Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: artamangr on November 24, 2005, 11:53:46 AM

Title: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: artamangr on November 24, 2005, 11:53:46 AM
Hi everyone.
Having updated to the latest vps (VPS 0547-3, 24.11.2005) which added detection of this worm, i almost immediately got notified that QuickTimeStreaming.qtx in C:\Program Files\QuickTime\QTsystem is infected by it. Having the file moved to the chest, apart from QuickTime that stopped working after that also the instant messenger Trillian stopped working (it seems strange regarding trillian, but since last night -when it was working properly- i didnt add any software or anything...i just boot this morning the laptop, antivirus updated, file moved to chest, trillian stopped working...). Also, regarding QuickTime i havent been using it at all (neither i remember seeing it working through any browser) so it seems strange that some of its files got infected.
Can this be a false positive detection case?
I remember a few weeks ago, after an update, adobe32.dll was reported as infected in what turned out to be a false positive.
Thank u in advance for any advise
Cheers!
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: Lisandro on November 24, 2005, 12:04:55 PM
QuickTime is into iTunes right now.
You could have a plugin for iTunes into Trillian.
But, as you say, it could be a false positive.
Did you submit the file to Jotti or VirusTotal for analysis?
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: artamangr on November 24, 2005, 12:10:50 PM
QuickTime is into iTunes right now.
You could have a plugin for iTunes into Trillian.
But, as you say, it could be a false positive.
Did you submit the file to Jotti or VirusTotal for analysis?

Sorry, but i ve never done that before..do i just have to use the option in the virus chest 'email to alwil software'?
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: Raveny on November 24, 2005, 12:31:02 PM
Hi,
I have the same problem like you. It just happened after the daily update of avast!
I turned avast off now and everything works fine again!
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: igor on November 24, 2005, 12:44:16 PM
The problem should be fixed now.
Sorry for the troubles.
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: artamangr on November 24, 2005, 12:49:42 PM
Yep,
everything works now :)
thanks
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: mafmaf on November 24, 2005, 12:58:26 PM
I just got the same detection. My VPS file just updated to 0547-3, 24.11.2005. Should I mark the QuickTimeStream.qtx file as safe?

Cheers!
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: igor on November 24, 2005, 01:02:11 PM
Invoke a VPS update - 0547-4 was released a while ago.
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: mafmaf on November 24, 2005, 01:05:02 PM
Invoke a VPS update - 0547-4 was released a while ago.


Great, thanks for that, igor :)
Title: QuickTimeStreaming.qtx gone
Post by: MikiGreen on November 24, 2005, 01:27:25 PM
I'm sorry but I didn't move QuickTimeStreaming.qtx to chest, but deleted it.
I know now we can simply use iTunes and Quicktime by taking it back from chest 'cause the latest version no longer detects QuickTimeStreaming.qtx, but How can I do without QuickTimeStreaming.qtx?

I already tried to install iTunessetup.exe again, but after installing, iTunes still shows error, and I can't even uninstall Quicktime from my PC. :-\

thanks
Title: Re: QuickTimeStreaming.qtx gone
Post by: Lisandro on November 24, 2005, 01:34:32 PM
How can I do without QuickTimeStreaming.qtx?
I can send the file to your email if you want...
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: MikiGreen on November 24, 2005, 01:38:49 PM
oh, it got solved.
Deleting Quicktime folder, I could uninstall Quicktime.

thx :D
Title: Re: QuickTimeStreaming.qtx gone
Post by: MikiGreen on November 24, 2005, 01:40:16 PM
How can I do without QuickTimeStreaming.qtx?
I can send the file to your email if you want...

Thanks but no thanks  now;)
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: Nightquest on November 24, 2005, 02:03:39 PM
Thanks for updates, now quicktime works perfectly again.
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: lantiero on November 25, 2005, 12:16:04 PM
No, unfortunately I can't get it fixed. I've been trying to re-install iTunes/QuickTime many times since yesterday when I deleted the qtx file on Avast request. I've also updated the VPS to no avail.

 Everything seem to go well as iTunes gets installed, but QT installation stops displaying error code -3.

