a FABulas decrypter or Malware?
|
|
AfterDawn Addict
|
20. November 2005 @ 06:42 |
Link to this message
|
Hi Guys,
Been reading AD for sometime now and never posted a question before so bare with me LOL.
Just updated my Spybot S&D this morn. and also downloaded the newest ver. of DVDFAb Decrypter.
While installing DVDFab my Spybot popped up a warning that I was trying to install malicious software..
I stopped the instalation and tried to re-install the older ver. of DVDFab but, got the same warning...
OK, anyone got any ideas about this?
I normally run 4 or 5 spyware, adware, malware blockers and my computer is as clean as an old maids parlor.. Very seldom does anything slip past me and I don't think I have had any problems with DVDFab even though I haven't used it that much, it's a little slow for my likeing but it does a fair job even though, I will not keep a program in my house that's a spy, malicious or malware LOL..... What's your thoughts??

There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves...
This message has been edited since posting. Last time this message was edited on 20. November 2005 @ 06:44
|
Advertisement
|
  |
|
JaguarGod
Senior Member
|
20. November 2005 @ 08:43 |
Link to this message
|
This message has been edited since posting. Last time this message was edited on 20. November 2005 @ 08:44
|
JaguarGod
Senior Member
|
20. November 2005 @ 09:31 |
Link to this message
|
Wow, I was wrong, even the Platinum has this!!!! However, the filename from me was different and it changes everytime that you try to install the program.
I don't know what this thing is. I do not think that it sends info over the internet though, because it does not trigger the firewall. Maybe dvdidle can give some info about this.
Here is something I found out about one of the files it uses _shfoldr.dll:
* Category
o N/A for Activity Logger
* Danger Level
o Danger Level: 7
* Company Description
o N/A for Activity Logger
* Company URL
o N/A for Activity Logger
* Download URL
o N/A for Activity Logger
* Analysis
o Activity Logger is a computer surveillance software that invisibly records to the log file Internet surfing URLs, key strokes in email, chats or any application, programs user runs and work duration in every application, takes screenshots, like video surveillance camera. Captured snapshots can be viewed later as the slide show. Log file can be emailed to you silently when computer goes online.
* Variants
o N/A for Activity Logger
Also, the "is-XXXXX.tmp" is the name of the folder it wants to create.
This message has been edited since posting. Last time this message was edited on 20. November 2005 @ 09:40
|
RebelRide
Newbie
|
20. November 2005 @ 09:52 |
Link to this message
|
I had also started a thread on this so now I'll jump over to this one, thanks 2oldGeek for the reply on my thread.
OK, I've went back to the original versions ( I save them all, don't know why, but I do...LOL ) Anyway, it shows up on all versions now. Like Geek, I had recently updated Spybot S&D and it is the one that is flagging it, so I think it may be S&D is being a little overly critical here. I use Fab very often (every other day or so) and never had a problem prior to this. I'm running other anti spyware and they don't flag nor has my firewall alerted me to any unauthorized traffic. So I think it may be OK.
|
seandesad
Suspended due to non-functional email address
|
20. November 2005 @ 12:35 |
Link to this message
|
call webroot and tell them of this. Ive found them most helpful in such matters.
webroot.com
|
montrose
Newbie
|
20. November 2005 @ 15:17 |
Link to this message
|
Same issue here as well. I dropped DVDIdle an email on their online contact form and hope perhaps they will respond. Might I suggest that others do the same as I'm not sure they will respond to only one request as well as I do not think they support the freeware version.
Here's the link. I sent my info to Technical Support.
www.dvdidle.com/contact.htm
This message has been edited since posting. Last time this message was edited on 20. November 2005 @ 15:19
|
AfterDawn Addict
|
22. November 2005 @ 01:35 |
Link to this message
|
Well, after over riding Spybot and installing DVDFab, I can find nothing that it?s doing that?s so bad that I couldn?t live with it BUT, after trying to decrypt Stealth and having FAB lay down like a whipped puppy, I?ve decided to just un-install it and use what works best for me..
And that is: The Trinity, AnyDVD / Shrink / Nero, burnt to Verbatim 16x +R (MCC 004) at 4X
No fuss, no muss, no Coasters???. Long live Verbs!!

