Old 5th May 2004, 22:08   #1
gas-attack
Senior Member
 
gas-attack's Avatar
 
Join Date: Feb 2004
Location: The world's a** Posts: 1 divided by 0
Posts: 219
Send a message via ICQ to gas-attack
NSIS installers easily infected by Win32/Pinfi?!?!

First, I must say I'm not creating installers myself (yet).
Whenever I download some, a few days later, they are still executable, but when I let a virus scanner (AntiVir, but I heard Norton does as well) run over them, it detects "Win32/Pinfi" and repairs the file. If I now try to execute it, a bug message is coming up that the CRC is wrong. So I can conclude that this virus even changes the CRC, right? It only infects NSIS installers, and only in my download dir. Hope you can improve that someway.
gas-attack is offline   Reply With Quote
Old 5th May 2004, 22:35   #2
Joost Verburg
NSIS MUI Dev
 
Join Date: Nov 2001
Posts: 3,717
If you system is infected there is nothing NSIS can do about it. See http://securityresponse.symantec.com...w32.pinfi.html for removal instructions.

If it's a false positive, contact the author of your virus scanner.
Joost Verburg is offline   Reply With Quote
Old 7th May 2004, 16:38   #3
gas-attack
Senior Member
 
gas-attack's Avatar
 
Join Date: Feb 2004
Location: The world's a** Posts: 1 divided by 0
Posts: 219
Send a message via ICQ to gas-attack
Quote:
Originally posted by Joost Verburg
If you system is infected there is nothing NSIS can do about it. See http://securityresponse.symantec.com...w32.pinfi.html for removal instructions.

If it's a false positive, contact the author of your virus scanner.
Got rid of the virus. Just wanted to say that NSIS CRC is corrupted by this virus so that it looks like a normal uninfected file again and then spreads over other NSIS installers. But the fact that only 1.x installers were infected shows that it was improved in 2.0, so the problem will soon have been gone.
gas-attack is offline   Reply With Quote
Old 7th May 2004, 18:02   #4
Joost Verburg
NSIS MUI Dev
 
Join Date: Nov 2001
Posts: 3,717
You can recompile NSIS with an option to make the self-validation more strict.
Joost Verburg is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Developer Center > NSIS Discussion

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump