Notepad++ Trojan?

[mjf]

I use Notepad++ 5.6.6 for software development (great program)
I had the installer for Notepad++ 5.6.8 sitting on my computer. McAfee just detected a Trojan & deleted the installer.

You may want to check Notepad++ 5.6.8 with your favourite antivirus software.

 

[Corrine]

Hi, mjf.

If you downloaded the installer from a legitimate site, it is possible that the detection by McAfee was a false positive.

 

[mjf]

To be honest I can't remember the site but if it wasn't the official site it would have been something like CNET.
The installer has been scanned multiple times with McAfee before so I assume it must have been a McAfee update which caused it to be hit today (when I was making an image).
A false positive is definitely a possibility. McAfee deleted it automatically so maybe I need to set a switch to make McAfee ask permission next time or Office may be the next to go.

 

[Corrine]

You could download a new installer and then double-check the file by scanning it at http://www.virustotal.com/ or Jotti's malware scan (and reporting the f/p to McAfee).

 

[seag33k]

Does Notepad ++ have an MD5 Checksum so you can verify the integrity of the download?

 

[zzz2496]

This issue has been discussed in Notepad++ forum for quite sometime... It looks like that there's a component's signature in Notepad++ that's similar to some malware/virus, IIRC it's "Scintilla" module. If you download it off Sourceforge, it's A HUGE FALSE positive indeed.

zzz2496

 

[hackerman1]

well, fwiw i just downloaded the exe-installer from sourceforge, and checked it with 2 different A/V´s.

Avast, EAM (a-squared) & MBAM says it OK...