Trojan Horse found in FAVC105 - Please read before forming your opinions

[moviebuff2]

Hi

I just ran AVG Anti-Virus and it found trojan horse BackDoor.Hupigon3.AMVL in the program file FAVC_105.exe.

I downloaded this program file at the site provided at this forum. The site seemed legitimate since it has a pretty lengthy instruction on how to operate the program FAVC_105.

Ever since I downloaded and started using this program, I have been updating and running AVG Anti-Virus pratically on a daily basis. No trojan horse was found until today after AVG was updated.

So, perhaps this BackDoor.Hupogon3.AMVL was just identified and added to AVG's list of trojan horses.

Any ideas what this is all about?

[disturbed1]

Could be a false positive. Here's the doom9 thread on FAVC, I didn't see anything in there about a trojan.
http://forum.doom9.org/showthread.php?t=106677

BTW, FAVC is upto 1.06 now

[RickA]

I'm thinking the same.. a false positive. I don't run FAVC very often but my NOD32 antivirus software has not raised any flags.

Cheers,
Rick

[redwudz]

I got the same thing with FAVC and AVG, and I also think it's a false positive. But AVG deleted it and I haven't tried FAVC to see if it still works.

AVG in the last few months has been finding a lot of trojans that I suspect may be false. That same trojan was also found in 7-Zip and some of the Nvida drivers, also some ATI drivers. It's also interesting that a search for that trojan only comes up with references to programs that seem to contain it and nothing about the trojan itself.

It may relate to something in the programs that check to see if it's the latest version.

[moviebuff2]

So, in one simple phrase: FALSE ALARM!

[freebird73717]

I agree it's a false positive. Mr. Odwin the author of FAVC posts to this forum and doom9 often and I REALLY don't think he would put a trojan in his package. I saw another thread a couple of weeks ago about avg detecting a trojan in super. I think redwudz hit the nail on the head that avg has been coming up with a lot of possible false positives lately. Enough to make me think hard about going back to avast antivirus.

edit--
One final thought. When it is comfirmed that it is a false positive please consider editing your original post's Subject line to False Alarm or some such. That way others won't be worry about installing what in my oppinnion is a very fine piece of software.

[moviebuff2]

freebird73717,

Thanks for the thought. I have no way to change the subject title. Besides, trojan horse or not, I have no way to confirm either way. These are simply the opinions/experiences of different members.

Anyone curious/worried by the thread's headline can read through the thread and form the opinion for himself/herself.

In the meantime, I already sent AVG my concern about this possible false alarm. I don't know if I will get an answer from AVG since my version of AVG AntiVirus is a free one (i.e., no tech supports).

[disturbed1]

It appears you've downloaded the .exe installer, you could also try the .zip file of the newest version, and have AVG scan the folder to see if it finds anything.

I would also PM Mr_Odwin (the author) https://forum.videohelp.com/member149873.html

[AlanHK]

I have no way to change the subject title.

Yes you can. Click the "edit" button at the top of your post.

Besides, trojan horse or not, I have no way to confirm either way.

Your headline does not reflect that. It states it as a fact.

[moviebuff2]

AlanHK:

Fact: AVG-AntiVirus found the trojan horse BackDoor.Hupigon3.AMVL in FAVC_105.exe and deleted the program file.

So my headline: "Trojan horse found in FAVC_105" simply refected that fact.

When I found that out, I posted my concern detailing what happened, without pointing finger or making any kind of accusation towards Mr_Odwin.

If that displeases many members here, so be it. If the editors feel that I spread false information, please delete the entire message. In the future, I will not post any warnings I may find and keep them to myself.

[theewizard]

in the past I have had similar false positives from avg, and ended up deleteing then re-installing, those programs, because of this

NOW, i take those 'FINDS' with a grain of salt, look at source of the DL, do a double check of my restore status, and proceed with the install

the latest update to avg, has also turned into a system hog, tying up resources, and checking files, that I did NOT have it set to do..

i had to turn off the realtime file scan function, i be on a forum typing away and the display would be responding to my key pressess

I'm considering doing a system restore just to undo, this screwup.

also since avg has paid version, i'm beginng to think, Priacy issue have come into play, and the false identifications are intentional, but not really targeted at free video software, but NOT deliberately avoiding it either

[AlanHK]

AlanHK:
Fact: AVG-AntiVirus found the trojan horse BackDoor.Hupigon3.AMVL in FAVC_105.exe and deleted the program file.
So my headline: "Trojan horse found in FAVC_105" simply refected that fact.

