Author Topic: InterVideo WinDVD marked as malware?  (Read 7902 times)

0 Members and 1 Guest are viewing this topic.

s-kraft

  • Guest
InterVideo WinDVD marked as malware?
« on: October 12, 2009, 09:29:28 AM »
Hi there,

since the vps-update 091011-0, 11.10.2009 InterVideo WinDVD 5 is marked as malware:
Quote
avast! [DE000...]: Datei "C:\Programme\InterVideo\WinDVD\WinDVD.exe" ist infiziert mit "Win32:Malware-gen" Virus.

The most weird thing about it is, that only some clients mark WinDVD.exe as malware.
On others nothing happens when opening WinDVD O.o

Thx 4 help and best regards, S-Kraft

//edit: I checked the infected file on www.virustotal.com:
http://www.virustotal.com/de/analisis/f4b6e2e81d59337301db495cb0e13b2859367fe2507742fb7cf128205ed5a610-1255331614
« Last Edit: October 12, 2009, 09:52:09 AM by s-kraft »

YoKenny

  • Guest
Re: InterVideo WinDVD marked as malware?
« Reply #1 on: October 12, 2009, 10:04:22 AM »
My version 5.0.11.212 is not detected.

Look in C:\Program Files\InterVideo\WinDVD at WinDVD 5's Properties.

antonpaco

  • Guest
Re: InterVideo WinDVD marked as malware?
« Reply #2 on: October 12, 2009, 01:44:25 PM »
same probelm as s-kraft, avast detects as malware the program interwideo/windvd.exe, I did not do any action, I am sure is a FP.

s-kraft

  • Guest
Re: InterVideo WinDVD marked as malware?
« Reply #3 on: October 12, 2009, 02:55:54 PM »
The version of the "infected" WinDVD.exe is 5.0.11.637.

As a workaround i have added the location of the file to global exclusions until the bug is fixed.

johno

  • Guest
Re: InterVideo WinDVD marked as malware?
« Reply #4 on: October 12, 2009, 05:13:41 PM »
My WinDVD version detected as malware is 5.0.11.635

YoKenny

  • Guest
Re: InterVideo WinDVD marked as malware?
« Reply #5 on: October 12, 2009, 08:29:50 PM »
Windows 7 plays DVDs in Windows Media Player 11 so I don't use WinDVD anymore.

Its available for Vista and XP as well:
http://www.microsoft.com/windows/windowsmedia/default.mspx

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: InterVideo WinDVD marked as malware?
« Reply #6 on: October 12, 2009, 09:15:40 PM »
Hi

This could be because of this: http://www.prevx.com/filenames/X2468619198377826078-X1/WINDVD.EXE.html
It should have this MD5 Hash: WinDVD.exe; MD5 Hash 860a3e4dbdec62ce5c4d1616ee69fc09
or
dcce270b494f6abf78f1fd09ec86df61
You can get a good MD5 Hash verification utility for Windows from here: http://www.digital-detective.co.uk/freetools/md5.asp

polonus

« Last Edit: October 12, 2009, 09:18:09 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

johno

  • Guest
Re: InterVideo WinDVD marked as malware?
« Reply #7 on: October 13, 2009, 01:33:19 AM »
Polunus -

What is "it"? Any WinDVD.exe file? Mine does not have your checksums. Where did you get yours?

Your link for hash verification appears bad.

YoKenny

  • Guest

s-kraft

  • Guest
Re: InterVideo WinDVD marked as malware?
« Reply #9 on: October 13, 2009, 08:35:05 AM »
YoKenny: thx 4 your help, but there are about 25 computers on our network that are marked as malware^^ i´m not going to uninstall WinDVD 25 times and install WMP11 instead  ;)

As it is a bug, it should be fixed and all problems will be gone  ;D

Best regards, S-Kraft

//edit: I guess the bug is fixed  :)
« Last Edit: October 13, 2009, 08:58:13 AM by s-kraft »

johno

  • Guest
Re: InterVideo WinDVD marked as malware?
« Reply #10 on: October 13, 2009, 01:08:47 PM »
The bug appears fixed here also.
- johno