Eset Nod32 detects VLC 2.0 as a virus

[FurryZeke]

As the title explains, I have ESET Nod32 Anti-Virus, And it detects the download site for VLC 2.0 Twoflower as potentially dangerous, Details:

Web page:
http://content.kbm2.com/Offers/3/VLCSetup.exe

Description:
Access to the web page was blocked by ESET NOD32 Antivirus.
The web page is on the list of websites with potentially dangerous content.

[nkoriyama]

That url is not related to videolan.org.
Where do you know such a URL?

Installer name for Windows is "vlc-x.x.x-win32.exe".

[Jean-Baptiste Kempf]

This is probably a scam with virus.

[danieln]

The file in question is not original VLC installer.
It is a proprietary download wrapper, similar as the one described in http://insecure.org/news/download-com-fiasco.html

free-vlc.com is one of the websites which promote this wrapper.

The wrapper is used to promote various third party sponsor software, mostly toolbars or browser plug-ins.

BTW, if somebody wants to report an undetected threat or potential false positive to ESET, please follow the instructions here:
http://kb.eset.com/esetkb/index?page=content&id=SOLN141

[Jean-Baptiste Kempf]

And it is highly illegal!

[danieln]

There is another closed-source VLC installer with a toolbar I wanted to ask you about.

The download wrapper is made by famous search portal in Czech Republic. When you search for “VLC” term at hxxp://search.seznam.cz/ it will display link to their proprietary installer at the second place in the results. The download wrapper is offered at hxxp://software.seznam.cz/vlc . The wrapper delivers their toolbar too which collects anonymous information and offers faster access to some of the portal's services.
The company claims they developed the wrapper to help inexperienced users to install popular software and to find the way how to spread the toolbar.

From the past experiences I see that VideoLan and other open-source developers do not like download wrappers.
(example: http://www.extremetech.com/computing/93 ... otivations )

What is your opinion about the VLC installer + toolbar from seznam.cz?

[Jean-Baptiste Kempf]

It should die.

[danieln]

People who make the closed-source downloader&installer bundles (GPL software + sponsor software(toolbar, browser modifier, advertising display SW, etc...)) say that they are allowed to do it.
Their argument is based on this FAQ: http://www.gnu.org/licenses/old-license ... tInstaller

I would like to bundle GPLed software with some sort of installation software. Does that installer need to have a GPL-compatible license?
No. The installer and the files it installs are separate works. As a result, the terms of the GPL do not apply to the installation software.

Do you agree with the interpretation based on the FAQ?
The original license (not just FAQ) allows mere aggregation of another work not based on the Program with the Program but mere aggregation is limited to "putting them side by side on the same CD-ROM or hard disk" example.
The license (not FAQ) explains: "But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it."

I think they overlooked the Trademark issue (VideoLAN, VLC, VLC media player and x264 are trademarks owned by VideoLAN and they shouldn't be used by closed-source).