Winstep Forums
http://forums.winstep.net/phpBB2/

Trojan found in nextstart and workshelf .exe files
http://forums.winstep.net/phpBB2/viewtopic.php?f=2&t=10513
Page 1 of 1

Author:  Crosswind [ Mon Aug 21, 2017 9:34 pm ]
Post subject:  Trojan found in nextstart and workshelf .exe files

I've run the Clamshell antivirus program and I'm finding a trojan in my computer's memory when nextstart.exe and workshelf.exe are run. The trojan is win.trojan.fynloski-6332091-0 (see the graphic). I've uninstalled the programs, cleaned the computer, downloaded the programs and reinstalled (I'm using Winstep Xtreme). It reappears as before. Anyone else finding this? If so, any solutions? Thanks very much.

Attachments:
trojan.png
trojan.png [ 44.6 KiB | Viewed 10160 times ]

Author:  winstep [ Mon Aug 21, 2017 10:00 pm ]
Post subject:  Re: Trojan found in nextstart and workshelf .exe files

Assuming, of course, that you downloaded Winstep Xtreme directly from the Winstep web site, it's a false positive. See if Clamshell provides a way of excluding those executable files.

Also, feel free to submit them to the VirusTotal website for extra peace of mind.

VirusTotal inspects items with over 60 antivirus scanners and URL/domain blacklisting services, in addition to a myriad of tools to extract signals from the studied content.

I just did it and ALL major AV engines report it clean *except* ClamAV.

Author:  winstep [ Mon Aug 21, 2017 10:14 pm ]
Post subject:  Re: Trojan found in nextstart and workshelf .exe files

I've submitted a False Positive report to them.

Page 1 of 1 All times are UTC
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/