I.T. Discussion Community!
-Collapse +Expand
Paradox
Search Paradox Group:

Advanced
-Collapse +Expand Paradox To/From
To/FromCODEGuides
-Collapse +Expand Paradox Store
PRESTWOODSTORE

Prestwood eMagazine

November Edition
Subscribe now! It's Free!
Enter your email:

   ► MB LobbyCorel Paradox / ObjectPAL Coding BoardParadox Runtime & Distribution Topic   Print This     

Does Paradox Runtime SP3 contain a virus?

Does Paradox Runtime SP3 contain a virus? in Paradox Runtime & Distribution topic (part of our Corel Paradox / ObjectPAL Coding group).

Quick Search: Paradox   Runtime   contain   Does Paradox   Does Paradox Runtime   SP3 contain  
MikeWA
Addison, IL USA
Rank: Cadet 3rd Year

First off, I have been including the pdoxruntime9sp3setup.exe file with my database programs as my source for Paradox Runtime.  Is this the best file, or should I really be using something else?

I have had a couple of users indicate that this file contains a virus (Trojan).  This was identified through AVG although I'm finding that Trend Micro also identifies a virus or at least remnants of one.  However checks using Symantec, McAfee and Kaspersky do not indicate any threats. 

Can someone tell me if there actually is a virus or not? 

I believe it is the AxDistEx.exe file that is in questions.  I have seen mention of this issue in one other post, but its not clear to me why some virus programs are picking this up and some are not.

 Posted 7 years ago (Thread Starter)
Comment Quote
About MikeWA -Collapse +Expand
Visit Profile
Approved member.
Member subscribes to this thread with a verified email.

Post ID #13907, 6 replies
Thread Started 1/31/2010 5:39:45 PM
View Counter=3789
Last Reply Posted 9/4/2017 10:39:43 PM)
Location=Addison, IL USA 
Joined=10 years ago   MB Posts=12  
Moderator
Mike Prestwood
Prestwood IT
Prestwood IT office in Citrus Heights, CA
Rank: Fleet Admiral

Hi Mike,

Where did you get that file? The Paradox 9 Runtime SP3 from Corel's FTP site is:

ftp://ftp.corel.com/pub/Paradox/Paradox9/PRuntimeSP3.EXE

--
Mike Prestwood
Prestwood IT Solutions

 Posted 7 years ago
Comment Quote
About Mike Prestwood -Collapse +Expand
Visit Profile
Approved member.
Member subscribes to this thread with a verified email.
About Mike Prestwood

Mike Prestwood is a drummer, an author, and creator of the PrestwoodBoards online community. He is the President & CEO of Prestwood IT Solutions. Prestwood IT provides Coding, Website, and Computer Tech services. Mike has authored 6 computer books and over 1,200 articles. As a drummer, he maintains play-drums.com and has authored 3 drum books. If you have a project you wish to discuss with Mike, you can send him a private message through his PrestwoodBoards home page or call him 9AM to 4PM PST at 916-726-5675 x205.

Web Presence
Facebook, Prestwood IT Facebook page -- fan page. (Visit Me)
Twitter, Follow Prestwood IT on Twitter. (Visit Me)
LinkedIn, Prestwood IT company page on LinkedIn. (Visit Me)
YouTube, Prestwood IT YouTube Channel (Visit My Channel)
Website, My drum website where I sell my drum books. (http://www.play-drums.com)

Post ID #13909 (Level 1.1)  Reply to 13907
Thread Started 2/1/2010 9:51:03 AM
Location=Prestwood IT office in Citrus Heights, CA 
Joined=17 years ago   MB Posts=1409   KB Posts=1805   KB Comments=93   BLOG, Topics=4  
Moderator
Mike Prestwood
Prestwood IT
Prestwood IT office in Citrus Heights, CA
Rank: Fleet Admiral

Hi Mike,

Just FYI: I just scanned PRuntimeSP3.EXE with Avast and Trend Micro and neither showed a false positive for a virus. Since you said you used Trend Micro, I do believe you might have a problem. Download a fresh copy of the runtime.

