Virus Found [UPDATE: Unrelated to Moving Pictures] (1 Viewer)

AgeOfPanic

MP Donator
  • Premium Supporter
  • July 9, 2008
    89
    6
    Milwaukee, WI
    Home Country
    Netherlands Netherlands
    I have the same problem and also with Avira. Not all movies, just some of the files. I just let avira delete them and see what happens. Better to be safe than sorry.
    After numerous warnings, specifically with the backdrop for the movie Bound. I just manually downloaded the same file without any troubles. Seems like false positives to me.
     

    Flintz

    New Member
    August 26, 2009
    2
    0
    I can confirm this error. Got it several times (so with different movies and jpeg files) on my newly built HTPC with Antivir installed.
     

    vanka

    Portal Member
    May 28, 2007
    25
    0
    42
    Just to let you know, Avast finds nothing wrong with these downloaded files.

    Happy are you certain its not the video itself thats tripping your a\v, did you get them from a good source :)

    Wrong. I had this problem yesterday with avast with The Good the Bad & the Ugly backdrop.
     

    lfs

    MP Donator
  • Premium Supporter
  • August 31, 2009
    24
    1
    I'm also getting problems with The Good the Bad & the Ugly backdrop (among a couple of others).
    I'm using Avast + Win7 RC
     

    Diddip

    Portal Member
    February 14, 2008
    15
    0
    My antivirus program, Avast, is giving me a warning on the backdrops for Point Break and Ghost.

    I just reinstalled my HTPC with Windows 7 and MP v1.1 Beta 1. It makes me wonder if they are safe or not. I will delete them til I'm sure.
     

    TheWho

    Portal Pro
    December 26, 2008
    67
    1
    Home Country
    Sweden Sweden
    i just got this with:

    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Batman.Returns} [-272713315].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Batman.Returns} [1255710304].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Danny.the.Dog} [489445881].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Constantine} [-713681773].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Constantine} [1235588318].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Crash} [1271526778].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Constantine} [2138290836].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Crash} [-936891240].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{G.I..Joe_.The.Rise.of.Cobra} [1577816197].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{G.I..Joe_.The.Rise.of.Cobra} [349787726].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Earth} [-756819562].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{G.I..Joe_.The.Rise.of.Cobra} [-765659192].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Doomsday} [2065132538].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Eragon} [699900544].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{I.Am.Legend} [39497180].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Gomorra} [82222798].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Hellboy} [1129612962].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Hitman} [551603628].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{License.to.Wed} [-534145595].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Live.Free.or.Die.Hard} [-390429120].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{El.Laberinto.del.Fauno} [1670650935].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{El.Laberinto.del.Fauno} [-956570261].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{No.Country.for.Old.Men} [1663721568].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{No.Country.for.Old.Men} [-2049843746].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{I.Now.Pronounce.You.Chuck.and.Larry} [-431351259].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{I.Now.Pronounce.You.Chuck.and.Larry} [193756543].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Children.of.Men} [918248423].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Black.Hawk.Down} [-617348422].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{Black.Hawk.Down} [139349477].jpg
    D:\ProgramData\Team MediaPortal\MediaPortal\Thumbs\MovingPictures\Covers\FullSize\{30.Days.of.Night} [1575594724].jpg



    and my antivirus is Nod32 and Nod32 reports "Win32/Exploit.MS04-028 trojan" on all of them.

    i have now confirmed it with virus total.....

    IT IS IN FACT A VIRUS....
     

    fforde

    Community Plugin Dev
    June 7, 2007
    2,667
    1,702
    42
    Texas
    Home Country
    United States of America United States of America
    Can you provide any more information TheWho? Your post is very alarmist with very little helpful info. Where are you pulling your covers from? What scraper scripts do you have active? What version of Moving Pictures are you running? And if you still have any of the files can you post them somewhere for me to check them out?

    As for past reports, this was an issue with virus scanners giving a false positive on a malformed image file. An image file is not code and is not executed though. Calling a JPEG a virus is like calling a truck a terrorist, it just does not make sense.
     

    TheWho

    Portal Pro
    December 26, 2008
    67
    1
    Home Country
    Sweden Sweden
    sure absolutly =)

    Media Portal 1.1 Beta 1
    Moving Pictures 1.0.0
    scraper for Movie Details: "filmtipset.se" (Swedish) others are disabled.
    scraper for Covers: "Local Data", "impawards.com", "XBMC", "themoviedb.org", "MyVideos (Local)"
    scraper for backdrops: "Local Data", "XBMC", "themoviedb.org"


    this might be a "false positive" but there have been images that have become infected... not for me but for others...


    here is the virustotal report: View attachment VirusTotal - Free Online Vi...pdf
     

    Users who are viewing this thread

    Similar threads

    I have all of my media on a NAS. I guess it might just be a network issue, then.
    I have all of my media on a NAS. I guess it might just be a network issue, then.
    Whenever I go into the back end for Moving Pictures, it almost immediately hangs on the Movie Importer tab. If I want to go into...
    Replies
    4
    Views
    479
    MP1 MP2 Skin Properties DE
    Thanks RoChess. Somehow I always forget the web archive when looking for information that leads to dead links. :rolleyes:
    Thanks RoChess. Somehow I always forget the web archive when looking for information that leads to dead links. :rolleyes:
    Not sure if I’ve missed this info somewhere here but is there a full list or wiki that’s actually working with a full list of...
    Replies
    4
    Views
    858
    Yes, unfortunately, this would need a code change to support it. Next time I'm doing something on the plugin I'll try and remember to add support for this sort order.
    Yes, unfortunately, this would need a code change to support it. Next time I'm doing something on the plugin I'll try and...
    Hi, I was wondering if there is anyone who might be able to help me out. Is there a way to either use the sort feature and/or a...
    Replies
    6
    Views
    823
    OK, I found a way to make it work. It seems like MP-TV-series Configuration (and Moving Pictures Configuration) starts as Administrator, and the Administrator do not have yet logged in on the UNC \\192.168.222.247\Public even if the normal user on the PC have done it. So to fix it on the Win 11 HTPC: Created a shortcut to...
    OK, I found a way to make it work. It seems like MP-TV-series Configuration (and Moving Pictures Configuration) starts as...
    Hi! I was running MP1.33 x64 and I was fine and happy since many years, then the hard drive on the HTPC died. But I was able to...
    Replies
    1
    Views
    196
    Right, this solved this issue. I added my comment to this thread. Thank you very much!
    Right, this solved this issue. I added my comment to this thread. Thank you very much!
    Until MP 1.31 I was able to change the Videos home screen button to Moving Pictures: MediaPortal Configuration -> GUI -> Skin ->...
    Replies
    2
    Views
    604
    Top Bottom