Utvideo adware/malware issues

[FLP437]

The last versions of utvideo have been increasingly been detected by several antivirus with adware/malware/Trojan issues .Not sure if they are false positives or if they are real threats and the last versions of this good codec do indeed integrate adware to say the least.

My Avast anti-virus cut the network connection and don’t even let me download it, if I however insist to continue it cleans it from my system and put it on the virus chest.

This is a quite good codec that keeps improving and it's a shame if the author as decided to include adware or malware. Could also be some kind of unwanted contamination in the distribution process.

VideoHelp do say it control with virustotal all the tools hosted but indeed this one is detected by this tool and it seems in this case the screening has somewhat failed.

The last version 21.1 0 is detected using www.virustotal.com with the following problems



AegisLab -Trojan.Win32.Generic.4!c
SecureAge APEX –Malicious
Avast -Win32:Malware-gen
AVG -Win32:Malware-gen
McAfee- Artemis!0A9B79C639B9
McAfee-GW-Edition -BehavesLike.Win32.AdwareFileTour.tc
Microsoft- Trojan:Win32/Wacatac.C!ml
Symantec -ML.Attribute.HighConfidence


As anyone additional information about this situation.Is it still possible to use this very good codec with confidence?

[davexnet]

Where did you download it from?

EDIT - oh it was from here. Windows Defender detected it also and removed it

[oln]

Asked the author on github, seems it's an issue with false positives.

https://github.com/umezawatakeshi/utvideo/issues/31

[FLP437]

Sent a false positive report to avast, hope it can help. What is a little strange it's a so broad spectrum of well known anti-virus detecting malware in the Installer package but as I have said before I do hope they are all false positives as this codec is an extremely useful tool.

[oln]

It is free software, so there's always the possibility of looking at the source code and compiling it oneself. I don't have any reason to think the author would intentionally put malware in there, but one can never be too careful I guess.

False-positive virus detection is a bit of an issue in general, e.g see this thread from the installer software the author uses. The fact that it's a codec and has to access certain driver/registry areas when installing probably doesn't help either.

Anti-virus vendors are often slow to respond to such things.

[FLP437]

I just received an answer from Avast after sending them a false positive report related to utvideo install package malware detection.

After analyzing the file they do confirm that it's not a false positive but instead they confirm and maintain the indication of the presence of malware in the file in question.

"Re: Avast: False positive file utvideo-21.1.0-win.exe [ ref:_00Db0Z3Sf._5000N29imYy:ref ]

support@help2.avast.com support@help2.avast.com


Hello,

Thank you for contacting Avast.

Our virus specialists have been working on this problem and they informed me that this detection is correct.

You might find the following articles to be useful:
- Avast Threat Labs - Clean guidelines: https://support.avast.com/en-ww/article/Threat-Lab-clean-guideline
- Avast Threat Labs - Mobile application clean guidelines: https://support.avast.com/en-ww/article/Threat-Lab-mobile-application-clean-guideline

Best Regards,
Prokop
The Avast Support Team"

In this moment 7 anti virus engines still detect this file with adware/malware

[_Al_]

I am no expert, but answer like that is basically an insult. Why would not they provided any details?