MCUmall EPROM BIOS Chip Burner Forum
MCUmall EPROM BIOS Chip Burner Forum
Home | Profile | Register | Active Topics | Members | Search | FAQ
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 MCUmall Forums
 True USB Willem Programmer (GQ-2X,3X,4X & GQ-4x4)
 Virus allert caused by USBPrg.exe

Note: You must be registered in order to post a reply.
To register, click here. Registration is FREE!

Screensize:
UserName:
Password:
Format Mode:
Format: BoldItalicizedUnderlineStrikethrough Align LeftCenteredAlign Right Horizontal Rule Insert HyperlinkInsert EmailInsert Image Insert CodeInsert QuoteInsert List Spell Checker
   
Message:

* HTML is OFF
* Forum Code is ON
Smilies
Smile [:)] Big Smile [:D] Cool [8D] Blush [:I]
Tongue [:P] Evil [):] Wink [;)] Clown [:o)]
Black Eye [B)] Eight Ball [8] Frown [:(] Shy [8)]
Shocked [:0] Angry [:(!] Dead [xx(] Sleepy [|)]
Kisses [:X] Approve [^] Disapprove [V] Question [?]

   Insert an Image File
Check here to include your profile signature.
    

T O P I C    R E V I E W
Nimajamin Posted - 10/30/2012 : 03:17:53
Hi,

Just bought a new GQ-4X and downloaded the latest Windows 7 (64bit) compatible software & drivers from your site..

However, after installation ZoneAlarm has deleted USBPrg.exe as it reports to contain: Packed.Win32.Morphine.a

Looking up the virus signature it appears to be an EMail-Worm - I have also looked around the internet for other reports & there appears to be a comment on one of your video (Dated Two years ago) which says the same thing.

What to do next?
6   L A T E S T    R E P L I E S    (Newest First)
Nimajamin Posted - 11/03/2012 : 12:29:51
Added to that, reading a working 27c1001 chip is returning FF's and ids the chip as a unknown FFFF ID.
(but the app does not hang like the example above)
The chip in question works and was read by your last version of the software successfully ..
Nimajamin Posted - 11/03/2012 : 12:20:35
Update:

Just re tried the newer 30th October release on the Win7 machine & get the following..

* with no chip inserted - reading a TMM27512A just returns FF's (as expected)
* after inserting a know working 27512 and selecting Read.. The application freezes just like on the XP machine.

Not cool... (have too unplug the burner to unlatch the VCC on state)

Can we have access to the earlier installers? Not just the latest and one that's two years old?
(Are there any I between versions? Like the one I had last week?)
(As the roll-back has removed it from my machine.)

Thanks in advance for any help you can offer..

Kindest regards,
Benjamin
Nimajamin Posted - 11/03/2012 : 10:46:47
Another interesting thing to note is that the latest Installer is not signed.. that doesn't help in feeling that the package is clean.

(This time on an XP machine running a web-download protection system)

Edit: not having much luck here.. (on two machines)

Machine 1)
Windows 7 Home Premium SP1 (64bit)
8 gigs of Ram

* Downloaded installer cannot be verified as signed.
* Windows USB driver is not signed.
* Zone labs detects the problem stated above..
* Have to run installer & executable as Admin, otherwise it attempts to reinstall for he non-Admin user & then fails to be able to write he exe into the Program's folder.
* Executable largely works, but the shortcut seems to forget that it wants to be run as Administrator .. Initiates a reinstall & deletes the USBPrg exe .. Then fails to write yo the C:\Program Files directory. (have to manually install to restore te package)

Machine 2)
Windows XP Pro SP2
768 Meg of Ram

* downloaded installer not signed (warns on download)
* installation okay!! :)
* can choose the device, but the application freezes if you try to ID or Read an EPROM.

On a side note the Win7 machine has now developed a blue-screen issue since installation .. Looks to be a driver related page fault, investigating further - will attempt a roll back, soak test & try again.
Nimajamin Posted - 11/03/2012 : 10:39:26
Thanks guy's I hope it is clean as I have to exclude it from the Virus & Access checks.. there must be a way to alter the signature enough to fix the problem tho..? I saw someone mention this problem two years ago.

(FYI The virus scanner that complained was ZoneAlarm)
ZLM Posted - 11/01/2012 : 22:16:37
It is a false call by some anti-virus software.
Bad_Ad84 Posted - 10/30/2012 : 05:31:37
Just because your virus scanner says its a virus, doesnt mean it is.

False positives happen -especially when the exe is packed with a compressor to reduce file size and/or anti cracking protection.

www.bit.ly/TRM8RR


quote:
Packed

This is a detection for files that use some kind of runtime packer. A
runtime packer can be used to reduce the size of executable files
without the need for an external unpacker. While this can‘t be
considered malicious in general, runtime packers are widely used with
malicious files since they can prevent a already known malware from
detection by an Antivirus product.

MCUmall EPROM BIOS Chip Burner Forum © Copyright 2003 - 2009 Mcumall Electronics Inc. Go To Top Of Page
Generated in 0.05 sec. Snitz Forums 2000