Virtualdub thing contains a virus

[KneeRow]

VirusTotal.com reports (via McAfee-GW-Edition) that the FLVInputDriver.vdplugin, to be used under VirtualDub contains a virus or worm called

Heuristic.BehavesLike.Win32.Obfuscated.H

..... sadly!


Anyone got a solution?

[lordsmurf]

McAfee sucks and is giving false results.

Typical.

[Ai Haibara]

Yeah, it's a false positive. I just submitted both the plugin pack from VH's Tools page and the archive for the FLV import plugin from moitah.net to virustotal, and both scans came up with nothing flagged.

Hopefully, this works the way I think it should...
plugin pack
flv plugin

If only one or two of the scanners on virustotal's list are flagging something within the file, chances are, it's a false positive.

[KneeRow]

hmm, me scared, having gone through a painful episode with a virut32 worm, which not only infected ALL exes on my pc, but also prevented me from surfing to ALL the major antivirus sites and microsoft etc. I had to install LINUX to solve this AND use an IDE hdd as OS disk .... still.

so ....

can someone show me how to compile the source, perhaps?

[Ai Haibara]

Compile the source... for what? VirtualDub? The FLV plugin?

[jman98]

hmm, me scared, having gone through a painful episode with a virut32 worm, which not only infected ALL exes on my pc, but also prevented me from surfing to ALL the major antivirus sites and microsoft etc. I had to install LINUX to solve this AND use an IDE hdd as OS disk .... still.

I'm not giving you a 100% guarantee that this would have worked, but for future reference you could have downloaded the Trinity Rescue Kit at http://trinityhome.org. It has some anti-virus tools on it. Basically you boot it (it runs Linux) and use the tools and hope they work. So may not have been strictly necessary to install Linux to fix your problem.

[KneeRow]

hmm, me scared, having gone through a painful episode with a virut32 worm, which not only infected ALL exes on my pc, but also prevented me from surfing to ALL the major antivirus sites and microsoft etc. I had to install LINUX to solve this AND use an IDE hdd as OS disk .... still.

I'm not giving you a 100% guarantee that this would have worked, but for future reference you could have downloaded the Trinity Rescue Kit at http://trinityhome.org. It has some anti-virus tools on it. Basically you boot it (it runs Linux) and use the tools and hope they work. So may not have been strictly necessary to install Linux to fix your problem.

i actually looked at this trinity thing. Just after that, i decided on the Hirenboot cd thing. Trinity didn't work out for me one bit. And i installed ubuntu out of sheer fedded-upness.

[KneeRow]

Compile the source... for what? VirtualDub? The FLV plugin?

yes, cos Virustotal.com is giving it a McAfee warning.

[KneeRow]

Yeah, it's a false positive. I just submitted both the plugin pack from VH's Tools page and the archive for the FLV import plugin from moitah.net to virustotal, and both scans came up with nothing flagged.

Hopefully, this works the way I think it should...
plugin pack
flv plugin

If only one or two of the scanners on virustotal's list are flagging something within the file, chances are, it's a false positive.

1. if you submit the pack, chances are that it's not gonna work as well as it should since it has to unpack stuff.
2. you can not be sure it IS a false positive.

[Noahtuck]

yes, cos Virustotal.com is giving it a McAfee warning.

Post the link to the results.

How many out of how many are reporting it as a virus ?

You must have missed this thread....

https://forum.videohelp.com/threads/324781-Intel-to-buy-McAfee-for-7-68-billion

LOL!!

After looking at Ai Haibara links....
Yeah, either a false positive or it got infected after you downloaded it.

[Ai Haibara]

1. if you submit the pack, chances are that it's not gonna work as well as it should since it has to unpack stuff.
2. you can not be sure it IS a false positive.

The present-day virus scanners have no problems whatsoever unzipping the common archive formats or unpacking (normally-) packed executables and scanning the files. If that's indeed the problem, most will usually throw a "couldn't unpack <filename>"-type of message.

Granted, someone could stop a scanner from being able to unpack the archive by password-protecting it, obfuscating it, etc. But that would likely stop regular people from being able to unpack it, normally - and the virus scanner would again throw an error message like the one above.

As for being sure it's a false positive: Yes, you can't be one hundred percent sure, but if only one or two out of VirusTotal's entire stable of scanners are flagging the file, for whatever reason... it's reasonable to guess it's a false positive. In that case, it doesn't hurt to go online and ask around to see if it is, indeed, a false positive.

[KneeRow]

yes, cos Virustotal.com is giving it a McAfee warning.

Post the link to the results.

How many out of how many are reporting it as a virus ?

You must have missed this thread....

https://forum.videohelp.com/threads/324781-Intel-to-buy-McAfee-for-7-68-billion

1. this doesn't have anything to do with mcafee being right or wrong on this.
2. Everyone likes to bash big companies. I do too, but that ALSO DOES NOT mean they're wrong on this.