4.5 clashes with Antivirus and no file association

[ddichiera]

Installing 4.5 on Win7 x64, I get a trojan warning by my AVP (Kaspersky).

 

Assuming it doesn't actually contain a virus, I bypassed the AVP for installation.

 

Not everything went smoothly e.g. renderer issues but the main problem is that I can no longer make a file association to DVBV. When I try to open file with... I select DVBV, but it just closes the explorer window.

 

See here for AVP log:

 

14/11/2010 00:57:09 Task started Proactive Defense Kaspersky Internet Security

14/11/2010 00:57:26 Detected: PDM.Keylogger kernel mode memory patch Absent

14/11/2010 00:57:26 Detected: PDM.Keylogger kernel mode memory patch Action selected by user Absent

19/11/2010 02:08:35 Task started Proactive Defense Kaspersky Internet Security

20/11/2010 13:47:57 Task started Proactive Defense Kaspersky Internet Security

20/11/2010 13:48:10 Detected: PDM.Keylogger kernel mode memory patch Absent

20/11/2010 13:48:10 Detected: PDM.Keylogger kernel mode memory patch Action selected by user Absent

23/11/2010 00:39:24 Task started Proactive Defense Kaspersky Internet Security

23/11/2010 01:37:15 Task started Proactive Defense Kaspersky Internet Security

23/11/2010 01:41:50 Task started Proactive Defense Kaspersky Internet Security

23/11/2010 01:44:17 Task started Proactive Defense Kaspersky Internet Security

23/11/2010 01:49:23 Task started Proactive Defense Kaspersky Internet Security

23/11/2010 01:49:46 Detected: PDM.Keylogger kernel mode memory patch Absent

23/11/2010 01:49:46 Detected: PDM.Keylogger kernel mode memory patch Action selected by user Absent

23/11/2010 23:01:47 Task started Proactive Defense Kaspersky Internet Security

24/11/2010 16:38:12 Task started Proactive Defense Kaspersky Internet Security

29/11/2010 16:55:47 Task started Proactive Defense Kaspersky Internet Security

30/11/2010 19:27:16 Task started Proactive Defense Kaspersky Internet Security

03/12/2010 21:19:03 Task started Proactive Defense Kaspersky Internet Security

09/12/2010 18:46:37 Task started Proactive Defense Kaspersky Internet Security

10/12/2010 01:33:09 Task started Proactive Defense Kaspersky Internet Security

11/12/2010 15:29:18 Detected: PDM.Worm.P2P.generic G:\DVBViewer\DVBViewer 4.5\SETUP.EXE DVBViewer Pro Setup

11/12/2010 15:29:18 Detected: PDM.Worm.P2P.generic G:\DVBViewer\DVBViewer 4.5\SETUP.EXE Action selected by user DVBViewer Pro Setup

11/12/2010 15:29:18 Terminated: PDM.Worm.P2P.generic G:\DVBViewer\DVBViewer 4.5\SETUP.EXE Action selected by user DVBViewer Pro Setup

11/12/2010 15:29:20 Deleted: PDM.Worm.P2P.generic G:\DVBViewer\DVBViewer 4.5\SETUP.EXE Action selected by user DVBViewer Pro Setup

 

Dominic

[ddichiera]

oh BTW, I can't get supporttool to work. I get the following error message:

 

"This program must be started in the DVBViewer folder!"

I put it in the config folder, is that correct?

 

Dominic

[ddichiera]

And here is the supporttool output...

support.zip

[ddichiera]

Ok, found an answer to the file association issue here:

 

http://social.answers.microsoft.com/Forums/en-US/w7files/thread/8a84fcec-22df-4942-8e35-d98dbe96e327

 

Still no answer as to why my AVP is reporting a Trojan in the download...

[Tjod]

If you download the setup from the Members Section ( https://www.DVBViewer.tv/members/ ) it is a false alarm.

http://www.DVBViewer.tv/forum/topic/42790-false-alarms/

 

.generic in the detection name means that the detection was via heuristic and there false alarm happens more often.

http://en.wikipedia.org/wiki/Antivirus_software#Heuristics

[ddichiera]

Thanks for clarifying this matter.

 

I hadn't seen the post regarding false alarms even though I had done numerous searches.

 

Dominic

[clashcityrocker]

Saw the same here.

 

If you have a digital signature, you might want to consider signing the setup EXE's as it would prevent KAV from complaining.... (as it defaults to not proactive scanning digitally signed files).

[Lars_MQ]

Well a digital signature does cost a lot of money (on yearly basis) which has to come from somewhere. 15€ - 19% VAT and no follow fees for updates doesn't leave much...