Virustotal.com says: Result: 0/36 (0%) This means that they scanned it with 36 different malware-scanning engines and it came up negative.
So, let’s see what else we can do with this…
Fileadvisor is going to be crunching on it for a while. Maybe if you post the file’s MD5 hash (c0ad563cf3c522744fb57b0fb6f4f5a9) into their site (http://fileadvisor.bit9.com) later, they can give you some more info (since I just sent it to them for the first time, they’ve not yet analyzed it).
Comodo recently released a free online malware analysis tool: http://camas.comodo.com which I am currently testing with your sample. Let’s see what she can do.
…
Comodo:
[Verdict]
Not Rated as Suspicious
…
You may want to get yourself a copy of md5sum and make sure the hash for your copy matches the one I just posted in case the file was somehow modified on your system. Even if that doesn’t turn out to be the case, something else could be manipulating the process when you run it, but that seems unlikely since (I’m assuming) none of your other programs seem to be acting up.
Comodo’s analysis doesn’t show any terribly odd behavior.
If I were you, and I really wanted to know the answer, I would get myself a copy of SandboxIE and make sure there’s nothing in the sandbox, and then run this program inside the sandbox. See what it does by analyzing the files and registry entries it creates (you will find a new temporary top-level key in your registry while a sandboxed app is running, but it won’t affect the rest of your registry, and it will be gone when you stop the sandbox).
Next, close the sandbox and delete its contents again, then install your antivirus software into that sandbox. Now, with the antivirus software installed in the sandbox, reinstall eZuse to the sandbox and note any changes it makes to any of the files. In particular, get hashes of the files about which you are concerned, and
then check them again after you’ve installed eZuse into the sandbox. This will tell you if any of those files were changed.
Running anything you’re not sure about is best done with the aide of SandboxIE, especially anything that could be potentially shady.
Attached is the Defense+ log of it’s activities before I stopped it. I just couldn’t think why an mkv file converter would want to modify AVG and Comodo. I was made suspicious already because it downloaded with two viruses. I did end up with a backdoor virus as well for a while - comodo anti-virus caught that one and I don’t know how that one came in. FYI