The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Trojans in systemrequirementslab files?

    Discussion in 'Windows OS and Software' started by agusman, Dec 11, 2008.

  1. agusman

    agusman when the going gets weird

    Reputations:
    440
    Messages:
    794
    Likes Received:
    0
    Trophy Points:
    30
    Avira detected two trojans in the files "system_srl.dll" (TR/Zlob.753664) and "unistall.exe" (TR/Zlob.47196), the directory C:\Program Files\SystemRequirementsLab\

    False positive?

    or is SRL infecting us?
     
    agusman, Dec 11, 2008
    #1
  2. potentv

    potentv Notebook Evangelist

    Reputations:
    61
    Messages:
    664
    Likes Received:
    0
    Trophy Points:
    30
    I reckon false positive...
     
    potentv, Dec 11, 2008
    #2
  3. alber

    alber Notebook Consultant

    Reputations:
    6
    Messages:
    297
    Likes Received:
    0
    Trophy Points:
    30
    Yeah, it's false positive. SystemRequirementsLab is 100% safe ;) And very usefull ;)
     
    alber, Dec 11, 2008
    #3
  4. agusman

    agusman when the going gets weird

    Reputations:
    440
    Messages:
    794
    Likes Received:
    0
    Trophy Points:
    30
    Anyone else had this issue?

    maybe its a real trojan posing as SRL...
     
    agusman, Dec 11, 2008
    #4
  5. yuio

    yuio NBR Assistive Tec. Tec.

    Reputations:
    634
    Messages:
    3,637
    Likes Received:
    0
    Trophy Points:
    105
    I saw it last night.. I wasn't sure what to do with it... so I left it.
     
    yuio, Dec 11, 2008
    #5
  6. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    Upload the suspected files to Jotti Malwarescan and/or VirusTotal.
    There you can check with 30+ antivirus/antimalware programs if other security programs also flag them as a trojan.
    If Avira is the only one, you can be pretty sure it's a false positive.
    Check my signature for links to those websites.
    Cheers.
     
    Baserk, Dec 11, 2008
    #6
  7. jedensuscg

    jedensuscg Newbie

    Reputations:
    0
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    5
    Scanned with both websites mentioned above.

    Only AntiVir found anything on the Jottis Malware site.

    And 4 programs on Virustotal (out of 38) found anything
    Antivir
    Panda
    SecureWeb-Gateway
    Thehacker.

    I have it too(through Antivir) So im trusting it for now...also because Antivirs database has zero information about the file other then it thinks its malware.
     
    jedensuscg, Dec 11, 2008
    #7
  8. potentv

    potentv Notebook Evangelist

    Reputations:
    61
    Messages:
    664
    Likes Received:
    0
    Trophy Points:
    30
    I just got the flag as well. Systemrequirementslab false positive...
     
    potentv, Dec 12, 2008
    #8