No, the "fact" is that AVG detected a signature. Whether a Trojan really is in the file is not the same thing, and from the lack of any supporting evidence, and the "fact", as Google tells you, that this is often a false positive, it seems unlikely.

When I found that out, I posted my concern detailing what happened, without pointing finger or making any kind of accusation towards Mr_Odwin.

If that displeases many members here, so be it. If the editors feel that I spread false information, please delete the entire message. In the future, I will not post any warnings I may find and keep them to myself.

Sorry, whatever you intended, the title you originally chose was accusatory.

I see you have changed that, despite your original assertion this was impossible.

No one is accusing you of "spreading false information", just of being a bit careless in how you presented it.

[aedipuss]

having just switched from norton to avg i can attest that avg finds false positives. after using norton for 3 years without any infection of any kind the battery died in this comp. when it rebooted with the new battery i installed the bios date was 1980. i fixed it and norton expired. i didn't wish to pay them again for this year so i went with avg for now. avg scanned the comp and deleted 4 program .exes it didn't like, but norton had said were ok. i don't mind it erring on the safe side but i now understand the phrase "you get what you pay for" a little better.

[disturbed1]

having just switched from norton to avg i can attest that avg finds false positives. after using norton for 3 years without any infection of any kind the battery died in this comp. when it rebooted with the new battery i installed the bios date was 1980. i fixed it and norton expired. i didn't wish to pay them again for this year so i went with avg for now. avg scanned the comp and deleted 4 program .exes it didn't like, but norton had said were ok. i don't mind it erring on the safe side but i now understand the phrase "you get what you pay for" a little better.

You should go ahead and move over to Avast. We have ran it on our XP machine and 2000 machine for a number of years now with out problems. I don't know about recent versions of AVG, but AVAST is a bit heavier than the AVG from 2.5 years ago.

Trend Micro offers their online House Call for free, which when in doubt, it's always good to have a second opinion. If you hear the world is ending on one news station, I'd bet you'd turn to another news station just to make sure

[freebird73717]

I used to run avast but read about the smaller system resources needed for avg so I switched. After seeing more posts like this I really think I'll switch back to avast. Of course I don't have hardly any problems since I'm using Ubuntu linux more and more!

Moviebuff thankyou for changing your subject title. I think it is better suited. I also agree that you should PM Mr. Odwin just to let him know your concerns.

And please do continue to post your concerns in the future. It's always better to have the info out there so it can be confirmed or denied rather than keep it to yourself.

[Mr_Odwin]

False positive as several others have said. I would never do that. I am all for free software, and not for spreading trojans.

[moviebuff2]

Thank you, Mr_Odwin for clarifying the issue.

AlanHK:

It's up to one's nature to read my title as an "accusation" or simply a statement of fact. All I cared and chose to do is to present what happened in details without naming and accusing anyone.

As for changing the title; of course, I changed it immediately after I found out from you that it was possible. In many other forums, I was only able to change the content of my post, not its title.

With this, I end my contributions to this subject.

[DarrellS]

So in defense of a video program it's come to bashing one of the top antivirus programs, free or not.

I myself would rather get a false positive now and then than to have a computer full of backdoor trojans and virus which I had using a big name antivirus program that never alerted me to anything the three years that I used it.

[AlanHK]

Thank you, Mr_Odwin for clarifying the issue.
AlanHK:
It's up to one's nature to read my title as an "accusation" or simply a statement of fact. All I cared and chose to do is to present what happened in details without naming and accusing anyone.
As for changing the title; of course, I changed it immediately after I found out from you that it was possible. In many other forums, I was only able to change the content of my post, not its title.

