koepi.info listed as malware domain by hphosts

[paolo1983]

Hi everyone, I started thinking this could be off topic, but is related to something that's almost interesting for everyone here...

I started using hostsman and hphosts blocklist to filter bad sites..
But don't know why koepi.info is listed there since 22 september
... I've downloaded many times xvid from koepi, it should be good...

If this is a false positive, site owner or some admin could contact hphosts and fix this problem...

You can check this
http://www.hosts-file.net/?s=koepi.info

hphosts is used by many users and site admins, and is very reliable...
Please explain me :-)

[LoRd_MuldeR]

Well, Koepi is providing Xvid builds for a long time now and I think most sites that offer Xvid binaries simply mirror Koepi's builds. So I'd assume those builds are safe to use.

Only the "hphosts" operators could tell use why they did blacklist the site. But false positives are a widespread disease these days :rolleyes:

If you don't trust Koepi's builds now, you should upload the "suspicious" file at http://www.virustotal.com/ and let it be checked with multiple A/V engines...

[paolo1983]

Maybe I've found the reason in the meanwhile...

Softwares that includes browser toolbars (like ask toolbar, similar things) are listed as "malware" , also pdfcreator, foxit, and comodo firewall are blacklisted...

IMHO a toolbar that can be deselected should not be listed as malware... however, this could explain the thing...

[LoRd_MuldeR]

Softwares that includes browser toolbars (like ask toolbar, similar things) are listed as "malware" , also pdfcreator, foxit, and comodo firewall are blacklisted...

Since when does the Xvid installer contain a browser toolbar? Can't see that here. Just checked the v1.2.2 installer :confused:

Anyway, how stupid is that? Malware != Adware. Many many programs (optionally) install such toolbars. And if the user is too stupid/lazy to deselect the Ad software during install, his own mistake...

This kind of false positives will only lead users to ignore all warnings sooner or later :rolleyes:

[LoRd_MuldeR]

Here is the complete unpacked version of Koepi's Xvid v1.2.2 installer, as downloaded from http://www.koepi.info/ today. No sign of any "unwanted" software!

http://www.mediafire.com/file/ntm0zktmyyu/Xvid-1.2.2-07062009.zip

[paolo1983]

You're right...
I whitelisted koepi, re-downloaded files and check them against my local copies, downloaded weeks ago. MD5 are the same, so files should be clean (also scanned with avira and mbam)
I tried install them , bot 1.2.1 and 1.2.2 , on a test machine, no toolbars...

Probably I remembered toolbars for something else media-related...
Since there are no toolbars, I don't know what's wrong with koepi...

Probably just a false positive...
You're right... Too much alerts = zero attention ...

But hphosts is great anyway, a good free resource...
I reported the problem, let's see what they do...

[paolo1983]

SOLVED

Quoting from hphosts forum


This appears to be an F/P so has been removed (it was unfortunately, mixed in with a slew of fake codecs when it was added).

Nothing is wrong with koepi...

Bye

[LoRd_MuldeR]

Good to hear :)