To uninstall QT seems pretty difficult as well as it complains that the msi installation file cannot be found.

Any suggestions?
Thanks.
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: sihinch on November 25, 2005, 02:53:04 PM
I have this problem too, got a Trojan put into the virus chest now itunes and quicktime wont work.

I couldn't remove itunes or quicktime using the windows install wizard. I have tried re-installing both software programmes but neither would reload.

Stupidly I have deleted the quicktime folder from the program files directory and I still can't reinstall either itunes of quicktime.

How can I fix this, please help me! ???
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: Lisandro on November 25, 2005, 05:18:03 PM
How can I fix this, please help me! ???
If you haven't managed the Windows Registry (did not use Registry Cleaners, etc.) I think you can install these applications in another computer with the same operational system (XP), copy the installed folder to your computer and try to repair the installation (reinstall or uninstall/install).
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: lantiero on November 25, 2005, 06:13:04 PM
Auch, I manage it!  ;D

I've been trying by trial and error since yesterday.

After a thorough clean up from all references to iTunes and QuickTime I tried installing QT 7.0.3 stand alone as someone suggested, but it didn't work.

Anyway, I have eventually found an old Quicktime/iTunes installation dating back to September. I think it was in C:\windows\installer, but I can't find it anymore now, so I might be wrong.

I ran QT installer that was there (7.0.2) - OK
Then iTunes 5-something - OK

Now i had an old iTunes in need OS a security update...

Worked with it for a short while - OK - Nice.

Out and in again in windows xp.

Installed on top of the old files the last iTunes setup. It complained again about the -3 error while installing QT 7.0.3, but after that it said it was all well.

In fact I have my iTunes alive and kinkin' - at last!   ;)
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: TonyP on November 25, 2005, 11:50:07 PM
My Avast detected a "Trojan" virus which I asked it to delete. Since then my iTUnes and QT do not open and give me the message "xxxxx has encountered a problem and needs to shut down" etc. I have tried re-installing iTunes but to no avail. I cannot uninstall QT however. I get the message "Error Number 0x80040707. Description DLL function call crashed:QTInstallcode.QuicktimeuninstallProc". Now I am no techie and I need help PLEASE. Is this a problem with Avast ? I have only had it for a little while.
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: boehm10 on November 26, 2005, 03:58:53 AM
Please, please, please help.  I am suffering from the same problem.  I deleted the file instead of sending it to the chest and now my i-tunes wont work, nor will my quicktime.  I cannot uninstall quicktime and when i re-install i-tunes it does not help either.    Please tell me it can be fixed, I feel helpless.

Thanks,
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: lantiero on November 26, 2005, 10:41:41 AM
Tony, boehm, if you haven't touched anything, getting QuickTimeStreaming.qtx back in place should do the trick.

However, if you deleted it, the only thing is to get it from someone, but if you've deleted folders and/or uninstalled QT or iTunes I can suggest only what I've done as described on my previous message. I can't say for sure if that will help you too, I'm afraid.

Let us know.
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: moose2001 on November 27, 2005, 05:37:20 PM
Hi

I've tried all the suggestions above and nothing will get itunes working again. I've spent nearly five hours trying everything I can think of to fix it. All I get on starrting itunes is the Microsoft error message screen. Any help or advice greatly appreciated otherwise I may have to jump out the window. Thanks.
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: kanalk on November 27, 2005, 05:42:09 PM
Hello

I have the same problem with iTunes and QTime....


Please send me this e-mail tooo

Thank you

Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: moose2001 on November 27, 2005, 06:07:07 PM
I've found a fix :-) (for me anyway)

Download the stand-alone player of Quicktime at the following location (Windows). Itunes works perfectly after this:

http://www.apple.com/quicktime/download/standalone.html

NB Downloading itunes with quicktime does not fix the error.

Hope this helps someone.

Thanks!
Title: Re: QuickTimeStreaming.qtx infected by Win32:Trojano-2949 [Trj]
Post by: sihinch on November 28, 2005, 09:46:23 AM
Can't get any of the suggested repairs to work, an other ideas, anyone? ???