• Register
  • Help
Page 1 of 3 123 LastLast
Results 1 to 10 of 23

Topic: Aria infection

Share/Bookmark
  1. #1

    Aria infection

    An anti-virus scan on my PC just found an infection in the Aria player.

    Packed.Win32.PECompact was found in C:\Program Files\Plogue\Aria\aria_x86.dll on 4/16/2010 16:11:36

    It didn't seem to cause any problem that I'm aware of, but it's been quarantined and now GPO makes no sound. I'm not sure if I should restore it or forget about music for a while.

    Pat

  2. #2

    Re: Aria infection

    Let me guess Kaspersky?
    kaspersky is dead wrong, and still tags valid applications compressed with PECompact as viruses, when all others dont. You can send the DLL to www.virustotal.com.

    I'm afraid ARIA and Kaspersky seem to not like each other
    More info on the legitimacy of PECompact:
    http://www.bitsum.com/pecompact.shtml

    So please if you can ignore that particular warning and restore ARIA.
    I can assure you that there is no malevolence here.

    Kind Regards, and sorry for the scare.
    David Viens, Plogue Art et Technologie Inc.
    Montreal. http://www.plogue.com

  3. #3

    Re: Aria infection

    Hello Pat,

    Is your GPO the full GPO4 version downloaded directly from the Garritan site or is it a 'pocket' or 'light' version bundled with another product (such as Finale or Sibelius)?

    I have both the full GPO4 and JABB3 both downloaded directly from the Garritan site. I also have the Finale 2010 Garritan Aria (Lite) set. I just tried a virus scan of all my Garritan folders, including the C:\Program Files\Plogue\Aria\aria_x86.dll mentioned in your post and everything is squeaky clean. I use the Zone Alarm Internet Suite (Kaspersky) anti virus.
    Michael
    Patience is a virtue, sensitivity is a gift

  4. #4

    Re: Aria infection

    Oooops .. there you go. Posted the same time as David from Plogue.

    Glad all is well.
    Michael
    Patience is a virtue, sensitivity is a gift

  5. #5

    Re: Aria infection

    No Worries Micheal.

    We take all precautions againts viruses, and treat the subject very seriously.
    I guess it will be soon time to apply digital signatures as well to our exe's and DLLs for extra precautions.... this world is not what it used to ... sigh

    Regards
    David Viens, Plogue Art et Technologie Inc.
    Montreal. http://www.plogue.com

  6. #6

    Re: Aria infection

    Quote Originally Posted by David (plogue) View Post
    Let me guess Kaspersky?
    kaspersky is dead wrong, and still tags valid applications compressed with PECompact as viruses, when all others dont.
    It's ZoneAlarm, but they've OEMed Kaspersky, I think.

    Thanks for the info. I've reinstalled Aria.

    Pat

  7. #7

    Re: Aria infection

    Quote Originally Posted by Michael_uk View Post
    Hello Pat,

    Is your GPO the full GPO4 version downloaded directly from the Garritan site or is it a 'pocket' or 'light' version bundled with another product (such as Finale or Sibelius)?

    I have both the full GPO4 and JABB3 both downloaded directly from the Garritan site. I also have the Finale 2010 Garritan Aria (Lite) set. I just tried a virus scan of all my Garritan folders, including the C:\Program Files\Plogue\Aria\aria_x86.dll mentioned in your post and everything is squeaky clean. I use the Zone Alarm Internet Suite (Kaspersky) anti virus.
    It's the full GPO, but I used http://ariaengine.com/get (that was published in the Sibelius forum when the Sibelius/Aria incompatibility) to get an Aria update.

    From David's comment it seems like you should have run into the same problem. Interesting.

    Pat

  8. #8

    Re: Aria infection

    Quote Originally Posted by pokeefe View Post
    It's the full GPO, but I used http://ariaengine.com/get (that was published in the Sibelius forum when the Sibelius/Aria incompatibility) to get an Aria update.

    From David's comment it seems like you should have run into the same problem. Interesting.

    Pat
    That protection has been added only recently, so if Micheal didnt update this aria to 1094+, then that warning would not have taken place.

    Zonealarm eh? The false positive is worse than i thought.
    David Viens, Plogue Art et Technologie Inc.
    Montreal. http://www.plogue.com

  9. #9

    Re: Aria infection

    Quote:
    Originally Posted by pokeefe
    It's the full GPO, but I used http://ariaengine.com/get (that was published in the Sibelius forum when the Sibelius/Aria incompatibility) to get an Aria update.

    From David's comment it seems like you should have run into the same problem. Interesting.

    Pat


    That protection has been added only recently, so if Micheal didnt update this aria to 1094+, then that warning would not have taken place.
    So, where do we find information on updating the ARIA engine? I did not know about the last update until I bought and downloaded JaBB for ARIA and that is 1092. Garritan's main site in my account area has that one listed as current.

    Also I just downloaded the aria 1094 from the address listed in pokeefe's message and Norton warns me of it as well. I will not install with warnings from my virus protection.
    [Music is the Rhythm, Harmony and Breath of Life]
    "Music is music, and a note's a note" - Louis 'Satchmo' Armstrong

    Rich

  10. #10

    Re: Aria infection

    Quote Originally Posted by RichR View Post
    Also I just downloaded the aria 1094 from the address listed in pokeefe's message and Norton warns me of it as well. I will not install with warnings from my virus protection.
    Anti virus are split into two camps, one that flag ANY executable packers as potential threat, even when legitimate developers use it to protect their Intellectual property and the ones that don't. Symantec uses an honor system, if i understand
    http://www.symantec.com/security_res...021223-0550-99

    In which users are encouraged to respond to symantec that this is not a virus.
    In anycase the situation is worse than i thought. We cant possibly try all VST/AU hosts, on all platforms and then try ALL anti viruses?

    Bigger companies use packers that cost tens of thousands of dollars and those companies have the power to lobby the antivirus authors about the importance not to flag the exe's and dll's packed with THEIR packers. Such is not the case with bitsum.
    David Viens, Plogue Art et Technologie Inc.
    Montreal. http://www.plogue.com

Go Back to forum

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •