View Full Version : Lightwave 7.5 installer is infected!
10 October 2002, 08:52 AM
I just tried to download the 7.5 updater off of the newtek website. Guess what, its infected with the "worm/friendgreet.A2" virus!!
Both copies, off of both mirrors.
10 October 2002, 03:54 PM
Did you inform Newtek?
They might be interrested to know this (duh!)
10 October 2002, 04:04 PM
I'm downloading it now to test it.....But you might also want to sheck your machine....We haven't received any repoorts of this and this file has been online for over a year.......with thousands of people downloading it.
Can you give us more info....what kind of virus software are you using..
10 October 2002, 04:07 PM
I just scanned the file and found no viruses.....
10 October 2002, 05:49 PM
yeah, I checked my machine. 4 times. Not to mention, this is about 2 hours after a fresh install of windows 2k after a full on format of the HD.
Hard drive scans clean, but the download...right as it finishes, that file gets a popup warning me of that virus. just that file.
I'm using AntiVir Personal edition.
Don't know what to tell ya.
and yeah, I emailed Newtek. No response from them tho...which is odd. you'd think they'd be concerned! >_<
Ok, I just tried 3 more times. Each time I am warned that the installer .exe has a virus. Same name as above.
10 October 2002, 09:31 PM
Ok, according to the webpage of the antiviral software I use, antiVir, the Friendgreet worm was just listed on the 25th of october.
yeah, its a german page, cause the company is german.
you can babelfish it, and its pretty legible.
I've scanned my machine 10 times today and come up clean. I only get the warning when I download the installer.
Also, the Acdsee 5.0 installer gives me a positive detection of this as well.
Time to update your virus profiles people.
Ok, more info.
its not considered a "virus" by them, because it requires consent to install... but My machine is clean of all symptoms. So looks like someone ran it over there at Newtek. Sorry guys.
10 October 2002, 10:26 PM
I'm suspect of this.
This "virus" was big news on Slashdot.org a few days ago. -- You are prompted with an installer... or atleast a consent box agreeing to their EULA. -- I don't see how any of this is hooked into the 7.5 update. -- Aswell... even if people at NewTek went to a website that prompted them to download and install the software... (it's main method of delivery).... I don't see how it could effect the 7.5 update file as all it does is send an email to everyone in your contact list... (if you use Microsoft for your email app)....
I can understand the concern.... especially for anyone working for NewTek... but I really don't see how the 7.5 update could have this.
10 October 2002, 10:40 PM
another possibility to consider is that the virus detection program is wrong, and mistakenly identified the virus.
10 October 2002, 11:13 PM
actually I think Lightwave itself is a virus, as I got infected by it, and it doesn´t seem to end.:insane:
10 October 2002, 11:49 PM
If this is a new virus it's weird that it could infect something like the LW installer that has been online for a long time....but that's coming from a silly artists.....
I've sent this to Tech Support and they are looking into it...
10 October 2002, 02:07 AM
FWIW the md5 on the file from the newtek ftp, ftp://ftp.newtek.com/pub/Patches/LightWave_Windows/lw75/LightWave_7.5_Update-Win.exe doesn't match the file on the images server, http://images.newtek.com/lightwave/downloads/LightWave_Windows/lw75/LightWave_7.5_Update-Win.exe .
10 October 2002, 07:45 AM
Thanks proton. I do appreciate.
I'm no expert at the whole vaccination thing.. all I know is that I'm getting the glaring warning here. Like the one guy was suggesting, It could be a false positive from something in the structure of the file. Dunno.
10 October 2002, 07:17 PM
I downloaded the 7.5 upgrade about 1.5 weeks ago. Had no problems, and no viruses.:hmm:
10 October 2002, 07:26 PM
Some more info on the "Friendsgreetings worm"
01 January 2006, 09:01 PM
This thread has been automatically closed as it remained inactive for 12 months. If you wish to continue the discussion, please create a new thread in the appropriate forum.