Shoutbox

Win32:SwizDrop-BE [Trj] in MSP? - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Messenger Plus! for Live Messenger (/forumdisplay.php?fid=4)
+---- Forum: WLM Plus! Bug Reports (/forumdisplay.php?fid=7)
+----- Thread: Win32:SwizDrop-BE [Trj] in MSP? (/showthread.php?tid=99484)

Win32:SwizDrop-BE [Trj] in MSP? by Brickstin on 07-24-2012 at 08:36 AM

how the heck? I have found so many in so many different versions of this program

Win32:SwizDrop-BE [Trj] in each file

4.23.0.276_MsgPlusLive-423.exe

4.50.0.312_MsgPlusLive-450.exe
4.60.0.326_MsgPlusLive-460.exe

4.81.358.0_MsgPlusLive-481.exe
4.82.368_MsgPlusLive.exe


RE: Win32:SwizDrop-BE [Trj] in MSP? by Spunky on 07-24-2012 at 09:55 AM

Swizzor was a name associated with a different version of the old sponsor program. You can read about it on these forums, but the fact is that Plus! only included an optional sponsor program which got falsely detected as a threat by AV software.

I can verify that those downloads are fine.


RE: Win32:SwizDrop-BE [Trj] in MSP? by Brickstin on 07-24-2012 at 10:54 AM

ok.. that gives me some relief. ..scared me sh**less LOL


RE: Win32:SwizDrop-BE [Trj] in MSP? by Brickstin on 07-25-2012 at 02:08 PM

G:\C eMachines\Download\Messengers\Win MSN MSGR\MPL\MPL4\4.83.376_MsgPlusLive-483.exe    a variant of Win32/Adware.CiDHelp application

G:\C eMachines\Download\Messengers\Win MSN MSGR\MPL\MPL4\4.83.380_MsgPlusLive.exe    a variant of Win32/Adware.CiDHelp application



I'm just letting you guys know.. theres more..


RE: Win32:SwizDrop-BE [Trj] in MSP? by CookieRevised on 07-26-2012 at 01:06 PM

quote:
Originally posted by Brickstin
G:\C eMachines\Download\Messengers\Win MSN MSGR\MPL\MPL4\4.83.376_MsgPlusLive-483.exe    a variant of Win32/Adware.CiDHelp application

G:\C eMachines\Download\Messengers\Win MSN MSGR\MPL\MPL4\4.83.380_MsgPlusLive.exe    a variant of Win32/Adware.CiDHelp application

I'm just letting you guys know.. theres more..
Yup, that's correct.

As the warnings themself explain: they* contain a variation (way less intrusive AND always optional) of an adware program made by CiD. You can also see this explained in the setup of these installer where there is always the choice to install this adware program or not. Thus note that not all warnings coming from an anti-viri like that are severe threats.


* However, note that some of these warnings are wrong though!!! There were some different versions of the Plus! builds 4.83.376 and higher. Some did contain an optional adware sponsor from CiD (though, way less intrusive and seriously stripped down version of the common CiD adware), but most did not. Instead, they contained a way different sponsor program (still optional, as always) from Ask.com, or just an optional browser toolbar from Conduit.
RE: Win32:SwizDrop-BE [Trj] in MSP? by Brickstin on 07-27-2012 at 08:01 AM

Ok so pretty much then I am in the clear, as I have not installed those third party inclusions.

Thanks guys for the help.