Spyware, Viruses, & Security forum

Resolved Question

Possible Trojan Horse with Download

by PhoenixFirestorm777 / April 10, 2014 5:59 PM PDT

I referred a friend to download the VLC Player and they received this:

Virus: Gen:Trojan.Heur2.GZ.qGZ@bS@A!eci (Engine A)
File: MediaPlayerSetup[1].exe
Directory: C:\Users\Firestorm\AppData\Local\Microsoft\Windows\INetCache\Low\IE\0CCZRS4E
Process: iexplore.exe

Their computer is messed up now and I feel very responsible. Can someone please check this Cnet download please and provide feedback:
http://download.cnet.com/VLC-Media-Player/3000-13632_4-10267151.html

I really appreciate it. Thank you.

PhoenixFirestorm777 has chosen the best answer to their question. View answer
Discussion is locked
You are posting a reply to: Possible Trojan Horse with Download
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Possible Trojan Horse with Download
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.

All Answers

Best Answer chosen by PhoenixFirestorm777

Collapse -
Next time, head to the source.
by R. Proffitt Forum moderator / April 11, 2014 12:42 AM PDT
Collapse -
Alas
by PhoenixFirestorm777 / April 11, 2014 1:25 AM PDT

Thanks so very much. I looked at all of the replies and appreciate them. I will give my friend your link and I thank you. He may not have noticed the bundle that was on Cnet. There should be a disclaimer prior to clicking to download anything that my have something flagged as adware or a trojan. Nonetheless, I appreciate your response. Thanks also for those on this thread that replied. I appreciate it.

Collapse -
Answer
Re: virus
by Kees_B Forum moderator / April 10, 2014 6:24 PM PDT

- Did your friend run the install program (that MediaPlayerSetup.exe) to install VLC and the possible virus? Or did he stop after this warning from his antivirus program. In that case, nothing should have happened.
- What antivirus program is this warning coming from?
- Ask your friend to upload that program (either from the Temporary Internet Files, where it is now, or a new fresh download saved to his hard disk to virustotal.com. They ask 30 different antivirus-programs to scan it. That's a good way to see if it might be a false positive. I'see if I can do it myself also and post the result.

- If your friend still needs VLC Player, let him download it directly from the makers site http://www.videolan.org/ I've never had any problem with that. While downloads from download sites (not only CNET!) nowadays tend to come with all kind of things you don't want.

Kees

Collapse -
Answer
Re: VLC player
by Kees_B Forum moderator / April 10, 2014 6:43 PM PDT

That's strange.

I clicked on the link you gave and on that page clicked on the big green button "Download now (CNet secure download)". Then after a while I'm redirected to a page litterally full of ads, but in the yellow box at the bottom IE (10) ask me if I want to run or save a program called vlc-2.1.3-win32.exe (23.5 MB). That's not the same program you mention.
And, of course, I didn't click on any of the links in the ads on that page I giot. I know better. Your friend didn't either, I hope?

Since It's unclear niow \what your friend did download, I can't send it to virustotal.com myself. So it's up to you and him now.

Kees

Popular Forums
icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

GIVEAWAY

Turn up the volume with our Apple Byte sweeps!

Two lucky winners will take home the coveted smart speaker that lets Siri help you around your connected house. This sweepstake ends Feb. 25, 2018.