ForceBindIP.exe infected by a trojan

[Spark]

Hello,

I have download ForceBindIP-1.2-Setup.exe and ForceBindIP-1.2.zip.

ForceBindIP.exe (5.5kb) in ForceBindIP-1.2-Setup.exe it's ok but

ForceBindIP.exe (9.67kb) in ForceBindIP-1.2.zip is infected by TR/Crypt.XPACK.Gen

 

[R1CH]

Your anti virus is producing false positives. You may wish to switch to a better one.

[Spark]

He is detected by Bitdefender, Antivir and other antivirus.

Why 5.5kb and 9.67kb ?

[R1CH]

That is the size of the files, the file size has no relation to whether they are infected.

Edit, sorry I misread your post. The .exe in the .zip is digitally signed for integrity - check the digital signature in the file properties to verify it hasn't been modified by a virus. The .exe in the setup installer .exe is not digitally signed since I haven't updated it. That is why the file sizes differ.

[Spark]

You don't update archive ?

[TJL]

I found this trojan also, however I found that I detected this trojan from the forcebindip.exe that was downloaded via softpedia and not the one provided by www.r1ch.net

If you google "force bind ip" the first results are a softpedia version that has a trojan packed into it.
However if you google "forcebindip" it takes us to www.r1ch.net

[R1CH]

The SoftPedia links to my site for the download. There is no trojan, just a false positive.

[Ferryt]

I'm having no success in installing ForceBindIP because ESET keeps quarantining it regardless of how I get it on my computer.  In fact, it's quarantined this entire site, apparently.  Unfortunately, there's no way to create an exclusion in ESET because it re-quarantines a file within two seconds after releasing it from quarantine, not giving sufficient time to set up an exclusion.  I've complained to ESET twice about this issue.  This appears to be a problem with quite a few anti-virus programs for some reason (and I might point out that ESET's Node32 anti-virus program is one of the best).  Maybe you could bend a couple arms for those of us being subjected to this stupidity?

[R1CH]

Interesting, ESET apparently created a Win32/ForceBindIP classification for my program! No idea why. Emailing them now to see if they can explain it.

[R1CH]

I modified the loader a bit to workaround all the broken anti-virus products, new version 1.2a is available at http://www.r1ch.net/stuff/forcebindip/

[david]

that link just busted the boot on my computer to eternally restart with AC power.  something like that

[david]

or it could be because my HD uses .1 watts more than the previous one. good luck!