Its a false positive from Avira antivir tested both files with <a href="http://virustotal.com">virustotal.com</a>, and except of avira no antivirus software finds anything suspicious.<div>Here the results:</div><div>libkdewin.dll <a href="http://www.virustotal.com/file-scan/report.html?id=d616b0c6057d9191624d2b1b3bb9854f8ca1170f07813a3a49fa32b73806154e-1318673839" style="background-color: transparent; ">http://www.virustotal.com/file-scan/report.html?id=d616b0c6057d9191624d2b1b3bb9854f8ca1170f07813a3a49fa32b73806154e-1318673839</a></div>
<div>echo.exe <a href="http://www.virustotal.com/file-scan/report.html?id=f9e12a66ec1f795630a37bfb5aedd8093616e1ca610028ffae38479a0d2c94df-1318674028" style="background-color: transparent; ">http://www.virustotal.com/file-scan/report.html?id=f9e12a66ec1f795630a37bfb5aedd8093616e1ca610028ffae38479a0d2c94df-1318674028</a></div>
<div><br></div><div>I'll report echo.exe as false positive too, to avira.</div><div>Hope this will stop them from scaring me.</div><div><br></div><div><br></div><div><br><div class="gmail_quote">On 15 October <a href="tel:2011%2000" value="+49201100" target="_blank">2011 00</a>:21, <span dir="ltr"><<a href="mailto:zonken@web.de" target="_blank">zonken@web.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,<br>
I followed the following links on your hp tp try amarok for windows:<br>
<a href="http://amarok.kde.org/wiki/Download" target="_blank">http://amarok.kde.org/wiki/Download</a><br>
<a href="http://amarok.kde.org/wiki/Download:Windows" target="_blank">http://amarok.kde.org/wiki/Download:Windows</a><br>
<a href="http://download.kde.org/stable/amarok/2.4.3/win32/amarok-setup-2.4.3-3.exe?forceredirect=1" target="_blank">http://download.kde.org/stable/amarok/2.4.3/win32/amarok-setup-2.4.3-3.exe?forceredirect=1</a><br>
<br>
After a download I installed amarok-setup-2.4.3-3.exe<br>
During installation my virus scanner detected two trojan horses:<br>
---<br>
Typ: Datei<br>
Quelle: C:\Program Files (x86)\Amarok 2.4.3\bin\echo.exe<br>
Status: Infiziert<br>
Quarantäne-Objekt: 4a4a0689.qua<br>
Wiederhergestellt: NEIN<br>
Zu Avira hochgeladen: NEIN<br>
Betriebssystem: Windows 2000/XP/VISTA Workstation<br>
Suchengine: <a href="tel:8.02.06.84" value="+498020684" target="_blank">8.02.06.84</a><br>
Virendefinitionsdatei: <a href="tel:7.11.16.18" value="+497111618" target="_blank">7.11.16.18</a><br>
Meldung: Ist das Trojanische Pferd TR/Crypt.XPACK.Gen2<br>
Datum/Uhrzeit: 14.10.2011, 23:54<br>
---<br>
Typ: Datei<br>
Quelle: C:\Program Files (x86)\Amarok 2.4.3\bin\libkdewin.dll<br>
Status: Infiziert<br>
Quarantäne-Objekt: 48ed10db.qua<br>
Wiederhergestellt: NEIN<br>
Zu Avira hochgeladen: NEIN<br>
Betriebssystem: Windows 2000/XP/VISTA Workstation<br>
Suchengine: <a href="tel:8.02.06.84" value="+498020684" target="_blank">8.02.06.84</a><br>
Virendefinitionsdatei: <a href="tel:7.11.16.18" value="+497111618" target="_blank">7.11.16.18</a><br>
Meldung: Ist das Trojanische Pferd TR/Spy.Gen<br>
Datum/Uhrzeit: 14.10.2011, 23:54<br>
---<br>
<br>
I cancelled installation process at about 20%, maybe more exists.<br>
<br>
<br>
___________________________________________________________<br>
SMS schreiben mit <a href="http://WEB.DE" target="_blank">WEB.DE</a> FreeMail - einfach, schnell und<br>
kostenguenstig. Jetzt gleich testen! <a href="http://f.web.de/?mc=021192" target="_blank">http://f.web.de/?mc=021192</a><br>
_______________________________________________<br>
Amarok mailing list<br>
<a href="mailto:Amarok@kde.org" target="_blank">Amarok@kde.org</a><br>
<a href="https://mail.kde.org/mailman/listinfo/amarok" target="_blank">https://mail.kde.org/mailman/listinfo/amarok</a><br>
</blockquote></div><br>
</div>