--
Mike Prestwood
Prestwood IT Solutions

 Posted 7 years ago
Comment Quote
About Mike Prestwood -Collapse +Expand
Visit Profile
Approved member.
Member subscribes to this thread with a verified email.
About Mike Prestwood

Mike Prestwood is a drummer, an author, and creator of the PrestwoodBoards online community. He is the President & CEO of Prestwood IT Solutions. Prestwood IT provides Coding, Website, and Computer Tech services. Mike has authored 6 computer books and over 1,200 articles. As a drummer, he maintains play-drums.com and has authored 3 drum books. If you have a project you wish to discuss with Mike, you can send him a private message through his PrestwoodBoards home page or call him 9AM to 4PM PST at 916-726-5675 x205.

Web Presence
Facebook, Prestwood IT Facebook page -- fan page. (Visit Me)
Twitter, Follow Prestwood IT on Twitter. (Visit Me)
LinkedIn, Prestwood IT company page on LinkedIn. (Visit Me)
YouTube, Prestwood IT YouTube Channel (Visit My Channel)
Website, My drum website where I sell my drum books. (http://www.play-drums.com)

Post ID #13910 (Level 1.2)  Reply to 13907
Reply Posted 2/1/2010 10:14:21 AM
Location=Prestwood IT office in Citrus Heights, CA 
Joined=17 years ago   MB Posts=1409   KB Posts=1805   KB Comments=93   BLOG, Topics=4  
MikeWA
Addison, IL USA
Rank: Cadet 3rd Year

The pdoxruntime9sp3setup file was provided me about 5 years ago by our IT people as an upgraded version of Paradox 9 runtime so I don't really know the original source.  However, I have seen reference to it elsewhere including the  California Department of Alcohol and Drug Programs (http://www.adp.ca.gov/NNA/paradox9.shtml) where it can be directly downloaded.  Note, this file shows the possible virus too.

I have also seen reference to this problem on this website (http://www.prestwood.com/ASPSuite/KB/document_view.asp?qid=101976&GroupID=25) which suggests that this is not really a virus.

Corel's own website (customer help) suggests that some of their software and update programs gets falsely recognized as a "Trojan horse" depending on the virus program.  They specifically mention AVG although they don't specify the Paradox 9 runtime program (Answer ID 762242).

I have checked the file with Symantec, McAfee, and Kaspersky and found no problems, however AVG apparently reports it as "win32.small" (Trojan) and Trend Micro (I used Housecall) reports it as PE_CIH.DAM, some type of damaged virus file.

The actual problem file appears to be AxDistEx.exe which is part of the setup file.  This is a file from 1998 and was included on the Pardox 9 Developer's Edition CD.  I just checked this file from my setup CD with Trend Micro and it too reports the PE_CIH.DAM issue.

Did Corel distribute their program with a virus on the original CDs or is this just a false positive being reported by a limited number of virus programs?  I have end users concerned about possible infection.

 Posted 7 years ago (Thread Starter)
Comment Quote
About MikeWA -Collapse +Expand
Visit Profile
Approved member.
Member subscribes to this thread with a verified email.

Post ID #13912 (Level 2.1)  Reply to 13910 and Parent is 13907
Thread Started 2/1/2010 10:54:37 AM
Location=Addison, IL USA 
Joined=10 years ago   MB Posts=12  
Moderator
Mike Prestwood
Prestwood IT
Prestwood IT office in Citrus Heights, CA
Rank: Fleet Admiral

Hi Mike,

>>I have also seen reference to this problem on this website...

I love it when someone quotes my own writing back to me. {#biggrin} That's too awesome. Yes, I stand by what I wrote and that it is a false positive. However, I still suggest you try the file I mentioned in the previous post and let me know if you still get the false positive virus detection.

>>Did Corel distribute their program with a virus...or is this just a false positive...

It's a false positive.

--
Mike Prestwood
Prestwood IT Solutions

 Posted 7 years ago
Comment Quote
About Mike Prestwood -Collapse +Expand
Visit Profile
Approved member.
Member subscribes to this thread with a verified email.
About Mike Prestwood

Mike Prestwood is a drummer, an author, and creator of the PrestwoodBoards online community. He is the President & CEO of Prestwood IT Solutions. Prestwood IT provides Coding, Website, and Computer Tech services. Mike has authored 6 computer books and over 1,200 articles. As a drummer, he maintains play-drums.com and has authored 3 drum books. If you have a project you wish to discuss with Mike, you can send him a private message through his PrestwoodBoards home page or call him 9AM to 4PM PST at 916-726-5675 x205.

