Forum

// Trojan detected?

To add comments, please log in or register

Tony
17
Jellybean 2009.12.29 23:51

Hi

Today the live update of MT5 terminal triggered a trojan detection in my McAfee VirusScan. However, the terminal restarted as expected (build 233). I normally get asked by McAfee to allow access for the new program, but I got the 'trojan found' alert instead.

Has something changed in MT5 that would explain this? I doubt that it's really a trojan. Do I need to disable McAfee during the live update? It would be a nuisance disabling it everytime I started MT5 in case a live update occurred.

Any other suggestions?

I use Windows XP Home Edition SP3.

Here are the McAfee Alert & detection log windows.

Cheers

Jellybean




How to Write an Indicator on the Basis of Another Indicator
In MQL5 you can write an indicator both from a scratch and on the basis of another already existing indicator, in-built in the client terminal or a custom one. And here you also have two ways - to improve an indicator by adding new calculations and graphical styles to it , or to use an indicator in-built in the client terminal or a custom one via the iCustom() or IndicatorCreate() functions.
Rodrigo Arthur D. S. Melo
5
rodrigoarthur 2009.12.30 00:01
Jellybean   :

Hi

Today the live update of MT5 terminal triggered a trojan detection in my McAfee VirusScan. However, the terminal restarted as expected (build 233). I normally get asked by McAfee to allow access for the new program, but I got the 'trojan found' alert instead.

Has something changed in MT5 that would explain this? I doubt that it's really a trojan. Do I need to disable McAfee during the live update? It would be a nuisance disabling it everytime I started MT5 in case a live update occurred.

Any other suggestions?

I use Windows XP Home Edition SP3.

Here are the McAfee Alert & detection log windows.

Cheers

Jellybean




i have two antivirus on my pc. One antivirus sayd that my other antivirus is a trojan. I only add for trusted applications :)


Tony
17
Jellybean 2009.12.30 06:44

Thanks Rodrigo.


I can't find out how to set terminal.exe to be not detected. I normally can, but VirusScan seems to be really aggressive with this. I can remove it from the quarantine, but it just detects again. All I can do is make sure VirusScan is disabled whenever I run MT5.


Some more info:

I see in the MQL4 forum that there was a similar (the same) issue back in 2007 with metalang.exe (http://forum.mql4.com/6222). It turned out to be a false detection, which was solved by McAfee updating their dat files.

I have sent the information on this to McAfee and suggested that it is a false detection. It would probably help if someone from MetaQuotes contacted them as well (if MetaQuotes agree on my assessment of the problem).


Now I sit and wait :-(


Jellybean

Paul
627
phampton 2009.12.30 06:45
rodrigoarthur   :

i have two antivirus on my pc. One antivirus sayd that my other antivirus is a trojan. I only add for trusted applications :)



I had the same problem with McAfee.  My other PC runs a different checker, and considering there's also no chorus of virus reports I assume the new terminal.exe is OK.  McAfee doesn't seem to have a feature to trust individual files, so I had to switch off the heuristic "detect unknown viruses" option.  I'll switch it on again when the next build comes out.

 

Paul

http://paulsfxrandomwalk.blogspot.com/ 

Tony
17
Jellybean 2009.12.30 06:57
phampton   :


I had the same problem with McAfee.  My other PC runs a different checker, and considering there's also no chorus of virus reports I assume the new terminal.exe is OK.  McAfee doesn't seem to have a feature to trust individual files, so I had to switch off the heuristic "detect unknown viruses" option.  I'll switch it on again when the next build comes out.

 

Paul

http://paulsfxrandomwalk.blogspot.com/ 

Thanks for the tip, Paul.

Jellybean


MQ Alexander
Moderator
63
Alexander 2010.01.06 11:23
There isn't any virus or trojan program MetaTrader 5 or any other our program.
We use the special hack protection in our software. So some antivirus programs detects this protection as trojan signs.
We contact with antivirus software developers in order to add our software into 'white list'.
It is done for the MT4 and it will be done for the MT5 too.

Paul
627
phampton 2010.01.06 12:20
Alexander   :
There isn't any virus or trojan program MetaTrader 5 or any other our program.
We use the special hack protection in our software. So some antivirus programs detects this protection as trojan signs.
We contact with antivirus software developers in order to add our software into 'white list'.
It is done for the MT4 and it will be done for the MT5 too.


Thanks Alexander.  I have switched on the  "detect unknown viruses" option again in McAfee with build 235 and it's OK

Paul

http://paulsfxrandomwalk.blogspot.com/  

przem
1
przem81621 2010.01.07 23:57
after today live update :

alert AVG:

identify virus Win32/Temida

\MetaQuotes\Terminal\D0E820.....\liveupdate\terminal.exe

FM
3
wwwin 2010.01.08 07:00

Well Alexander, then you better contact AVG too as I am getting the below pictures file as infected every time I turn on the program. This just started after the update today not before. Now it says the files are in the documents and settings/application data directory, and the files are terminal.exe. Why would .exe files be in this directory He???? Take care of this as I am not comfortable with this.

Also, I programmed and EA for MQL5, and never deleted the file, and the filed was deleted from the experts/example folder, I am 100% sure that no one deleted the file from this side. I am not giving anyboyd this power over my computer.

You know what, I cannot even do check strategies as strategy tester is not available, the EAs compiled for MQL5 do not enter any trades. I am done with beta testing. Wake me up when this Virus Alert is resolved. I am done with Beta testing until this virus thing is resolved and until I can use Strategy Tester to check EAs that I programmed.

/

To add comments, please log in or register