VirusTotal found 22/57 trojans etc. on Junction Box from Sourceforge

[panks]

Just FYI... I downloaded Junction Box from Sourceforge based on a recommendation from someone on this forum to ONLY download it from Sourceforge, and this was the result
(Sorry it got lumped together when I pasted it!)


SHA256: 8e79bdba58611b1cd9792f4f362d40115b055d1152446234e42896ad8aa210fd File name: Junctionbox100.zip Detection ratio: 22 / 57 Analysis date: 2015-03-25 00:38:53 UTC ( 2 months, 2 weeks ago )

Antivirus Result Update ALYac Trojan.Generic.12692334 20150324 AVware Trojan.Win32.Generic!BT 20150325 Ad-Aware Trojan.Generic.12692334 20150325 Avast Win32:Malware-gen 20150324 Avira TR/Agent.926208.21 20150324 BitDefender Trojan.Generic.12692334 20150324 Cyren W32/Trojan.WPIY-4336 20150325 DrWeb Trojan.Siggen6.26523 20150325 Emsisoft Trojan.Generic.12692334 (B) 20150325 F-Secure Trojan.Generic.12692334 20150324 GData Trojan.Generic.12692334 20150324 Ikarus Trojan.SuspectCRC 20150324 McAfee RDN/Generic.dx!djr 20150325 McAfee-GW-Edition RDN/Generic.dx!djr 20150324 MicroWorld-eScan Trojan.Generic.12692334 20150325 Norman Troj_Generic.YQIXQ 20150324 Qihoo-360 HEUR/QVM10.1.Malware.Gen 20150325 Symantec Trojan.Gen 20150325 TrendMicro TROJ_GE.39953FD1 20150324 TrendMicro-HouseCall Suspicious_GEN.F47V0210 20150325 VIPRE Trojan.Win32.Generic!BT 20150325 nProtect Trojan.Generic.12692334 20150324

 

[panks]

I went to the Junction Box developers website and read this... so it may be ok after all!

Executable and sourcecode are available on the project's Sourceforge page
Note that this utility has suffered some false antivirus alerts, notably from Norton and McAfee. From the coder's standpoint there is nothing much that can be done about this, it seems as if some antivirus vendors are nowadays writing code so trigger-happy that it flags ANY program which makes fundamental system-changes (which this has to do, or it would be of no use!) as potential malware. Notably, the better AV products produce no such false-alerts. My advice here is simple: If you want protection which actually works properly, you need to change your antivirus software.

 

[SIW2]

I am not familiar with Junction box, however,the general point about virus total is valid.

 

[Callender]

Any application that can make system changes can be classified as a trojan. That's the case here. It's not malicious. You shouldn't use this software unless you know what you are doing or know why you need to use it.