Ioncube, [my scan found spyware]

Portal Home > Knowledgebase > Articles Database > Ioncube, [my scan found spyware]

Posted by DewlanceHosting, 10-10-2014, 03:53 AM
Hello, I downloaded a Ioncube Windows Installer from their website but it was blocked by my Antivirus so I disable my antivirus and install this but now when I login to my paypal account and clicked on a "update debit card", link redirected to "adfarm.mediaplex.com". Why Ioncube use Spyware in their loader? http://downloads3.ioncube.com/loader...c9_x86_ipf.zip This is a good business practice for software providers to put Spyware and virus in their softwares? Screenshot http://www.webhostingtalk.com/attach...1&d=1412927492 Thanks. Attached Thumbnails
Posted by tecsys, 10-10-2014, 04:07 AM
What antivirus is that ? Bitdefender seems to have passed that file clean. Or may be I need to upgrade my version.
Posted by Srv24x7, 10-10-2014, 10:19 AM
Hi, Which antivirus you are using. Information on this could be helpful.
Posted by (Stephen), 10-10-2014, 10:26 AM
The hash is the same as a long time back when virustotal scanned it: This file was last analysed by VirusTotal on 2014-05-21 13:20:20 UTC, it was first analysed by VirusTotal on 2014-05-21 13:20:20 UTC. Detection ratio: 0/52 You can take a look at the last analysis or analyse it again now. I am re-analyzing it now however. SHA256: 5f462bf84707091d71f623ab61fd0b0eee3520835a7154cf8dd4416b0c64904c File name: ioncube_loaders_win_vc9_x86_ipf.zip Detection ratio: 0 / 54 Analysis date: 2014-10-10 14:24:11 UTC ( 0 minutes ago ) Nothing out of 54 AV engines. Seems to me the problem was already on your computer and is injecting itself into zip files, IonCube is not to issue however that is clear. You own station IS THE PROBLEM.
Posted by KMyers, 10-10-2014, 10:28 AM
Good Afternoon, You may want to check your computer to see if you may have something on it that may have infected this file. I have downloaded it and scanned it without any issue. It is also possible that it could be a false positive. I have performed a scan on VirusTotal, which scans it through 50+ common anti-virus applications (all with updated definitions) and returned no results - https://www.virustotal.com/en/file/5...is/1412951004/ If IonCube did indeed place malware in their software, it would be the biggest scandal in the hosting industry so it is quite doubtful that they would.
Posted by devonblzx, 10-10-2014, 10:30 AM
https://www.virustotal.com/en/file/5...904c/analysis/ Shows clean on all, assuming they work with a zip file, which I believe most do. I think this either indicates a problem specific to your computer (maybe you already had a virus) or your antivirus has a false positive. Edit: Lol, looks like I wasn't the only one busy on VirusTotal in the past few minutes.
Posted by Mr Terrence, 10-10-2014, 10:33 AM
It looks like your computer is infected, I downloaded and scanned the link you pasted and it came back clean. http://prntscr.com/4uta5z
Posted by KMyers, 10-10-2014, 10:36 AM
Great minds think alike

Add to Favourites Print this Article