Kaspersky Antivirus find trojan in LZMA module?

Hi everybody!
PLEASE HELP ME SOLVE URGENT PROBLEM.
We use NSIS to create installers for our application.
Also we use Kaspersky Antivirus. Everyday I update its antivirus base.

Today, after updating antivirus base, Kasperksy detects "Trojan-Downloader.Win32.Zlob.uk" in all my installers created by NSIS. Source was found in NSIS\Stubs\lzma module.

Please HELP me: is there a real trojan in NSIS module or
this is kaspersky's wrong detetection?

is there a real trojan in NSIS module or this is kaspersky's wrong detetection?

And how do you THINK? 😳

Originally posted by galil
And how do you THINK? 😳

I hope this is KASPERSKY'S false detection.
And what do you think?
Is there someone over here who also uses KASPERSKY ANTIVIRUS with today's base to check my problem?

Please, anyone, check YOUR lzma module
(NSIS\Stubs\lzma)on kaspersky on-line check:


I'm vey interesting what they say on your lzma module.
I'll be grateful for your reports (please note version of NSIS) in this topic.

2 hours ago, Kaspersky lab has updated base, where wrong trojan detection in LZMA was fixed. It was KASPERSKY LAB's annoying error.

So topic is closed.

Updated the Wiki page.

-Stu

Looks like Kapersky's at it again with their latest virus definitions.

It's reporting Trojan-PSW.Win32.LdPinch.axb on my auctioneerpack-3.8.0.exe installer from http://auctioneeraddon.com/dl/

I guess we'll see how long it is until they fix it this time.

Confirmed Kaspersky False Positive

I can confirm that Kaspersky is now detecting false positives in NSIS-based apps. It's alarming on all the PortableApps.com apps.

You should alert Kaspersky about this false positive. As always, you can give them my e-mail address for details. If you want me to report this as well, you'd have to include the exact version numbers of everything involved.

I did notify Kaspersky. They'd fixed the issue by later that same day.