Web Presence
Facebook, Prestwood IT Facebook page -- fan page. (Visit Me)
Twitter, Follow Prestwood IT on Twitter. (Visit Me)
LinkedIn, Prestwood IT company page on LinkedIn. (Visit Me)
YouTube, Prestwood IT YouTube Channel (Visit My Channel)
Website, My drum website where I sell my drum books. (http://www.play-drums.com)

Post ID #13915 (Level 3.1)  Reply to 13912 and Parent is 13907
Thread Started 2/1/2010 4:26:14 PM
Location=Prestwood IT office in Citrus Heights, CA 
Joined=17 years ago   MB Posts=1409   KB Posts=1805   KB Comments=93   BLOG, Topics=4  
MikeWA
Addison, IL USA
Rank: Cadet 3rd Year

Thanks.  I will test the new file and include it with future distributions.

Of course right now I'm dealing with a complaint that "my program" contains a virus that was detected by AVG and still infected someone's computer.  This of course took hours to remove.

Personally, I would think that if the antivirus actually detected a real virus that it would have also prevented an infection, but now of course I'm stuck with the task of convincing others on the earlier distribution that the file is safe to use.

Note, that others that I have polled who use different antivirus programs have reported that no virus was detected.

 Posted 7 years ago (Thread Starter)
Comment Quote
About MikeWA -Collapse +Expand
Visit Profile
Approved member.
Member subscribes to this thread with a verified email.

Post ID #13917 (Level 4.1)  Reply to 13915 and Parent is 13907
Thread Started 2/1/2010 4:34:54 PM
Location=Addison, IL USA 
Joined=10 years ago   MB Posts=12  
... Most Recent Post
Moderator
Mike Prestwood
Prestwood IT
Prestwood IT office in Citrus Heights, CA
Rank: Fleet Admiral

Yah, that's tough. Managing expectations and perception is a sticky wicket.

--
Mike Prestwood
Prestwood IT Solutions

 Posted 7 years ago
Comment Quote
About Mike Prestwood -Collapse +Expand
Visit Profile
Approved member.
Member subscribes to this thread with a verified email.
About Mike Prestwood

Mike Prestwood is a drummer, an author, and creator of the PrestwoodBoards online community. He is the President & CEO of Prestwood IT Solutions. Prestwood IT provides Coding, Website, and Computer Tech services. Mike has authored 6 computer books and over 1,200 articles. As a drummer, he maintains play-drums.com and has authored 3 drum books. If you have a project you wish to discuss with Mike, you can send him a private message through his PrestwoodBoards home page or call him 9AM to 4PM PST at 916-726-5675 x205.

Web Presence
Facebook, Prestwood IT Facebook page -- fan page. (Visit Me)
Twitter, Follow Prestwood IT on Twitter. (Visit Me)
LinkedIn, Prestwood IT company page on LinkedIn. (Visit Me)
YouTube, Prestwood IT YouTube Channel (Visit My Channel)
Website, My drum website where I sell my drum books. (http://www.play-drums.com)

Post ID #13920 (Level 5.1)  Reply to 13917 and Parent is 13907
Thread Started 2/1/2010 4:53:16 PM
Location=Prestwood IT office in Citrus Heights, CA 
Joined=17 years ago   MB Posts=1409   KB Posts=1805   KB Comments=93   BLOG, Topics=4  

Revive Thread!

Add a comment to revive this old thread and make this archived thread more useful.

Write a Comment...
Full Editor
...
Sign in...

If you are a member, Sign In. Or, you can Create a Free account now.


Anonymous Post (text-only, no HTML):

Enter your name and security key.

Your Name:
Security key = P1235A1
Enter key:
Icon: A Post    Thread    Idea    Important!    Cool    Sad    No    Yes    Includes a Link...   
Thread #13907 Counter
3789
Since 1/31/2010
-
   Contact Us!
 
PrestwoodBoards.com was developed and is maintainted by me. Do you have a question or suggestion? Do you see a problem? Contact me now. My goal is to build an ad-free and spam-free source of I.T. information with many contributers (ok to promote your website/company in your bio). Yes, my company Prestwood IT Solutions is mentioned in my bio which shows with every post, but you can contribute and promote your pet project too!

1,863 People Online Now!!  
Sign In to see who's online now!  Not a member? Join now. It's free!
Show more stats...


©1995-2017 PrestwoodBoards  [Security & Privacy]
Professional IT Services: Coding | Websites | Computer Tech