With this, I end my contributions to this subject.

You said "I just ran AVG Anti-Virus and it found trojan horse BackDoor.Hupigon3.AMVL in the program file FAVC_105.exe."

No, it did not. It found a SIGNATURE that matched the Trojan. It's a very important distinction.

If you had actually confirmed the Trojan was present it would be a "simply a statement of fact". You did not do that.

Similarly you stated that "I have no way to change the subject title" without bothering to check that "fact".

I only ask you take care in distinguishing between facts and suspicions.

[moviebuff2]

AlanHk:

Look at the picture I attached to my message. AVG not only confirmed that it found the trojan horse, named it in the report, it also deleted the entire program file.

Geez!!!!

[moviebuff2]

To AlanHK:

Here's another picture of the AVG report. Please tell me WHERE you see in this report that AVG said it only found a "signature"? Also, please tell me if you can read AVG's comment of "No" for "Healable"?

[AlanHK]

To AlanHK:

Here's another picture of the AVG report. Please tell me WHERE you see in this report that AVG said it only found a "signature"? Also, please tell me if you can read AVG's comment of "No" for "Healable"?

Take 5 minutes to read up how they work.

Or are you now "stating as a fact" that there was indeed a Trojan in the file?


What happened to :

With this, I end my contributions to this subject.

Does that only count if you get the last word?

[moviebuff2]

I'm not claiming anything.

I am simply stating the fact:

AVG found something that they identified as "trojan horse BackDoor.Hupigon3.AMVL" in their report. Not only they said so in their report, they deleted the program file FAVC_105.exe since they deemed the file "not healable".

[moviebuff2]

"Does that only count if you get the last word'

It counts if someone like AlanHK does not "accuse" me of being "accusatory".

I hope now you have a taste of the word "accuse"

[aedipuss]

moviebuff if you would please try confirming it, maybe this would end. re-install favc and use the online scanner from trend micro.

http://housecall.trendmicro.com/

it's pretty good and if it confirms it then you win, delete it forever, if not then it's a false positive and next time tell avg to ignore it. from then on it won't bother you about it.

[AlanHK]

I'm not claiming anything.

I am simply stating the fact:

AVG found something that they identified as "trojan horse BackDoor.Hupigon3.AMVL" in their report. Not only they said so in their report, they deleted the program file FAVC_105.exe since they deemed the file "not healable".

If you'd qualified it in that way in your original post, under a similar heading, there would have been no complaints.

[aedipuss]

moviebuff - that healable crap is nonsense. avg can't take a trojan or virus out of an .exe file and leave it in a usable state. it either is the malware or it isn't.

[moviebuff2]

aedipuss,

Sorry, I don't know what you want me to confirm.


I don't have the program file FAVC_105.exe any longer. AVG deleted it and I have no desire to download the program again.

Sorry, Mr_Odwin, it's not that I doubt your words, but I intend to keep AVG and it makes absolutely no sense for me to download your program only to be deleted again by AVG.

I don't try to win anything. This is not a contest for me. When someone accused me for being "accusatory" (his word, not mine), I have the right to defend myself.

[GideonK]

AlanHK wrote:

It found a SIGNATURE

OK AlanHK, you win. Goodbye VIRUSES. Hello SIGNATURES.
as in: "Oh, your pc is acting strangely? make sure it wasn't infected with a signature".
or: "That was a nasty signature, every one in our office lost some files".

[moviebuff2]

aedipuss:

Now, this is the first time I hear "that healable crap is nonsense". All I know from my +3-year usage of AVG is that AVG helped me find many viruses/trojan horses. "Exploit" was one of them.

Also, please consider this observation:

Recently (before AVG deleted the program), I ran FAVC_105 to convert a 86-minutes AVI file to DVD, with the highest quality setting. It took me +11 hours (I stated before +10, but it actually took +11 hours) to finish.

I am using WinXP, my computer has Intel Pentium 1500MHz, 1 GB RAM. And the computer was free, no other programs were running.

I don't know if this is normal or not. Some people told me that was, some people said "not". I guess it's up to each person's interpretation.