There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves...
|
Moderator
|
22. November 2005 @ 01:44 |
Link to this message
|
i've subscribed to this as i don't have AnyDVD and have recently started used DVDFab Decrypter.. haven't noticed anything odd but i don't use all those myriad Spybot type programs, i just keep my virus checker up to date every day. it could be that these programs are generating 'false positive' analysis on the exe file, that happens with the big virus companies' products from time to time.. but i'm intrigued if this one is anything other than a false positive or whatever..
Main PC ~ Intel C2Q Q6600 (G0 Stepping)/Gigabyte GA-EP45-DS3/2GB Crucial Ballistix PC2-8500/Zalman CNPS9700/Antec 900/Corsair HX 620W
Network ~ DD-WRT ~ 2node WDS-WPA2/AES ~ Buffalo WHR-G54S. 3node WPA2/AES ~ WRT54GS v6 (inc. WEP BSSID), WRT54G v2, WRT54G2 v1. *** Forum Rules ***
|
AfterDawn Addict
|
22. November 2005 @ 02:00 |
Link to this message
|
@creaky,
I believe this IS just a false positive because I could find nothing that was being done by FAB that would harm anything. Besides I have a good firewall and anti-virus..
I did try using DVDFab to decrypt Stealth and it would lock up after the first sector or so and I would have to re-boot to get out of it..
I have AnyDVD and LOVE IT! I use it along with DVDShrink to do Movie only and have Shrink burn using Nero. For DL's I use AnyDVD/DVDDecrypter, Lightning UK is still alive and kicking butts LOL.

There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves...
|
Gringle
Suspended due to non-functional email address
|
22. November 2005 @ 02:09 |
Link to this message
|
spybot search & destroy
is a mind {wanking program} excuse me mods..........
it creates false threats, and talks a game that is beyond it's ken, look thurs a boggy man and stuff like that...Patrik yer an idiot....or maybe just a simpleton??
(edit) on the other hand yer makin more bbread than me, so I suppose the mirror tturned??
El gringle..
This message has been edited since posting. Last time this message was edited on 22. November 2005 @ 02:14
|
AfterDawn Addict
|
22. November 2005 @ 02:39 |
Link to this message
|
I agree that Spybot can have false hits but in the last 2 yrs. it has given me only 2, this being one as far as I can tell. On the other hand it has more benefits than detriments.
I like the fact that it monitors the startup progs in the registry and informs me of progs trying to load BHO?s, ActiveX?s and other crap that can screw up the works?.
An ignorant person is one that doesn?t know what YOU just learned.

There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves...
This message has been edited since posting. Last time this message was edited on 22. November 2005 @ 02:57
|
RebelRide
Newbie
|
22. November 2005 @ 11:19 |
Link to this message
|
I also believe that this is a false flag for Spybot. This is the first for me in the 2 years i have been running it. One of Spybots greatest attributes is the "teatimer" that protects against unathorized reg changes, that alone is worth running it....Worth it? it's free...how could it not be worth it. BTW fab just released another update today, we'll see what it does.
Rebel
|
montrose
Newbie
|
22. November 2005 @ 15:42 |
Link to this message
|
I tried the new version 2.9.6.0 (11/22/2005) but Spybot complained just the same.
While this could be a false positive with Spybot, I can say that I've used it for a number of years along with Teatimer and I couldn't be more happy - especially for the price. I'd rather err on the side of caution, considering.
Also I remember the last version of DVDFab that I am using did not cause Spybot to raise a flag.
I've not received a reply to my query from DVDIdle, although since they don't support the freeware version I may never receive a reply.
|
Member
|
22. November 2005 @ 16:34 |
Link to this message
|
@JaguarGod
@2OldGeek
or anyone else that is having the problem.
Download and run a nice little program called HijackThis from here http://www.spywareinfo.com/~merijn/downloads.html
Run the program and select 'run and save a log file' or something similar. PM me the log files and I can let you know what, if anything, is going on with your system.
Beer is good...and stuff!
|
AfterDawn Addict
|
22. November 2005 @ 19:50 |
Link to this message
|
@christ93
I have used HijackThis since it came out but the log file would do no good because when I go over a scan I always place everything that is OK on the Ignore List. That way there is nothing that shows up on a scan except events that took place after my last scan and Nothing is showing up this time. Therefore, as far as I?m concerned this is a False positive.

There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves...
|
AfterDawn Addict
|
23. November 2005 @ 04:39 |
Link to this message
|
I loaded this last night and ran a complete system scan with spyware Dr. and nothing came up. I think it's all good.
Cheers
|
Advertisement
|
  |
|
daageek
Newbie
|
27. November 2005 @ 21:05 |
Link to this message
|
Hi Guys I have mcafee firewall. Using DVDfab wants internet access prior to finalizing a disk. If the internet access is blocked, the program hangs. Any ideas of what it is doing? Is it tracking the copy being made?
|