1.10.8 windows virus?

Everything related to MakeMKV
Post Reply
Message
Author
offbeatmammal
Posts: 4
Joined: Thu May 25, 2017 8:46 pm

1.10.8 windows virus?

#1 Post by offbeatmammal » Wed Nov 29, 2017 8:35 pm

just tried to update to 1.10.8, and after .7 had uninstalled Windows Defender told me 10.8 contained a virus and trashed it!
is it a false positive, or has badness happened? :evil: :?:

Woodstock
Posts: 10327
Joined: Sun Jul 24, 2011 11:21 pm

Re: 1.10.8 windows virus?

#2 Post by Woodstock » Wed Nov 29, 2017 8:52 pm

99% chance it is a false positive, but it is worth checking. There are sites that will accept a URL to a file download, and submit it to multiple antivirus testers, and give you an overall report of the findings.

https://www.virustotal.com is one such site. You can submit the URL for the download ( http://makemkv.com/download/Setup_MakeMKV_v1.10.8.exe in this case) and it will give a report. No problems were found when I ran the test, just before posting this.

RCGNET
Posts: 1
Joined: Thu Nov 30, 2017 2:15 pm

Re: 1.10.8 windows virus?

#3 Post by RCGNET » Thu Nov 30, 2017 2:25 pm

Exactly the same thing happened to me - reported as Trojan:Win32/Azden.A!cl, zapped the executable and the shortcuts...

It seems to have been able to remove it OK, bur REALLY bizarrely, when I put the name into the search bar in chrome, I ended up at a CraigsList page ?!?!?? (Different machine otherwise I would've feared something nefarious!)

offbeatmammal
Posts: 4
Joined: Thu May 25, 2017 8:46 pm

Re: 1.10.8 windows virus?

#4 Post by offbeatmammal » Fri Dec 01, 2017 9:11 pm

grrr! even told Windows Defender to ignore the MakeMKV app but ... it still deleted it over night!

d00zah
Posts: 1586
Joined: Mon Jun 06, 2016 8:23 pm

Re: 1.10.8 windows virus?

#5 Post by d00zah » Fri Dec 01, 2017 9:37 pm

VirusTotal (et al) think it's clean:

https://www.virustotal.com/#/url/fdface ... /detection

Also passed local Avast & MalwareBytes scans, FWIW.

You might want to report a 'false positive' to your AV provider.

Starhawk
Posts: 10
Joined: Thu Mar 31, 2011 12:28 am

Re: 1.10.8 windows virus?

#6 Post by Starhawk » Wed Dec 06, 2017 7:42 pm

I downgraded to 1.10.7 because of this and haven't had any issues.

Starhawk
Posts: 10
Joined: Thu Mar 31, 2011 12:28 am

Re: 1.10.8 windows virus?

#7 Post by Starhawk » Wed Dec 06, 2017 7:47 pm

Woodstock wrote:99% chance it is a false positive, but it is worth checking. There are sites that will accept a URL to a file download, and submit it to multiple antivirus testers, and give you an overall report of the findings.

https://www.virustotal.com is one such site. You can submit the URL for the download ( http://makemkv.com/download/Setup_MakeMKV_v1.10.8.exe in this case) and it will give a report. No problems were found when I ran the test, just before posting this.
If I scan the file via the link, it reports as fine.

If I download the file and then upload it to VirusTotal, it sees:

Code: Select all

eGambit      Unsafe.AI_Score_89%

Woodstock
Posts: 10327
Joined: Sun Jul 24, 2011 11:21 pm

Re: 1.10.8 windows virus?

#8 Post by Woodstock » Wed Dec 06, 2017 10:52 pm

Did you verify the hash check for the file matches the hash file on the download page?

It should also match the hash generated by virustotal - I just verified that virustotal gave the same SHA256 hash as is published on the MakeMKV download page.

Interestingly, "eGambit" isn't even listed in the results page if you use the "check a URL" option.

WAYFLIX
Posts: 140
Joined: Fri Jun 27, 2014 11:59 pm

Re: 1.10.8 windows virus?

#9 Post by WAYFLIX » Tue Jan 09, 2018 8:57 pm

I’m getting the same thing now with 1.10.9. Downgrading to 1.10.8 solved this. Windows defender reports a Trojan virus.

Post Reply