Zonealarm Pro Install Has A Trojan According to McAfee

macandpc · 10-13-2009, 01:33 PM

Hello. I was just installing zonealarm pro because today only, they are giving out free licenses to for ZoneAlarm Pro. When installing, the installer got to around 70% when mcafee virusscan plus alerted me that there was a trojan in C:\Program Files\CHECKPOINT\ZAFORCEFIELD\HEURISTICS\UPX.EXE. The virus is listed at Artemis!E3E41B3FC3A8 (trojan). Zonealarm is a reputable company, and they have great software. So, is this a false positive?

Thanks

**Glaswegian** · 10-13-2009, 03:06 PM

Hi

upx.exe is a packer - mostly used for legit purposes.

http://sourceforge.net/projects/upx/

However, such tools are also used by malware writes for non-legit purposes - McAfee cannot know the purpose of the version in ZA so it is just playing safe and warning you. I really can't imagine that ZA would put out a trojan in this way...

blue_fyre · 10-17-2009, 05:28 PM

McAfee's Artemis is in cloud technology and heuristics. If can be a false positive or what it detected has acted like a trojan but is legitimatly acting its job. Upload the file to virus jotti to be scanned by multiple vendors.

10-13-2009, 01:33 PM	#1 (permalink)
macandpc Registered User Join Date: Oct 2009 Posts: 10 OS: Snow Leopard, XP SP3, Windows 7, Windows Vista Ultimate	Zonealarm Pro Install Has A Trojan According to McAfee Hello. I was just installing zonealarm pro because today only, they are giving out free licenses to for ZoneAlarm Pro. When installing, the installer got to around 70% when mcafee virusscan plus alerted me that there was a trojan in C:\Program Files\CHECKPOINT\ZAFORCEFIELD\HEURISTICS\UPX.EXE. The virus is listed at Artemis!E3E41B3FC3A8 (trojan). Zonealarm is a reputable company, and they have great software. So, is this a false positive? Thanks

10-13-2009, 03:06 PM	#2 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,449 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Re: Zonealarm Pro Install Has A Trojan According to McAfee Hi upx.exe is a packer - mostly used for legit purposes. http://sourceforge.net/projects/upx/ However, such tools are also used by malware writes for non-legit purposes - McAfee cannot know the purpose of the version in ZA so it is just playing safe and warning you. I really can't imagine that ZA would put out a trojan in this way... __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

10-17-2009, 05:28 PM	#3 (permalink)
blue_fyre Registered User Join Date: Aug 2009 Posts: 36 OS: Windows XP Service Pack 3	Re: Zonealarm Pro Install Has A Trojan According to McAfee McAfee's Artemis is in cloud technology and heuristics. If can be a false positive or what it detected has acted like a trojan but is legitimatly acting its job. Upload the file to virus jotti to be scanned by multiple vendors.