Virus alert, on windows 7 isos not directly from microsoft

[KeypoX]

This was virus (win32.sober) was found on my laptop (via anything needing command prompt) and after googling i found that it maybe a false positive http://letmegooglethatforyou.c...=win32.sober+windows+7

With multiple sites confirming it is a false positive. But I believe this to be an actual virus, because after installing windows 7 on friends laptop (downloaded from the microsoft website) and running cmd with spyboy installed it did not come up as a virus.

So despite the google search i feel this is a danger. Anyone else have some experience with this virus?

 

[RebateMonger]

Is this what you are saying:

You tested a version of Windows 7 obtained directly from Microsoft and it was clean, and a version obtained elsewhere tests positive for win32.sober?

 

[KeypoX]

Originally posted by: RebateMonger
Is this what you are saying:

You tested a version of Windows 7 obtained directly from Microsoft and it was clean, and a version obtained elsewhere tests positive for win32.sober?

That is exactly what I am saying. But google says that people are reporting it as a false positive. I generally try to get everything from newsgroups because its so fast.

Either way i guess its best to just use the ones directly from microsoft.

 

[Hyperlite]

he missed the point.

 

[KeypoX]

So has anyones system reported this virus, even when they downloaded the iso from microsoft?

 

[cudzich09]

yeah, mine did, i downloaded straight from microsoft and Avira is reporting a virus. Even though its the first program i installed on win7


Edit:I forgot to mention that it has stopped showing up now, so yeah, i dont even know what to say.

 

[Hyperlite]

Negative. Avira not showing anything. uptime= ~24 hours.

 

[LS8]

I can't check yet as right now McAfee 8.5i (Enterprise) is being blocked by the "Windows Compatibility Nazi". Now granted, this version works perfect on Vista and it works perfect on Windows 7 pre-build 7000 but now all of a sudden MS says it "doesn't work".

 

[mb]

1) That was a dbag move to post a letmegooglethatforyou link before anyone could even ask for a link.

2) Do you not understand what a false positive is?

3) Kaspersky 7 shows no threats.

4) Do you understand what a false positive is?

Originally posted by: LS8
I can't check yet as right now McAfee 8.5i (Enterprise) is being blocked by the "Windows Compatibility Nazi". Now granted, this version works perfect on Vista and it works perfect on Windows 7 pre-build 7000 but now all of a sudden MS says it "doesn't work".

Boot into Vista and scan your Win7 drive/partition?

 

[KeypoX]

Originally posted by: mb
1) That was a dbag move to post a letmegooglethatforyou link before anyone could even ask for a link.

2) Do you not understand what a false positive is?

3) Kaspersky 7 shows no threats.

4) Do you understand what a false positive is?

Originally posted by: LS8
I can't check yet as right now McAfee 8.5i (Enterprise) is being blocked by the "Windows Compatibility Nazi". Now granted, this version works perfect on Vista and it works perfect on Windows 7 pre-build 7000 but now all of a sudden MS says it "doesn't work".

Boot into Vista and scan your Win7 drive/partition?

Um what the hell are you talking about.

1. I want people to see that multiple sites are claiming a false positive.
2. If you had the reading comprehension of a 5th grader you would see I understand.
3. Good for kaspersky
4. I bet your parents wish you were a false positive

I have reinstalled with the iso from microsoft and when running the command prompt, spybot is not reporting anything. So I dunno, I guess i would try to confirm your iso is legit.

 

[AnonymouseUser]

Text

 

[mb]

Originally posted by: KeypoX

Originally posted by: mb
1) That was a dbag move to post a letmegooglethatforyou link before anyone could even ask for a link.

2) Do you not understand what a false positive is?

3) Kaspersky 7 shows no threats.

4) Do you understand what a false positive is?

Originally posted by: LS8
I can't check yet as right now McAfee 8.5i (Enterprise) is being blocked by the "Windows Compatibility Nazi". Now granted, this version works perfect on Vista and it works perfect on Windows 7 pre-build 7000 but now all of a sudden MS says it "doesn't work".

Boot into Vista and scan your Win7 drive/partition?

Um what the hell are you talking about.

1. I want people to see that multiple sites are claiming a false positive.
2. If you had the reading comprehension of a 5th grader you would see I understand.
3. Good for kaspersky
4. I bet your parents wish you were a false positive

I have reinstalled with the iso from microsoft and when running the command prompt, spybot is not reporting anything. So I dunno, I guess i would try to confirm your iso is legit.

1. So post a normal link or nothing at all. You're a douchebag for posting a LMGTFY link instead of a regular google link because no one had even replied yet asking for a link.
2. You claim to know what a false positive is, and yet you "believe this to be an actual virus" and said "despite the google search i feel this is a danger." Yeah, I think you're the one with the comprehension problems. If you understood what a false positive is, then you wouldn't be so scared about it - especially since you even acknowledged that it is a confirmed FP.
3. Yes, it's a much better at detecting real viruses than spybot. Spybot is good at detecting spyware.
4. Looks like I hit a sore spot, eh? Mommy not hug you enough?

 

[Aberforth]

Do the md5 digest check and compare the result with original ISO.

 

[KeypoX]

Originally posted by: mb

Originally posted by: KeypoX

Originally posted by: mb
1) That was a dbag move to post a letmegooglethatforyou link before anyone could even ask for a link.

2) Do you not understand what a false positive is?

3) Kaspersky 7 shows no threats.

4) Do you understand what a false positive is?

Originally posted by: LS8
I can't check yet as right now McAfee 8.5i (Enterprise) is being blocked by the "Windows Compatibility Nazi". Now granted, this version works perfect on Vista and it works perfect on Windows 7 pre-build 7000 but now all of a sudden MS says it "doesn't work".

Boot into Vista and scan your Win7 drive/partition?

Um what the hell are you talking about.

1. I want people to see that multiple sites are claiming a false positive.
2. If you had the reading comprehension of a 5th grader you would see I understand.
3. Good for kaspersky
4. I bet your parents wish you were a false positive

I have reinstalled with the iso from microsoft and when running the command prompt, spybot is not reporting anything. So I dunno, I guess i would try to confirm your iso is legit.

1. So post a normal link or nothing at all. You're a douchebag for posting a LMGTFY link instead of a regular google link because no one had even replied yet asking for a link.
2. You claim to know what a false positive is, and yet you "believe this to be an actual virus" and said "despite the google search i feel this is a danger." Yeah, I think you're the one with the comprehension problems. If you understood what a false positive is, then you wouldn't be so scared about it - especially since you even acknowledged that it is a confirmed FP.
3. Yes, it's a much better at detecting real viruses than spybot. Spybot is good at detecting spyware.
4. Looks like I hit a sore spot, eh? Mommy not hug you enough?

I believe it to be a problem even though other sites claim it as NOT a virus. Hence the false positive (http://www.viruslist.com/en/glossary?glossid=153654932). Hopefully you can understand now. The original link had a smile face in it and i didnt care to fix it.

The reason i was worried was because I got the key from microsoft and the iso from the newsgroups. On my laptop malware was found. On friends who used iso directly from microsoft did not find the same malware.

The point is if you are getting this message and google it. Do not believe everything google tells you. My laptop is running far better now, but this could be due to a clean install vs a upgrade install. Either way neither spyboy or AVG sees this malware anymore.

 

[KeypoX]

Originally posted by: AnonymouseUser
Text

yeah i couldnt find this before i installed. But thanks 🙂