Shozam Community

Hi All,

 I need help, I've been using the gallery for the last couple of days, with no problems.  Now, my anti-virus is telling me the resource.dll has a trojan, I move to chest in Avast and now the program won't work, obviously.  I've uninstalled the program, cleared out the registery of any residual Shozam information, reinstalled and still having the same problem.

 This is only applicable to Shozam, and my computer is clean.

Urgent help appreciated.

 Regards

Cass

Please submit a ticket for this issue at: http://helpdesk.shozam.com/Customer/SubmitTicket.aspx. Please provide as much information as possible, such as the name of your Anti-Virus program, the exact error it gives, when you have installed it and any other representative changes to your computer system which may have triggrered the Trojan warning. We'll have the Development Team take a look into this. There may be a possiblity that the Anti-Virus does not like that Shozam! automatically goes to the Internet and pulls three Web pages from there to show content on hte left side of the screen in the opening window, Step 1, and the window that comes up when trying to close the program. We do this becasue the content on the pages has been changing frequently so we update it online rather than embed it into the program. in any case, we will look further into this and see what measures need to be taken, if any, on the Shozam! side.

Hi Raz,

 

I've alread submited a ticket two days ago, I've still not had a response.  I will take some screen shots of the warnings from my Anti-virus, I had mentioned in my submission ticket, all relevant information, to include my av software. 

I will resubmit a ticket.

Regards

Cass 

 

I know this is dangerous, but I've used a work around, when using Shozam, I switch off my AV software, do what I need to do, then restart my av.

Cass, I have heard back from the Development Team; there is nothing in Shozam! that would have triggered the Trojan warning. It is likely your computer was infected prior to installing Shozam! and the infection spread to the Shozam! DLL. You may want to look further into the health of your computer system. If the infection keeps putting a Trojan into the Shozam! DLL, disabling your AntiVirus whenyou are running Shozam! puts your system at risk. Sorry, technology is great when it works smoothly and I know it can be a real pain once things go awry. Viruses and hard drive crashes can be the worst.

I too had Avast! give a Trojan warning during Shozam! installation.  The message left in the Avast! log file reads:

3/25/2007 5:53:17 PM    SYSTEM    1972    Sign of "Win32:Inject-BD [Trj]" has been found in "D:\Shozam!\KResource.dll" file. 

I aborted the installation, deleted the downloaded file, figuring that if the KRsource.dll had a Trojan-like signature prior to being installed, Shozam! was not a program I wanted resident on my machine.  Any thoughts on why the KResource.dll file would display a Trojan-like signature when scanned by Avast! during the installation process?

I run my machine on an AMD dual-core 64-bit processor and have it in a dual-boot configuration.  I only tried installation when booted with the 32 bit XP pro mode.  I may try an installation on the 64 bit XP-Pro boot later and will let you know the results.  Both boot versions use Avast! as the anti-virus protection. I have installed and used Web Gallery Wizard PRO on both the 32 and 64 bit boots.

 
Thanks.
 

It looks like an issue with Avast! providing an incorrect assessment. Our Development Team has looked into it after the first incident was reported and scanned all files with several anti virus systems to make sure there was no infection. Files are clean; you may want to alert Avast! of their incorrect assessment. We will follow up with them as well. Please let us know of your future findings on your 64 bit install. The best way to report to us is to communicate directly with the Development Team using our Help Desk system:

http://helpdesk.shozam.com/Customer/SubmitTicket.aspx

Thanks for your report.

Hi Raz,

 I emailed Avast today, would expect a response by tomorrow.  Once I have the details, I will of course, forward their response onto you.

Regards

Cass 

 

Thanks for your reply.

I attempted an install on my 64 bit system and had the same response by Avast.  I've posted an image of the Avast report at:

http://www.btainc.com/avast_warn.htm

Avast is one of the few anti-virus programs that run native in 64 bit code -- Symantec and McAfee don't run on Windows XP Pro x64 Edition at all.  I've posted a note to Avast detailing the problem.

Brad.
 

 

Hi All,

 

I received the following today from Avast:

Good afternoon Thank you for your email. Could you also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner (http://virusscan.jotti.org/ ) if any other scanners here detect them it is less likely to be a false positive. If you have already moved the virus to the chest, you will need to move it out before testing it.. If it is indeed a false positive, please add it to the exclusions lists (Standard Shield > Customize > Advanced and Program Settings > Exclusions) and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions. Please also see this link about false positives: http://forum.avast.com/index.php?board=2;action=display;threadid=7779 I hope this helps, if not, please feel free to contact me again. Regards, Adam Riley (Technical Support)

 

Regards

Cass

I did as request by Avast and Jotti didn't come back with any virii, so the problem is obviously a false positive.  I've done as requested and not had a problem since.

 

Just thought I'd let you know the outcome.

Regards

Cass

Cass, thanks for you follow-up and letting everyone know about your findings.