Author Topic: Win Movie Maker Portable malware?  (Read 2126 times)

Offline brightness

  • Comodo Loves me
  • ****
  • Posts: 155
Win Movie Maker Portable malware?
« on: February 29, 2012, 02:47:38 PM »
Hi all,

I have downloaded portable Windows Movie Maker 2.6 from CNet. As per instructions, I ran the runonce.exe after extracting the zip file. I think programs from CNet are certified virus- and malware-free. However, D+ says the runonce.exe is a trojan.

Can anyone confirm if this is a false positive or it is really a trojan?

Download site:

http://download.cnet.com/Portable-Movie-Maker/3000-13631_4-10913520.html

Thanks.

Offline L.A.R. Grizzly

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 1704
  • Akron, Ohio, USA
    • Grizzly's Home Page
Re: Win Movie Maker Portable malware?
« Reply #1 on: February 29, 2012, 02:56:12 PM »
Hi all,

I have downloaded portable Windows Movie Maker 2.6 from CNet. As per instructions, I ran the runonce.exe after extracting the zip file. I think programs from CNet are certified virus- and malware-free. However, D+ says the runonce.exe is a trojan.

Can anyone confirm if this is a false positive or it is really a trojan?

Download site:

http://download.cnet.com/Portable-Movie-Maker/3000-13631_4-10913520.html

Thanks.

Lower on down the c/net page shows others have also found a virus, I would be careful.

VirusTotal gives it about a 50% chance of being infected:

https://www.virustotal.com/file/c3a2e5d57c3a9003b27ccd5e9206e20a3dbccc134435399af279590321a28e54/analysis/

VirScan.org has about 50%:

http://r.virscan.org/report/f9abf4b65ce62b7e2e6fe27704639fca.html

You can submit the file to Comodo for their full analysis:

http://www.comodo.com/home/internet-security/submit.php
« Last Edit: February 29, 2012, 03:22:24 PM by L.A.R. Grizzly »
Main Machine: AMD FX-8320 8 Core 3.50 GHz - 16 GB G.Skill DDR3 RAM - nVidia GT610 Graphics
Main Machine: Win7 Pro SP1 64 Bit - Second Machine: Win7 Pro SP1 32 Bit - Laptop: WinXP Pro SP3 32 Bit
CIS 7.0.317799.4142

Offline wasgij6

  • Volunteer Moderator
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 3968
Re: Win Movie Maker Portable malware?
« Reply #2 on: February 29, 2012, 03:05:24 PM »
The download says the CNET installer is enabled. This will try and install a toolbar and change your homepage. Try downloading it without the CNET installer.
| Win 8.1 Pro (x64) | UAC Disabled | Intel i7 4770k | Asus Maximus VI Formula Mobo | Asus GeForce GTX 780 | G.Skill TridentX 16gb RAM | Samsung 840 Pro SSD |

Offline brightness

  • Comodo Loves me
  • ****
  • Posts: 155
Re: Win Movie Maker Portable malware?
« Reply #3 on: February 29, 2012, 03:13:15 PM »
Thank you L.A.R.Grizzly and wasgij6

1. I actually tried the virustotal analysis. However, I can not be sure as running an avast scan does not indicate it is a virus.

2. I downloaded the program without the toolbar. (most toolbars are nightmares, you know!)

Thanks.

Offline L.A.R. Grizzly

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 1704
  • Akron, Ohio, USA
    • Grizzly's Home Page
Re: Win Movie Maker Portable malware?
« Reply #4 on: February 29, 2012, 03:18:56 PM »
The download says the CNET installer is enabled. This will try and install a toolbar and change your homepage. Try downloading it without the CNET installer.

Look directly below that button for a direct download link.
Main Machine: AMD FX-8320 8 Core 3.50 GHz - 16 GB G.Skill DDR3 RAM - nVidia GT610 Graphics
Main Machine: Win7 Pro SP1 64 Bit - Second Machine: Win7 Pro SP1 32 Bit - Laptop: WinXP Pro SP3 32 Bit
CIS 7.0.317799.4142

Offline brightness

  • Comodo Loves me
  • ****
  • Posts: 155
Re: Win Movie Maker Portable malware?
« Reply #5 on: February 29, 2012, 06:45:22 PM »
Look directly below that button for a direct download link.

Thanks.

As my previous post said, I used the direct download link and downloaded the program without the toolbar. For me, most toolbars or BHOs are nightmares!

 

Seo4Smf 2.0 © SmfMod.Com | Smf Destek