2012, 07:49 PM

(07-29-2012 07:47 PM)Malware Maniac wrote:
(07-29-2012 07:43 PM)Nige_40 wrote: I got a report from Malwarebyes,And Microsoft Safety Scanner of same name I reported last post.

... And what did they say?

And IObit Unlocker is not now IObit uninstaller. IObit uninstaller removes installed programs. IObit Unlocker removes files that are hard to becoming hard to remove.

Insead of making a new thread. I re named it.

Both programs said malware found PUA.W32.Packer.Upx-28

That's all Malware Maniac

Nick:
Password: