New trojan

[maxter]

Hi. I reloaded Windows onto my PC & it seems that a new Trojan has attached itself to the Make MKV downloader for the latest version. Norton removed it, but I thought I would just keep you all in the loop that it's out there, so be careful!

maxter

[Fawkes]

hi,

not shure where you got a "Make MKV downloader" but make mkv comes from www.makemkv.com
(/download/Setup_MakeMKV_v1.8.10.exe) seems to be clean
i guess problem on your computer or false alarm

[Woodstock]

There is no MakeMKV "downloader", just the setup file you can download from this site.

I did a download of the current file from the official repository, /download/ , and it is identical to the version I downloaded just after Mike posted it. Both were scanned with an up-to-date (updated a little over 1 hour ago) AVG scanner, and found to not contain any virus, trojan, or malware.

It is VERY important to keep an eye on what you pull from internet, but Norton really isn't the tool to do it. Sometimes I think they flag things at random just to make it look like they're doing something. Norton has a history of false positives, including disabling people's systems when they "accidentally" flagged Windows system and Update files as infected, making the system unbootable.

When Norton flags ANYTHING, you're best bet is to get a second opinion.

[maxter]

Thanks Woodstock, it's eased my mind a bit. I found the Trojan (alleged) in the uninstall files during a full system scan. I downloaded the installer twice more & Norton found it again each time. I scanned Make MKV on my other platforms & they were clean, so it's a bit confusing to say the least. However, Norton removed the Trojan, which it described as a new one.

maxter

[Woodstock]

If a trojan file doesn't exist, but Norton removed something, what did it remove?

[Cadyn]

I had the same problem this weekend. I am running Symantec Endpoint Protection v12.1 and after installing MakeMKV v1.8.10 the uninst.exe file was deleted from C:\Program Files (x86)\MakeMKV\ saying it was infected with Trojan.ADH.