VIRUS WARNING!!! -- Boilsoft Splitter

[whohas]

Virus Name : "Backdoor.Pcclient" (symantec)

Application : Boilsoft Video Splitter v5.01


I love the program, one of the best I ever used.... but after a fresh windows install and updating all my virus definitions in symantec av v.10 I decided to install this trusty software. Half way through the installation it popped up with error, file access denied, followed by symantec warning of a virus.
I aborted install, let symantec delete the file, downloaded a fresh copy from their website.. tried again... SAME THING HAPPENED!


Unless somebody can explain why this is happening I suggest NOBODY installs this software !!! (or at least not version 5.01)

Anybody care to confirm this info?

[idler]

Bit strange. They are selling the 5.01-version for 2 years by now, no probs. Just scanned mine with AV, no problem. Better get rid of your Symantec AV software.

[whohas]

it's a real pain in the ass cos not one single program I ever seen is so easy to split files, especially with the custom time to-from feature, with and never fussy with any format (given u got the codecs) so this has pissed me off a bit

It's symantec antivirus (corporate) version 10, it doesn't usually have a habbit of making up virus', at least not with this virus type of name given for the type of program its related to....

downloading from :
http://www.boilsoft.net/download/bs_video_splitter.exe

just installed + scanned in a different computer, same problem.

the file it stops at when installing "c:\Program Files\Boilsoft Video Splitter\mp4util.dll" the file symantec detects before its copied "is-4V55P.tmp" (could be random local filename).

I have just installed it again, ignoring installing this specific file, it installs ok, scanned install dir, no other virus found. Perhaps its just this mp4util.dll plugin they have packed with a virus, possibly from some dodgey website they downloaded it from ?

[emuler]

Does clicking the more info button/ more details/ whatever give you anything? Sometimes it is just suspicious behaviour that is detected by the A/V. Safe to ignore.

[redcat]

Why installing software when you can have splitter without ?

WhitSoft File Splitter: No installation, only open .exe and play with it.


http://rapidshare.com/files/140180707/splitter.rar.html

[emuler]

redcat: there is a big difference between video file splitters and plain file splitters. The video splitters create files in such a way that each part can be played independently. With file splitters only the first part can be played independently.

[whohas]

Please take splitters discussion to : https://www.first-loves.com/forums/v ... php?t=4253


More info on the virus takes me here : http://www.symantec.com/security_respon ... 15-1407-99

Though it sounds general if you look in technical information it shows you more detailed info about this virus and what it does.

Sometimes programs like password cracking software is picked up as a type of virus, but thats obvious why.
Why would a .dll file linked to (i assume) mp4 encoding/decoding want to do anything like this virus is described as?

I suggest those who choose to install or who have already to delete this "mp4util.dll" file or use at your own risk.

y0u h4v4 b33n w4rn3d !

[Amadeus]

Resulting scan for v4.28

http://www.virustotal.com/analisis/41ef ... 7ed2a69724

Nothing.

Good splitter, lightweight, won't freeze your machine.

[whohas]

Antivirus software rarely penetrates deep into files compressed within executable installation files due to the way they the installation files are made.

The infected file is "mp4util.dll" that gets extracted from the main .exe, not the install file itself. Scan that file (mp4util.dll) it should be in your boilsoft folder in program files if you want to check it.

It's not likely you will be infected just be installing the program but you may if you use this mp4 decoder plugin (assuming it really is infected)

[deadarise]

I download Boilsoft Splitter with serials from torrentz.com and so I don't see any problem with it, so no virus either.

Name: Jason Mazur
Code: B54V-EWEH5-V47PU-HVX7D-75TLV-SV2SS-7NFS9-H4PF7-FGRWM