Rockbox 1.2.10 Virus Found

[Shadeclan]

Just thought you guys ought to know that Avira virus scanner is picking up a low threat virus called "JOKE/ArchSMS.iaps" in the latest version of the Rockbox Utility.

[bluebrother]

Then you either downloaded the file from somewhere else or Avira is telling nonsense. In which case you'd better report that to Avira, there is nothing we can do about their product giving wrong warnings.

[Shadeclan]

Didn't even know there WAS anyplace else to download Rockbox from.  I will send a report to Avira for their review, OK?
Post Merge: June 08, 2011, 07:55:35 PMReport Submitted.  Hope they won't find anything.

[[Saint]]

...Hope they won't find anything.

No need for that, they won't

It's a false positive, that can be assured.



[St.]

[peaceful1]

I have the same problem with Kaspersky internet security 2012 Final
it says that the software is a Hoax.Win32.ArchSMS.iaps (what ever that means) even when I add it to exclusive it won't let me run the program

[Chronon]

False positives are common with antivirus software.  You are welcome to report this problem to the developers of that software so they can address this instance. 

[SheepCake]

I strongly reccomend microsofts AV, its given me the least false positives of any of the av's currently out there, I had to dump the top names(that i had retail licences for) because they kept blocking legit apps like shark007's codec pack tweaking cp, or rb utility.

this kinda thing happens, when im really in doubt, i toss the file in virus total and see what it has to say
http://www.microsoft.com/en-us/security_essentials/default.aspx

hope this helps, note: avg has deleted the rbutil on me a couple times on friends systems saying it was a virus, even setting the file to white list and telling it not to delete files automatically didnt fix that issue(was months ago, they may have fixed it) so if you have avg, you may need to disable its real time to use the rb util.

[xian]

Comodo also flagged this file as suspisious too, though I'm sure it's fine. Personaly, I'd like to see release files singed.

[AlexP]

Comodo also flagged this file as suspisious too, though I'm sure it's fine. Personaly, I'd like to see release files singed.

Although slightly burning them is a novel proposal, I'm not sure we'll act on it

[xian]

Ooops, I meant signed, as in PGP.
hehe.

[GodEater]

But signed by whom?

Rockbox the organisation has no PKI so far, and I'm not sure we've got the time to set one up.

[bluebrother]

But signed by whom?

Well, someone (f.e.: me when creating new binaries) could also create gpg signatures. But what's the point? Unless there is a web of trust around that includes my public key you'd need to trust my public key so there is no real benefit. And anyone could post modified binaries with signatures on some other place (like all those download sites, or worse somewhere else and those download sites picking up the wrong ones). And while I did the last releases it's not guaranteed or necessary that I'll be doing the next ones so you would need to trust someone else then.

There is really no sensible fix about antivirus programs reporting nonsense but fixing those antivirus programs. And anyone not trusting our binaries can build himself from the source. The provided  binaries are for convenience only anyway, especially on those platforms where it's uncommon to build stuff yourself.

[dmoriarty]

3rd September 2011 and AVG 2011 free (Latest Update 03/09/2011 15:11 has detected a threat:

Win32.ArchAMS.iaps

It says it is "Not Virous: Hoax"

I wanted to state that this is still going on.  I have attached the warning from AVG.  I realise it is probably a false alarm, but several AV programs are reporting this.  I was going to download podcasts from my sisters, and was going to take RU on a USB stick so I could put voicefiles on the mp3 player after potcasts put on, however now I won't take RU with me, and will have non speaking entries on my mp3 player.  I realy don't want to introduce a (false alarm) virus alart to someone elses computer.  Luckily I can also see large fonts, so I can manage.

I have been downloading a lot of software receently and this is the first time this has hapened.

When is the next version comming out?

[saratoga]

When is the next version comming out?

Allow me to suggest something from the post above yours:

There is really no sensible fix about antivirus programs reporting nonsense but fixing those antivirus programs. And anyone not trusting our binaries can build himself from the source. The provided  binaries are for convenience only anyway, especially on those platforms where it's uncommon to build stuff yourself.

So basically, you have 3 options:

1)  Ignore your crappy AV software
2)  Wait and hope your AV software eventually fixes their bug
3)  Compile your own build from the source

[bluebrother]

It says it is "Not Virous: Hoax"

So it does not classify it as a virus but some program you might not want. Fortunately, people usually know better than software.

When is the next version comming out?

What is that supposed to change about this issue?