Alarm! WARNING! ... Downloading vlc-1.0.5-win32.e

[CH-Jan]

Download only from wellknown mirror par example *.EDU!

When downloading from mirror
http://www.videolan.org/mirror-geo.php? ... -win32.zip
[Downloading from TJE, United Kingdom] I was astonished about slow speed. Furthermore Firefox-Downloadmanager showed me, that download-size is 32,6 MB instead of 17,6 as is named on VLC-Homepage. When download was finished, Kaspersky InternetSecurity warned me, that a TROJAN HORSE is inside vlc-1.0.5-win32.zip - be aware off.

Greetings CH-Jan

UPDATE: False positive, see: viewtopic.php?f=14&t=71567#p237415

[Oksana]

Thanks for the warning. I've tried all of the edu sites and all trigger 5 virus warnings at Virustotal.

http://www.virustotal.com/analisis/b4e4 ... 1265042500

The download page states this,"Some antivirus have wrongly detected a virus in the Windows release, if you want the VideoLAN team can suggest better antivirus or operating sytem, on request."

More detailed information on what virus is detected and is a false positive, and what AV program they are recommending would be very helpful.

[VLC_help]

AV updates should remove the warnings pretty soon.

[Oksana]

I received this,

"Those are false positives. You'd better ask the antivirus vendors why they're
so stupid."

Rémi Denis-Courmont
http://www.remlab.net/
http://fi.linkedin.com/in/remidenis

If I thought it would be useful to contact all 41 virus software developers used for VirusTotal I'd spend the time necessary. I'll wait until their database is updated.

As of 11am this morning the detected threats are down from 5 to 2. That's encouraging. It's very easy to say "Detected threats are false positives", but when you are on the downloading side that's not very reassuring no matter how credible the provider.

[Jean-Baptiste Kempf]

Yes, but still, this is not our fault

[Oksana]

Out of 41 AV software companies, only one is reporting a threat this morning. I've asked them to look into it.

[Jean-Baptiste Kempf]

Out of 41 AV software companies, only one is reporting a threat this morning. I've asked them to look into it.

Thank you.

[lordpuffer]

Yes, but still, this is not our fault

Where is the best place to download 1.0.5 for Win 7 64 bit? Also, do I need to uninstall the current version first, or can I install the new version right over it....Thanks.

[Jean-Baptiste Kempf]

Yes, but still, this is not our fault

Where is the best place to download 1.0.5 for Win 7 64 bit? Also, do I need to uninstall the current version first, or can I install the new version right over it....Thanks.

You can install over.

[Oksana]

I received this,

"Hi,

I have forworded your email to our engineer, and he will check it as soon as possible.


Thank you very much for your letter.


Best regards,


2010-02-04
ghostbusters"

As of 9:30am today they are the only vendor left reporting a threat. Trojan/Win32.Monder

[Oksana]

I received this," Hi

We have analysed the sample that you submitted. There is a false positive when judge the file:libi422_yuy2_sse2_plugin.dll .

We are sorry about this. And now we have already solved this problemm.


Thanks again for your help.


Best,
2010-02-05
ghostbusters"

They aren't reporting a threat, but Sunbelt reports this threat, Win32.Malware!Drop.
At least Sunbelt makes it easy to submit a false positive and I've done that this morning.
And about an hour later I received this, "Thank you for your submission. This is indeed a false positive and will be corrected in the next definitions update later today.

Joe Frederick, MCSE, CCNA
QA Engineer
Sunbelt Software"

Impressive service.

[VLC_help]

Oksana: nice work. Thanks.

[Oksana]

You're welcome, but it pales in comparison to your team's work on VLC. We couldn't let our favorite media player to be disparaged.

1. VLC works well without fuss.
2. It doesn't take control of your system.
3. Small size compared to other media players. VLC is now 17.6mb compared to Windows Media player at a whopping 271.0 MB - 562.8 MB depending on components.
4. It's light on resources.

I use it on Windows 7, Xp and Macbook Pro with Snow Leopard.

VirusTotal is testing VLC as clean.

[toto140]

I just downloaded VLC Player and uploaded it on Virus Total website

The report, here: http://www.virustotal.com/fr/analisis/b ... 1266268728
shows ClamAV antivirus (0.96.0.0-git with virus database dated today 2010.02.15) identified a virus (Trojan.Monder-136) in the installation exec.

Therefore, I am not installing VLC Player now and all I can do is get rid of the installation package I just downloaded. I will try again when the problem is solved.

I leave security issues to the specialists: if an up to date antivirus tells me there is a virus, who will tell me I should run the exec????

[Oksana]

If you believe VLC is worth the effort, submit the file to ClamAv.

