Trojan downloaded with OO software

Discuss setup / installation issues - Add a spell checker, Language pack?

Trojan downloaded with OO software

Postby southpaw3473 » Mon Sep 08, 2008 9:49 pm

Hey all,
I have tried to download Open Office three times now and each time it installs a trojan on my computer. It's called Trojan.Zlob and my spyware detector catches it every time. After quarantine it returns when I start Writer. Does anyone have any idea about this? About 6 months ago the same thing happened but I think the trojan was different. Thanks so much for your help.
OOo 2.3.X on Ms Windows XP
southpaw3473
 
Posts: 4
Joined: Mon Sep 08, 2008 9:43 pm

Re: Trojan downloaded with OO software

Postby acknak » Mon Sep 08, 2008 10:22 pm

Exactly where are you getting OpenOffice from--what web site?
AOO 4 • Linux • Fedora 17
User avatar
acknak
Moderator
 
Posts: 17421
Joined: Mon Oct 08, 2007 1:25 am
Location: USA:NJ:E3

Re: Trojan downloaded with OO software

Postby southpaw3473 » Mon Sep 08, 2008 11:35 pm

From the Open Office Download page. It's really weird.
OOo 2.3.X on Ms Windows XP
southpaw3473
 
Posts: 4
Joined: Mon Sep 08, 2008 9:43 pm

Re: Trojan downloaded with OO software

Postby Villeroy » Mon Sep 08, 2008 11:42 pm

southpaw3473 wrote:From the Open Office Download page. It's really weird.

The software is called OpenOffice.org due to some marketing morons who believe they have an exclusive right on the name "open office" without selling anything under that name. So the office suite we are talking about is named after it's own web-site http://openoffice.org

Please give us the link from where you downloaded something infected that claims to be OpenOffice.org.
Please, edit this topic's initial post and add "[Solved]" to the subject line if your problem has been solved.
Ubuntu 12.04, Apache OpenOffice 4.x
User avatar
Villeroy
Volunteer
 
Posts: 17311
Joined: Mon Oct 08, 2007 1:35 am
Location: Germany

Re: Trojan downloaded with OO software

Postby southpaw3473 » Tue Sep 09, 2008 3:03 am

OOo 2.3.X on Ms Windows XP
southpaw3473
 
Posts: 4
Joined: Mon Sep 08, 2008 9:43 pm

Re: Trojan downloaded with OO software

Postby Hagar Delest » Tue Sep 09, 2008 8:15 am

You should check the MD5sum to confirm if the file is correct (See here : http://download.openoffice.org/2.4.1/md5sums.html, there is a link to the instructions on top of that page). If it's fine, it may be a false alarm and the AV should update its signature list.

Thanks to add '[Solved]' at beginning of your first post title (edit button) if your issue has been fixed.
AOO 4.0.1 on Windows 7 and Xubuntu 14.04 (Trusty Tahr)
User avatar
Hagar Delest
Moderator
 
Posts: 25106
Joined: Sun Oct 07, 2007 9:07 pm
Location: France

Re: Trojan downloaded with OO software

Postby southpaw3473 » Tue Sep 09, 2008 6:50 pm

That only works with old versions of Firefox, or so it says. I am not super literate with the intricacies of my computer so I don't quite know what MD5sum is or does. Sorry.
OOo 2.3.X on Ms Windows XP
southpaw3473
 
Posts: 4
Joined: Mon Sep 08, 2008 9:43 pm

Re: Trojan downloaded with OO software

Postby owilky » Wed Nov 05, 2008 12:14 pm

I too have a trojan picked up by AVG Anti-Virus Pro... "Trojan horse Downloader. Generic8.BCQ"

Found here......C:\Documents and Settings\Peter\My Documents\Office\openoffice.org-core02.cab


OpenOffice version 3.0.9357.500


I tried the MD5sum link but it is not compatible with firefox3 so cannot check it that way.

Also my connection is dropped when using that page.
OOo 3.0.X on Ms Windows XP
owilky
 
Posts: 7
Joined: Wed Nov 05, 2008 11:47 am

Re: Trojan downloaded with OO software

Postby Caracalla » Wed Nov 05, 2008 1:47 pm

You can use this program to easily check the MD5sum.
Has your question been answered? Then please add [solved] to the title of your thread.
My pet peeve, No support for international ordinal numbering
please vote

Er is nu ook een Nederlandstalig forum!
OOo 3.0.X on Ms Windows XP + Opensuse 11.1
Caracalla
Volunteer
 
Posts: 474
Joined: Thu Nov 22, 2007 2:35 pm
Location: Netherlands, EU

Re: Trojan downloaded with OO software

Postby Duhhh » Wed Nov 05, 2008 4:50 pm

AVG has had a few false positives lately. I just installed AVG free and had it do a scan of my OO2.4, and it hit on program/msi-pkgchk.exe.

I've checked the file with virustotal.com, and out of 36 anti-virus tools, only AVG flags it as a trojan. Is AVG right, and all the others wrong?

If you have AVG pro, you can contact support so they can verify that the file is safe and update their database. Once they do an update, you can move the file from the vault (if you've told AVG to quarantine it) and everything should be back to normal.
OOo 3.3.X on Ms Windows XP
Duhhh
 
Posts: 49
Joined: Tue Jun 03, 2008 6:10 pm
Location: USA

Re: Trojan downloaded with OO software

Postby Hagar Delest » Wed Nov 05, 2008 5:07 pm

For the record, when I was under Windows at home, at tried AVG and drop it for Avast Home Edition. Not so good results with AVG.
AOO 4.0.1 on Windows 7 and Xubuntu 14.04 (Trusty Tahr)
User avatar
Hagar Delest
Moderator
 
Posts: 25106
Joined: Sun Oct 07, 2007 9:07 pm
Location: France


Return to Install, Setup and Troubleshooting

Who is online

Users browsing this forum: skiphos and 8 guests