Jump to content

Virus in latest dvbviewer service installation!


VeePee

Recommended Posts

MSE reports that svcoptions.exe and dvbvservice.exe are infected by Induc.A. Also 5 other reports suspicious file at virustotal:

 

http://www.virustotal.com/analisis/51fdc07...bd1c-1250624551

 

Is this false positive? Hopefully..

 

edit: installed package was svc_setup_1.5.0.31.exe and file sizes:

DVBVservice.exe 512 093 bytes

svcoptions.exe 379 997 bytes

 

Are these sizes what they should be?

Edited by VeePee
Link to comment

Well depends on the definition.

 

The attached zip contains a tool for delphi programmers who got in touch with this kind of plague. If you do not use Delphi, there is no need for getting scared. If you do, feel free to use this tool.

 

The viral code luckily does not contain any malicious fragments, but it definitively points to problems which should, and will be kept in mind by us.

 

Christian

delphifix.zip

Link to comment

For the german readers: http://www.heise.de/newsticker/Virus-infiz.../meldung/143679

 

Short explanation for english speakers: The virus infects delphi, a development tool, which is also used for DVBViewer, and infects every program that is produced with this infected tool. The virus does not contain any code that harms a system. In fact, on systems that don't have delphi installed it does not do a thing. Delphi programers should be aware and check their delphi version (for example with the tool provided by hackbart).

 

Just to easy the panic a bit. ;)

 

PS: oops, I didn't see the link to the english article: http://www.h-online.com/security/Virus-inf...t--/news/114031

Edited by Moses
Link to comment
Should I be worried about this as a regular DVBViewer user (version 4.2.1.0)?

No. I've checked it here (all executables of DVBViewer Pro/GE installations, TransEdit, TSPlayer and various Add-Ons), and it's clean.

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below.
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...