PotPlayer Virus ?

[Franckdf]

Personal ... kaspersky total security 18.0.0.405 is reporting viruses on the PotPlayer program, see:

File: C: \ Program Files (x86) \ DAUM \ PotPlayer \ PotPlayer.dll

Object Name: Trojan.Win32.Inject.akgvp

Type of Item: Trojan Horses

Time: Today 09/06/2018 18:11

What to do ? There are already two updates, the previous one and the one that the antivirus accuses with virus.

[Bernix]

try virustotal.com with this file, what other antiviruses say. By definition of spyware, there actually was K also spyware at some times. Probably it changes but Spyware search and destroy detects it on this defined rules.


Edit - Also not update each beta when software works without problem. Can be false positive. Don't know, do not use beta version with potplayer.



Bernix

[Franckdf]

try virustotal.com with this file, what other antiviruses say. By definition of spyware, there actually was K also spyware at some times. Probably it changes but Spyware search and destroy detects it on this defined rules.


Edit - Also not update each beta when software works without problem. Can be false positive. Don't know, do not use beta version with potplayer.



Bernix

Version 1.7.14255 and 1.7.14283 infected.......VERSION 1.7.14222 NOT INFECTED.


https://www.virustotal.com/#/file/13a61892fa5e8df7ed1e108b8440cd01f481b3be0cf71377ad5f...4147/detection


Kaspersky

Trojan.Win32.Inject.akgvp

ZoneAlarm

Trojan.Win32.Inject.akgvp

[Bernix]

Weird is it has same name. Probably they shared their db, and it is mistake. Usualy as far as I think same virus has different name in different AV software. But can be wrong. Also do not believe kakao should hazard with its name. But of course everything is possible one bad employe and problem is there. Remember ccleaner affair.
Try 64 bit version.


Bernix

[Bernix]

Also you are only person on virustotal who tested this file. Probably it is unique file on your computer, or nobody else tested it here. But it is less probably. Don't know.

[Franckdf]

Also you are only person on virustotal who tested this file. Probably it is unique file on your computer, or nobody else tested it here. But it is less probably. Don't know.

As soon as I installed the updates already accused this problem, I'll stay in the clean version until I see the other updates.

If it has it installed, test ok.

[mike20021969]

2/66 detect "something" so it's most likely a false positive.

I'd be more concerned about having that infection Kaspersky on my computer. It's probably infected with Novichok and spying on your every button press.

[Franckdf]

2/66 detect "something" so it's most likely a false positive.

I'd be more concerned about having that infection Kaspersky on my computer. It's probably infected with Novichok and spying on your every button press.

For me the problem is that after the installation of the last two beta updates, the antivirus already says that the potplayer is hacked and no longer use the player, just coming back to update 1.7.1422, so I do not know how to be a false positive by barring the program altogether.


I'm not wanting discord, just reporting what is going on here with the player, which I use almost from the beginning.

https://www.virustotal.com/#/file/13a61892fa5e8df7ed1e108b8440cd01f481b3be0cf71377ad5f...4147/detection

Kaspersky

Trojan.Win32.Inject.akgvp

Rising

Trojan.Inject!8.103 (CLOUD)

ZoneAlarm

Trojan.Win32.Inject.akgvp

Ad-Aware

Clean

[devilcoelhodog]

Hello dear all.

Do you know if it's safe to update the program automatically, using the program itself for searching the updates?

Should we block ( is this even possible ?) any update ( like using a firewall, for example ) if the program asks for it?

Or the problem is concerned only if I get the files available for downloading links, like here on Videohelp or even the official program homepage?

Plus: 32 and 64 bits versions have issues? Or only one of them?


---> https://virusscan.jotti.org/pt-BR/filescanjob/3474hir80s ( 64 bits )


---> https://www.virustotal.com/#/file/218729c808f87fb889226c94f365e5d53c5e0142ec4117b6427f...5922/detection ( 64 bits )


Thanks for your tips.

Best regards.

[Bernix]

@devilcoelhodog
It update just full version by default. No betas. Check first think in preference first tab. This is what you are looking for.
As Lance corporal Jones would say "Don't panic"
Now is it 3/65 but it is still beta version. Also is it sure, that file can't be infected on PC itselfs? I'm nor security specialist, but can't this file be target for some attack? Potplayer is widely spread, so can't it be target?


Bernix

[devilcoelhodog]

Hello, dear all.

Also do not believe kakao should hazard with its name. But of course everything is possible one bad employe and problem is there

Developers ( trusted ones ) that work on PotPlayer program are aware about this problem? They were notified by someone? Some fix on the way to correct such problem?

Thanks for your tips.

Best regards.

[Bernix]

Hi,
if you want to inform them there is nothing easiest. Just sign in their forum.
I still think it is false positive. Altough now another one is for it is virus. But gigant like eset, bitdefender, avast, windows defender and others seems do not detect this file.
So sign in and inform them if you want.


https://potplayer.daum.net/forum/


Bernix

[Franckdf]

Hi everyone, uploading the notifications ... I did not want the player to be infected by viruses.

I can not "log in" to the player's forum.

Kaspersky

Trojan.Win32.Inject.akgvp

Rising

Trojan.Inject!8.103 (CLOUD)

Tencent

Win32.Trojan.Inject.Htck

ZoneAlarm

Trojan.Win32.Inject.akgvp

[Havokdan]

I use the latest stable x64 version and kaspersky internet security and had no problem.

[Bernix]

As Kaspersky user, you can also submit file for further examination. False positive isn't uncommon. So try to submit it here. They promise they will look closer. I do not use Kaspersky. There are AV solution that do not let you install almost nothing. Probably I'm mad, but i stay with WD and no need any extra protection. Protection or security using internet or in real life is illusion.
You can't have any problem to login to the forum. Post it here you will not achieve nothing. Try a) potplayer forum (you have to be registered b) notify Kaspersky.


Bernix

[Franckdf]

Version 1.7.14317 clean... solved the problem.

[dontusepotplayer]

icked up a virus across two PCs with potplayer 1.7.13963

Scrobj.DLL virus
Server2.Aserdefa.ru XML loaded using regsvr32

A job well done.

Will wipe drives and usbs and reinstall os

Shoulda stuck with VLC

[Havokdan]

Is it full of "alternative" installers of potplayer, did you test with official installer? There's no problem here.

[mike20021969]

Will wipe drives and usbs and reinstall os

Hopefully that'll keep you busy for a good while.