Trojan Horse Downloader in Super???

[Slowburn]

I use AVG AntiVirus on my system (XP Home) and it has just indicated that there is a Trojan Horse Downloader virus in the latest version of Super in the following location:

C:\Program Files\eRightSoft\SUPER\mencoder\mencoder.exe

Has anyone else experienced this or is it just a false positive?

[guns1inger]

AVG is unfortunately renowned for false positives when it comes to trojans. It's the one thing about it that makes me wonder if I shouldn't start paying for something better. That's not to say it isn't right in this case, just that it does tend to cry wolf a lot.

[Slowburn]

Looks like a false positive.

AVG had an update available this morning, requiring a restart. Did this successfully, then restored the suspected file from the virus vault. Then checked it again using the updated version of AVG and nothing was detected.

Doing the Google thing, I've seen others with the same problem, same Trojan, etc.

[ron spencer]

use nod32

[MJA]

use nod32

The best AV I ever used

[hech54]

Avast for me.

[Stiiv]

SUPER is not an innocent bystander in this context, folks....as great as it is, SUPER has some creepy tendencies that you should be aware of:

It wants access to your Trusted Zone...it wants access to your network...& it wants unfettered access to the Internet, ostensibly to phone home & "look for updates". Bullsh*t. I've crippled all its communication attempts via firewall, & thankfully, it doesn't affect the program's functionality. On my machine, SUPER is now a "good citizen", & does a great job.

Restrict SUPER's communication access, & you'll be able to use it safely.

[Midzuki]

ron spencer wrote:

use nod32

The best AV I ever used

It was exactly because of an ultra~annoying ``false positive´´ that I left
AVG behind and ran to NOD32. The "victim" was an innocent web page
that I had saved on the 2ndary partition of my HDD, and after AVG had
inspected and "healed" it I could not open that file anymore --- not even in a
hex editor After having googled for a while, I discovered that
the access to the HTML file had been blocked because it contained/referred~to
some JavaScript code which might cause "problems" IF/WHEN opened with
µ$oft Word or Excel

[SanderMan]

You can check suspicious files on http://virusscan.jotti.org/ .There you can scan a file by 20 or so different virus scanners.
BTW I use Antivir

[ScorpioDragon]

When I downloaded a recent version of SUPER, I disabled SUPER's internet connectivity in my firewall settings (as I've done with previous installations of SUPER). Although I think it is a good program, I uninstalled it again since I have other programs that I prefer.

As far as false positives, I rec'd no warning from my anti-virus software ESET NOD32 Anti-Virus. NOD32 in my opinion is simply the best, I switched years ago and never looked back...extremely light on resources & superb detection.

[Ai Haibara]

SUPER is not an innocent bystander in this context, folks....as great as it is, SUPER has some creepy tendencies that you should be aware of:

It wants access to your Trusted Zone...it wants access to your network...& it wants unfettered access to the Internet, ostensibly to phone home & "look for updates". Bullsh*t. I've crippled all its communication attempts via firewall, & thankfully, it doesn't affect the program's functionality. On my machine, SUPER is now a "good citizen", & does a great job.

Restrict SUPER's communication access, & you'll be able to use it safely.

Actually, it also needs communications access to download streaming videos from the net - but if you don't need that, or have a different program to do that, you don't have to worry about that, either.

[i2hhj]

how to Restrict SUPER's communication access, (& you'll be able to use it safely).
this is from Stiiv.
However I find no fierwall settig to do this (XP home)
thanks for help
Hans
i2hhj

[Ai Haibara]

Remove SUPER (and everything else it might have installed, if possible) and use something else. There's no real need to use it, these days.
Note that it's been four years, more or less, since Stiiv's post... and SUPER behaves even worse in terms of possible spyware or malware than it did at that time. (Read through the comments on VideoHelp's Tools page for SUPER, and decide for yourself.)

[Noahtuck]

Ahhh....
One post wonder noob grave diggers.......