[Jean-Baptiste Kempf]

I just downloaded VLC Player and uploaded it on Virus Total website

The report, here: http://www.virustotal.com/fr/analisis/b ... 1266268728
shows ClamAV antivirus (0.96.0.0-git with virus database dated today 2010.02.15) identified a virus (Trojan.Monder-136) in the installation exec.

Therefore, I am not installing VLC Player now and all I can do is get rid of the installation package I just downloaded. I will try again when the problem is solved.

I leave security issues to the specialists: if an up to date antivirus tells me there is a virus, who will tell me I should run the exec????

A better antivirus.

[K515]

I just d/l vlc 1.0.5 a few minutes ago and installed it on my netbook - did I infect myself? I'm so upset and angry with myself.

My netbook is running Win XP and it has no virus protection since I use my macintosh computer to go on the internet and download stuff, and I transfer things like VLC to my netbook as it is kept off of all internet connection - wow when I saw this I panicked and I uninstalled my VLC 1.0.5 just now. I guess I'm infected nevertheless?

EDIT - I d/l vlc 1.0.5 from a mirror on this site.

[Jean-Baptiste Kempf]

I just d/l vlc 1.0.5 a few minutes ago and installed it on my netbook - did I infect myself? I'm so upset and angry with myself.

My netbook is running Win XP and it has no virus protection since I use my macintosh computer to go on the internet and download stuff, and I transfer things like VLC to my netbook as it is kept off of all internet connection - wow when I saw this I panicked and I uninstalled my VLC 1.0.5 just now. I guess I'm infected nevertheless?

EDIT - I d/l vlc 1.0.5 from a mirror on this site.

You are not infected.
Some antivirus are stupid, that is all.

[tobyb]

Hi,I have a problem with a download of VCL , I just downloaded to desktop to check program and video play, decided to move program to main program files on C drive but VCL will not move, also when I try to delete it will NOT DELETE. On right click of mouse to check properties it wil NOT open to disclose properties. Running on fully updated Vista and now computer running very slow! PLEASE any advice on how I can delete this program URGENTLY.
Program file shows as below when moused over.

VLC media file (.mp4) size 34.7 mb
Appreciate any advice from anyone before this harms computer.

Cheers Toby

[VLC_help]

Restarting computer should help.

[speedy05]

Kaspersky InternetSecurity is full of rubbish... use microsoft security essentials and windows firewall = a fine computer!
also if people has norton 360 or any of that = it screwed up your computer big time (it messed up my wireless connection)
i have no problem using the latest VLC player and downloading mp4 videos with clipnabber

also clean up your computer with ccleaner will clean up old junk and it should speed up in no time!

[hotblooded]

To those who complain there is an embedded trojan in VLC's installer 1.0.5 or the recent 1.1.0, or the installed program. This is for you.

First off there are NO trojans in the VLC installer or within the installed program as well, so rest
assured. Why on earth would a developer and huge hard working team of people giving their time
include a trojan in their program that would put them in a bad light and jeopadise the great name
of VLC. It's not possible with this particular bunch of people and this program if downloaded from
the recommended sites by Jean and his team. An example would be that 3 people out of a 1000 on here
might say it has a trojan. That would suggest to me those 3 are using inferior AV products and are
risking their own computers and data to harm with the extra hazard of passing trojans around. So
don't be stupid, download a reputable free AV or AntiMalware product with a far better chance of
detecting a trojan than using those cheap and nasty "hardly heard of" programs. These programs dont
have the ability to detect very well and are far more susceptible at giving false positives. If you
can't update the program with regular definitions then don't use it.

I would go further to suggest anyone "finding" a trojan in VLC installer should update their AV /
AntiMalware programs or change to a reputable tried, tested and reliable one. Search the net, check
AV and AntiMalware forums to find the best ones that the majority of internet users recommend and
do use. There are a lot of good free ones out there that do the job nicely if you don't wish to pay
for one. It is essential to protect your computer using ONE AntiVirus program and at least a couple
of non-conflicting AntiMalware programs as well. Use the auto update features of the programs or
manually at least weekly go download the updates. It's important to update regularly. Trojans are
more prevelant these days than viruses, so good AntiMalware programs are a must. I use at least 4
free ones and all are very good. AVG Free, A-Squared Free, MalwareBytes Anti-Malware, Spybot -
Search & Destroy for example are all extremely good, with virus definitions updateable anytime.

Do NOT complain about this program's installer or the installed program having a trojan. It does
not contain one and never has! It is as clean as the top of my bald little head. I'm sure Jean and his team would
agree with all I have said, especially about my bald little head..lol Sermon over.

[friscof]

Ditto-Had no problems until the "update"...If it ain't broke,don't fix it!

[Jean-Baptiste Kempf]

Ditto-Had no problems until the "update"...If it ain't broke,don't fix it!

Very funny.