Log in

View Full Version : SetupAnyDVD6312.exe has possibly two viri


foobaz
24th January 2008, 22:09
A multiple scan of SetupAnyDVD6312.exe at Virustotal (http://www.virustotal.com/analisis/7...2b5a6a6bd567e1) shows 2 viri. Same results for SetupAnyDVD6310.exe (http://www.virustotal.com/analisis/2...4c8dc46b12bc32).

I asked for an explanation from SlySoft but got barraged with hostile defensive replies and partial explanations. See: http://forum.slysoft.com/showthread.php?t=12721 if it is still up.

eSafe reported a suspicious Trojan/Worm and Prevx1 reported Heuristic: Suspicious File With Anti-Security Technology. I will say that eSafe often gives this same report even on software from a usually trusted source so it could very well be a false positive. Maybe eSafe is hyper-sensitive. In any case I would have expected a much more professional and constructive response than the one I got from the moderators of the SlySoft forum. Especially considering they are assumed to be supporting a product they are selling.

Maybe there are two false positives but just a word to the wise. The hostile replies are certainly at best suspicious. People who have nothing to hide don't usually react that way.

setarip_old
24th January 2008, 22:50
I've read the SlySoft Forum thread to which you provided a link - and I'm afraid all I see there is a situation where you've been given an answer by moderators and others ("Definitely a false positive, if you've downloaded from the AnyDVD site") several times, but you refuse to accept it.

I can see how this might lead to further conversation becoming "less than pleasant"...

linx05
25th January 2008, 01:27
Yup. Just make sure you download AnyDVD from the official site and you will be fine. Report the false positive to your security vendor and get them to fix it. The fault is on their end.

I think you should try to listen to the people at the Slysoft forums. They are right and are hiding nothing.

DrinkLyeAndDie
25th January 2008, 02:08
I suppose I should take offense but I won't. :p I offered a constructive response!

Thanks for the positive responses setarip_old and linx05.

:thanks:

RedFox 1
25th January 2008, 03:00
A multiple scan of SetupAnyDVD6312.exe at Virustotal (http://www.virustotal.com/analisis/7...2b5a6a6bd567e1) shows 2 viri. Same results for SetupAnyDVD6310.exe (http://www.virustotal.com/analisis/2...4c8dc46b12bc32).

I asked for an explanation from SlySoft but got barraged with hostile defensive replies and partial explanations. See: http://forum.slysoft.com/showthread.php?t=12721 if it is still up.

eSafe reported a suspicious Trojan/Worm and Prevx1 reported Heuristic: Suspicious File With Anti-Security Technology. I will say that eSafe often gives this same report even on software from a usually trusted source so it could very well be a false positive. Maybe eSafe is hyper-sensitive. In any case I would have expected a much more professional and constructive response than the one I got from the moderators of the SlySoft forum. Especially considering they are assumed to be supporting a product they are selling.

Maybe there are two false positives but just a word to the wise. The hostile replies are certainly at best suspicious. People who have nothing to hide don't usually react that way.

Now your theory has been knocked down on 2 forums, you wanna try for more. LOL.

Ajax_Undone
26th January 2008, 06:26
I have been a malware expert for a long while and have seen every type of exploit that exists almost to the point that I can pick them out of my head once someone says the first two problems they are having...

The point is that both those companies are not very good at detecting anything but bit based bias.. meaning there heuristics suck on in-depth file scanning 5 out of ten times cant tell the difference between a virus attack and a corrupt disk sector...

So your plight is laughable at best... Buy your self a virus scanner I recommend for the ease of use http://www.eset.com/ nod32 antivirus Great 99.9% accurate heuristics and low reports of false positives...

blutach
26th January 2008, 06:34
Run it thru cureit (http://freedrweb.com/cureit/) from DrWeb. It may be that your machine elsewhere has a problem that has infected your AnyDVD prog. Or that your virus checker is no good as reported on the SS forum.

And I really think foobaz was only trying to report what he thought was a problem, so let's end it here please.

Regards

DrinkLyeAndDie
27th January 2008, 05:14
Run it thru cureit (http://freedrweb.com/cureit/) from DrWeb. It may be that your machine elsewhere has a problem that has infected your AnyDVD prog. Or that your virus checker is no good as reported on the SS forum.

And I really think foobaz was only trying to report what he thought was a problem, so let's end it here please.

Regards

When I initially read the posting I checked the copy I had downloaded from Slysoft's servers. I checked it using the same website as the OP. I got the same results.

I have Kaspersky installed and it saw nothing wrong. I checked with AVG and it saw nothing. Humorously, I checked with Dr Web CureIt before you suggested it and it was given a clean bill of health. Dr Web CureIt is very handy.

Anyway, the setup file wasn't compromised on the OP's system from some pre-existing infection. I am confident that this is a false positive and anyone concerned should contact eSafe. I stated as much when the initial issue was brought up.

HAMsmoke
27th January 2008, 22:33
I see that there is a new beta release, 6.3.13 - it may help.

Irakli
27th January 2008, 23:05
Kaspersky Antivirus installed on my PC somehow manages to find a trojan when I install ffdshow, lol.

DrinkLyeAndDie
27th January 2008, 23:22
I see that there is a new beta release, 6.3.13 - it may help.

eSafe still doesn't like the installer but Prevx1 no longer flags it.

mike20021969
29th January 2008, 19:28
one thing you can probably be certain of...foobaz will continue to use anydvd.


maybe he works for dvdfab??

also,why would you buy anydvd,download it from slysoft website,scan it,then report all over different forums that it might contain viruses??
just stop using it (anydvd).you wont be missed.

blutach
29th January 2008, 22:28
mike20021969

That sort of comment is totally uncalled for and is inappropriate on this forum. It may be tolerated elsewhere but not here.

R4 strike issued.

Regards

Ajax_Undone
30th January 2008, 07:37
I think this thread should be closed blutach... All it does is bring out the worst in all of us...:mad:

We all know that false positives are un-wanted but on the same subject they can't all be avoided. So the point is lost really...:cool::rolleyes:

blutach
30th January 2008, 11:09
I see no reason to close the thread. I also see every reason for members to observe forum rules, especially rule 4.

Regards