Virus Accusation

From MDLWiki

Jump to: navigation, search

MessengerDiscovery Live is sometimes detected by anti-virus solutions as containing Viruses or Trojan Horses. That is untrue.

This page is set up to debunk some myths that MessengerDiscovery Live contains a Virus or Trojan.

Contents

How To Deal With Virus Scanners

Information can be found on the following Virus scanners:
- Norton
- AVG

Virus/Trojan Warnings Debunked

Kaspersky Results

These scans were done on Kaspersky Online File Virus Scanner. with MessengerDiscovery 1.3.0340.
- Loader.exe - OK
- MessengerDiscovery Live.exe - OK
- MessengerDiscoveryToday.exe - OK

You are free to try it your self. You may have to Zip MessengerDiscovery files before uploading.


McAfee SiteAdvisor Results

McAfee lists MessengerDiscovery as:

msgdiscovery.com
We tested this site and didn't find any significant problems.

As found on: http://www.siteadvisor.com/sites/msgdiscovery.com/summary/

Trojan Debunked In Detail

Anyone is free to do a packet sniff of MessengerDiscovery Live. The only information that MessengerDiscovery Live transmits is normal Windows Live Messenger data.

Also, the installer and "MessengerDiscovery Today" load webpages so HTML data is transmitted. These web pages are:
- http://live.msgdiscovery.com/today/
- http://msgdiscovery.com/adserv/installer.php

MessengerDiscovery is constantly 'listening' for an incoming connection. This sort of behavior may be seen as Trojan like, BUT MessengerDiscovery only accepts local connections from Windows Live Messenger. It will NOT accept any IP other than 127.0.0.1 (your local IP).

Here is the exact code that goes into the listening socket in MessengerDiscovery:

Private Sub sckClient_ConnectionRequest(Index As Integer, ByVal requestID As Long)

If sckClient(Index).RemoteHostIP = sckClient(Index).LocalIP Then

sckClient(Index).Close 
sckClient(Index).LocalPort = 0 
sckClient(Index).Accept requestID
.. Additional MD socket initiation routines .. 

Else 

sckClient(Index).Close

End If


End Sub

Future Efforts

I am contacting Anti-virus companies all the time to tell them they are reading a false-positive on MessengerDiscovery Live.

I am also modifying MessengerDiscovery to avoid being detected as a virus/trojan.

You have my personal guarantee that MessengerDiscovery is safe and contains NO malware.


--Admin - Matt Holwood.

Personal tools
navigation site