Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Resolved Question

Possible Trojan Horse with Download

by Apr 10, 2014 5:59PM PDT

I referred a friend to download the VLC Player and they received this:

Virus: Gen:Trojan.Heur2.GZ.qGZ@bS@A!eci (Engine A)
File: MediaPlayerSetup[1].exe
Directory: C:\Users\Firestorm\AppData\Local\Microsoft\Windows\INetCache\Low\IE\0CCZRS4E
Process: iexplore.exe

Their computer is messed up now and I feel very responsible. Can someone please check this Cnet download please and provide feedback:
http://download.cnet.com/VLC-Media-Player/3000-13632_4-10267151.html

I really appreciate it. Thank you.

Discussion is locked

PhoenixFirestorm777 has chosen the best answer to their question. View answer
4 Posts
- Collapse + Expand Details

Best Answer

- Collapse -
Next time, head to the source.
by Forum moderator Apr 11, 2014 12:42AM PDT
- Collapse -
Alas
by PhoenixFirestorm777 Apr 11, 2014 1:25AM PDT

Thanks so very much. I looked at all of the replies and appreciate them. I will give my friend your link and I thank you. He may not have noticed the bundle that was on Cnet. There should be a disclaimer prior to clicking to download anything that my have something flagged as adware or a trojan. Nonetheless, I appreciate your response. Thanks also for those on this thread that replied. I appreciate it.

- Collapse -
Answer
Re: virus
by Forum moderator Apr 10, 2014 6:24PM PDT

- Did your friend run the install program (that MediaPlayerSetup.exe) to install VLC and the possible virus? Or did he stop after this warning from his antivirus program. In that case, nothing should have happened.
- What antivirus program is this warning coming from?
- Ask your friend to upload that program (either from the Temporary Internet Files, where it is now, or a new fresh download saved to his hard disk to virustotal.com. They ask 30 different antivirus-programs to scan it. That's a good way to see if it might be a false positive. I'see if I can do it myself also and post the result.

- If your friend still needs VLC Player, let him download it directly from the makers site http://www.videolan.org/ I've never had any problem with that. While downloads from download sites (not only CNET!) nowadays tend to come with all kind of things you don't want.

Kees

- Collapse -
Answer
Re: VLC player
by Forum moderator Apr 10, 2014 6:43PM PDT

That's strange.

I clicked on the link you gave and on that page clicked on the big green button "Download now (CNet secure download)". Then after a while I'm redirected to a page litterally full of ads, but in the yellow box at the bottom IE (10) ask me if I want to run or save a program called vlc-2.1.3-win32.exe (23.5 MB). That's not the same program you mention.
And, of course, I didn't click on any of the links in the ads on that page I giot. I know better. Your friend didn't either, I hope?

Since It's unclear niow \what your friend did download, I can't send it to virustotal.com myself. So it's up to you and him now.

Kees

Back to Spyware, Viruses, & Security forum

CNET Forums

Operating Systems
Software
Electronics & Gadgets
Hardware
Tablets & Mobile Devices
General Help
Brand Forums
Roadshow Autos
Off Topic

Other Forums

Forum Info