Symantec Calling VLC Adware

[ddod]

I have users reporting to me today that Symantec is flagging the VLC uninstaller exe as a virus. It is calling it adware.CPush. I have seen a screen shot of the "Symantec Antivirus Notification". Anyone else seeing this?

[Jean-Baptiste Kempf]

OMG. not seen it yet, but this is wrong as VLC uninstaller is build on a linux box using a NSIS Script.

[tonsofpcs]

What version was this, ddod? Can we see the screenshot?

[ddod]

I would gladly give you the screenshot, is there an easy to upload it to the forum? I only had it reported from one lab and I am not sure what version they were running. I will find out.

[CloudStalker]

...is there an easy to upload it to the forum?

You could use this to upload, just select the screenshot from your computer, upload it and post the URL here.

In regards to the whole virus thing, it would be useful to note where these users downloaded this program, as not all users download from the official site.

[dionoea]

In case anyone cares: http://mirrors.videolan.org checks that the binaries hosted by official VLC mirrors aren't corrupted every day.

[ddod]

Sorry, I have been a way for a few days. Here is a link to a screen shot that was provided to me by one of our users. '

http://www.screencast.com/users/Bradley ... 738c134038

As you can tell, the installer in the image is actually a custom installer that we built. We have not altered the VLC files in any way in our installer. We simply removed a few DLL's and then ran the NSIS script again. However, we have seen this on a few machines that used the installer from the website as well. That being said, we haven't had any more reports since last Tuesday.

Thanks again.

[dionoea]

Hum ... I can't really help you. I guess that you could email Symantec to ask them if this is a false positive, which they would then have to fix. Sorry,

[tonsofpcs]

I'm wondering where "vlc-byu-0.8.6b-win32.exe" came from.

[funman]

a checksum would be welcomed