Download MetaTrader 5

Trojan Problem (MT4)

To add comments, please log in or register
Do you keep a blog? Place a link to MQL5.community there and make money!
marquez
123
marquez 2016.06.05 20:31 

Hi all,

I have a problem. I have installed a fresh MT4 from the official source. The installation worked without any problems, and I ever start it with the /portable option.


Now I have the problem, that everytime when I start the MT4, my Avira Antivir detects a Trojan. Please refer link: http://prntscr.com/bcpabv


I can remove it with Avira, but every time i restart MT4, Avira gets the same result. Where do MT4 gets the Files for Webinstall folder ? I have no Idea to fix this, and couldn´t find a Solution.


The strange thing is, on my other Computers this problems are not, just on this one where the screenshot comes from.


My Computerscan is completely clean (Avira with newest scan from today, 05.june.2016), so I would thank you for every tipp.


reqards,
marquez.

Screenshot
Screenshot
  • prntscr.com
Mit Lightshot geschossen
Sergey Golubev
Moderator
93724
Sergey Golubev 2016.06.05 20:43  

This is false alarm, and it was discussed many times related to Avira:

  • Look at this post, and
  • This reply from MQ: "The installer has no virus - this is another false alarm on a polymorphic engine protection. Open the properties of any of our executable file to view digital signatures - they are signed (and unchanged)".
Carl Schreiber
6592
Carl Schreiber 2016.06.05 23:53  
marquez:

Hi all,

I have a problem. I have installed a fresh MT4 from the official source. The installation worked without any problems, and I ever start it with the /portable option.


Now I have the problem, that everytime when I start the MT4, my Avira Antivir detects a Trojan. Please refer link: http://prntscr.com/bcpabv


I can remove it with Avira, but every time i restart MT4, Avira gets the same result. Where do MT4 gets the Files for Webinstall folder ? I have no Idea to fix this, and couldn´t find a Solution.


The strange thing is, on my other Computers this problems are not, just on this one where the screenshot comes from.


My Computerscan is completely clean (Avira with newest scan from today, 05.june.2016), so I would thank you for every tipp.


reqards,
marquez.

Send the file to Avira (Avira Dateiprüfung <virus(at)avira.com>) with the reference that it might be a false positive.

Alternatively, there is a web-site for this - google knows where.

Next time it will know it!

For the moment let Avira check the file, let find the problem and the you should get a little tab, right mouse click and "ignore" - that should do it for the moment.

Rizal Dwi Satria
331
Rizal Dwi Satria 2016.06.06 17:20  
Sergey Golubev:

This is false alarm, and it was discussed many times related to Avira:

  • Look at this post, and
  • This reply from MQ: "The installer has no virus - this is another false alarm on a polymorphic engine protection. Open the properties of any of our executable file to view digital signatures - they are signed (and unchanged)".
check your exe at virustotal.com
marquez
123
marquez 2016.06.06 18:14  

thank you all for your replies.


The result of Virustotal shows more positive hits:
http://prntscr.com/bd25fd

But i am also wondering, why this causes only at Path: C:\Users\MYUSER\AppData\Roaming\MetaQuotes\WebInstall\mt4clw

Not the main installation Folder where the normal Files are terminal.exe or metaeditor.exe in the installed path !


And even deleting the Webinstall folder recreates it every time.


I am weird :)

Screenshot
Screenshot
  • prntscr.com
Mit Lightshot geschossen
Marco vd Heijden
Moderator
4704
Marco vd Heijden 2016.06.06 19:11  
marquez:

thank you all for your replies.


The result of Virustotal shows more positive hits:
http://prntscr.com/bd25fd

But i am also wondering, why this causes only at Path: C:\Users\MYUSER\AppData\Roaming\MetaQuotes\WebInstall\mt4clw

Not the main installation Folder where the normal Files are terminal.exe or metaeditor.exe in the installed path !


And even deleting the Webinstall folder recreates it every time.


I am weird :)

How about using the search function ?

https://www.mql5.com/en/forum/1029

About False Alerts by Anti-Virus Software
About False Alerts by Anti-Virus Software
  • www.mql5.com
In order not to write "A False Alarm" over and over again, one more time we make a statement:
To add comments, please log in or register