PDA

View Full Version : DVDfab Decrypter (free)


camor
November 4th, 2008, 06:32 AM
Hello!
I've been using DVDfab for a long time and never had problems in updates.
But now i can't install the last version (5.1.1.0) because nod says that there is a trojan.
Any one can tell anything about that?
Thanks

PaulB2005
November 4th, 2008, 06:40 AM
What does it actually say?

camor
November 4th, 2008, 07:11 AM
{QUOTE-> What does it actually say? <-QUOTE}

This is the event:
04-11-2008 12:07:08 Proteção em tempo real do sistema de arquivos arquivo C:\Programas\DVDFab 5\is-JFO7L.tmp provavelmente uma variante de Win32/TrojanDownloader.Agent cavalo de Tróia limpo por exclusão - em quarentena NT AUTHORITY\SYSTEM Evento ocorrido no novo arquivo criado pelo aplicativo: C:\DOCUME~1\UTILIZ~1\DEFINI~1\Temp\is-8V70O.tmp\DVDFab5110.tmp.

PaulB2005
November 4th, 2008, 07:15 AM
Doesn't happen for me.

What version of NOD32 are you running and is it up to date?

camor
November 4th, 2008, 07:26 AM
{QUOTE-> Doesn't happen for me.

What version of NOD32 are you running and is it up to date? <-QUOTE}

Nod32v3.0672.0 portuguese language
virus signatures-3582

PaulB2005
November 4th, 2008, 07:36 AM
Same here.

Do NOT link to it but can you tell us here you downloaded it from. What is the website name? Or was it the official website at least?

camor
November 4th, 2008, 07:42 AM
{QUOTE-> Same here.

Do NOT link to it but can you tell us here you downloaded it from. What is the website name? Or was it the official website at least? <-QUOTE}

From the oficial website as always i do!!
Thanks for your replys

Marcos
November 4th, 2008, 07:56 AM
Please compress the file in question with WinRAR or another common packer, protect the archive with the password "infected" and send it to samples[at]eset.com with this thread's url in the subject. We will appreciate if you enclose a download link as well.

camor
November 4th, 2008, 01:25 PM
{QUOTE-> Please compress the file in question with WinRAR or another common packer, protect the archive with the password "infected" and send it to samples[at]eset.com with this thread's url in the subject. We will appreciate if you enclose a download link as well. <-QUOTE}

Hello!
I've already send! In the nod's options i've send to eset!
Thank you!
Regards

Marcos
November 4th, 2008, 01:37 PM
{QUOTE-> Hello!
I've already send! In the nod's options i've send to eset!
Thank you!
Regards <-QUOTE}

Please re-read my instructions and email the file in a password protected archive to samples[at]eset.com if you want us to check and possibly fix the fp.

camor
November 4th, 2008, 08:26 PM
{QUOTE-> Please compress the file in question with WinRAR or another common packer, protect the archive with the password "infected" and send it to samples[at]eset.com with this thread's url in the subject. We will appreciate if you enclose a download link as well. <-QUOTE}

Ok Marcos, i've done what you ask me to do!
Thanks in advance

camor
November 6th, 2008, 06:19 AM
{QUOTE-> Please compress the file in question with WinRAR or another common packer, protect the archive with the password "infected" and send it to samples[at]eset.com with this thread's url in the subject. We will appreciate if you enclose a download link as well. <-QUOTE}

Just one question.
Does eset gone answer my mail?
Regards

Marcos
November 6th, 2008, 06:56 AM
I've tracked down all emails that we've received at samples[at]eset.com, but couldn't find any with "wilderssecurity" in the subject unreplied. Could you please PM me the email address you sent the email from? Also please post here the information about installed modules (Help -> About). Also let us know what version you're using (ie. EAV 3.0.667 PTB 32-bit).

camor
November 6th, 2008, 09:42 AM
{QUOTE-> I've tracked down all emails that we've received at samples[at]eset.com, but couldn't find any with "wilderssecurity" in the subject unreplied. Could you please PM me the email address you sent the email from? Also please post here the information about installed modules (Help -> About). Also let us know what version you're using (ie. EAV 3.0.667 PTB 32-bit). <-QUOTE}

I've sent you a PM with the information that you asked for.

maralm
November 13th, 2008, 10:41 AM
Same problem here!

Vista Home Premium
Nod v3 updated

Marcos
November 13th, 2008, 12:49 PM
{QUOTE-> Same problem here!

Vista Home Premium
Nod v3 updated <-QUOTE}

Could you please post here the information about installed EAV modules? (Help -> About) To my best knowledge, this was fixed in recent updates 1-2 days ago.

maralm
November 13th, 2008, 10:38 PM
{QUOTE-> Could you please post here the information about installed EAV modules? (Help -> About) To my best knowledge, this was fixed in recent updates 1-2 days ago. <-QUOTE}

As I say in my post EAV3 up to date.

camor
November 14th, 2008, 10:04 AM
{QUOTE-> Same problem here!

Vista Home Premium
Nod v3 updated <-QUOTE}

I've made this:
Turn off NOD's proteccion install DVDfab and than exclude DVDfab from Nod's real time protection. Everything is ok.

funkydude
November 14th, 2008, 10:56 AM
That's not really a solution, ESET needs copies of the file to apply a fix to the problem.

camor
November 14th, 2008, 11:14 AM
{QUOTE-> That's not really a solution, ESET needs copies of the file to apply a fix to the problem. <-QUOTE}

I've sent trough Nod and a PM to Marcos.
The answer was the same that i've already see in other posts! "I've not receive your mail"
For God sake!! I'me tired

maralm
November 14th, 2008, 11:45 AM
{QUOTE-> I've made this:
Turn off NOD's proteccion install DVDfab and than exclude DVDfab from Nod's real time protection. Everything is ok. <-QUOTE}

It Works!!
Thanks a lot!

Marcos
November 14th, 2008, 12:13 PM
{QUOTE-> I've sent trough Nod and a PM to Marcos.
The answer was the same that i've already see in other posts! "I've not receive your mail"
For God sake!! I'me tired <-QUOTE}

I have explained it here several times - samples MUST be sent via email in a password protected archive to samples[at]eset.com as well as further information enclosed. In the case of a false positive, it's important to write "False positive" in the subject.