Computer question

Post Reply
User avatar
Snowfire
Posts: 4835
Joined: Wed Mar 11, 2009 9:34 am

Computer question

Post by Snowfire »

Is there anyone here (Spot) that can tell me...

I have Spyware Doctor with an anti-virus engine.

I am using a paid for version of AVS video converter. I had to disable Spyware Doctor to fully install the converter. It kept coming up that it was a threat

Now whenever I open up the converter, Spyware Doctor chirps up that it has allowed (I have set it to alllow) HeurEngine.Packed.Thermida.RGa

Why is this piece of software seen as a threat ? Its a legitimate application. I have used it before.
"He has all the virtues I dislike and none of the vices I admire."

Winston Churchill
User avatar
Snowfire
Posts: 4835
Joined: Wed Mar 11, 2009 9:34 am

Computer question

Post by Snowfire »

Spyware Doctor is telling me that the Heuristics engine is using an unknown code and that the file is packed with the same run time compression, commonly used by malware

Having said that, while typing this The suspicious activity detecter says that AVS video converter programme is logging keystrokes

I'm confused
"He has all the virtues I dislike and none of the vices I admire."

Winston Churchill
User avatar
spot
Posts: 41654
Joined: Tue Apr 19, 2005 5:19 pm
Location: Brigstowe

Computer question

Post by spot »

Snowfire;1168632 wrote: Is there anyone here (Spot) that can tell me...

I have Spyware Doctor with an anti-virus engine.

I am using a paid for version of AVS video converter. I had to disable Spyware Doctor to fully install the converter. It kept coming up that it was a threat

Now whenever I open up the converter, Spyware Doctor chirps up that it has allowed (I have set it to alllow) HeurEngine.Packed.Thermida.RGa

Why is this piece of software seen as a threat ? Its a legitimate application. I have used it before.


There's a good discussion of it at AVS Video Converter - Reviews and free AVS Video Converter downloads at Download.com

AVS look somewhat anally retentive all round. Their support area won't let you read anyone else's support, for example, even though they use forum software to make it go.

I'd sooner do without a product than go through their hoops, were it me.

Summary: As best as I been able to determine from research Win32/Packed is a virus/malware. Apparently a company, Oreans Technology, has taken the technology, modified it, and created Themida, with the intended purpose of helping software producers hide their program activation keys from hackers to prevent pirating of their software. You have to appreciate the irony here of taking malware hackers technology and turning it against them; very clever.

However, Themida can still be used to hide a virus or malware - under the guise of a legitimate anti-pirating shield - which is worse than other anti-pirating schemes because Themida can create a false sense of security for both you and the software producer. While Themida is locking out hackers it also locks out end-user protection software from examining the program?s activation key programming code for threats, thus opening your system to a possible attack from an unscrupulous software producer. This I conclude is why Eset considers Themida a threat.

The bottom line is that you MUST implicitly trust the software producer using Themida not to put adware, malware, or intelligence gathering software that you might consider a intrusive, or a threat, on your system. Unfortunately, no one can help you with trust except you; and what AVS is being shortsighted about, in this approach to preventing pirating, is that threat reports form anti-virus software immediately creates distrust. They're likewise shortsighted in that locks are only intended to keep honest people honest; the bad guys will always find a way in.



Updated on Mar 4, 2009

The following is the response from Eset; producers of NOD32 anti-virus software which I use on my computer, regarding the AVS Video Convert 6 link offered on this and other download sites:

Update for Case #251046 - "themida"

An ESET Customer Care Representative has updated this case with the following information:

Hello,

I have tested this download and the file contains thermida, which ESET perceives as a threat and will not allow the download. The software creator would need to submit their software as a sample to us in order to be removed, but because it include thermida, I do not see that happening.

If this resolves your issue or if you need further assistance, please let us know by replying to this email.

Thank you for using ESET security products,

ESET Customer Care

So the question remains, who do YOU trust more an anti-virus expert with no vested interest in the product or AVS? I personally am putting my faith in Eset.

Updated on Mar 9, 2009

The following is the response to my complaint to AVS regarding Themida:

Hello,

I can assure you that our software have no viruses in them. The problem should be with your antivirus filter. As far as we know they have made an update for their programs and now your antivirus program will persist in the fact that our installation files contain some viruses.

We already had such problems in the past with producers of antivirus systems and they presented their apologies to us.

We have already contacted them and I hope that it will be corrected soon.

Pleas[e] try to download the programs from both our web sites:

AVS4YOU® Best software for you on today's market. Subscribe and download now for free! and AVSMedia. Best software for you on today's market. Subscribe and download now for free!

Specify your OS and version of Nod32.

make a screenshot of the error message.

regards...

Thanks,

AVS Support team

Since the program did successfully download and install it can be concluded that the software was submitted to, and passed examination by, Eset.

AVS Video Converter - Reviews and free AVS Video Converter downloads at Download.com

Nullius in verba ... ☎||||||||||| ... To Fate I sue, of other means bereft, the only refuge for the wretched left.
When flower power came along I stood for Human Rights, marched around for peace and freedom, had some nooky every night - we took it serious.
Who has a spare two minutes to play in this month's FG Trivia game! ... My other OS is Slackware.
User avatar
Snowfire
Posts: 4835
Joined: Wed Mar 11, 2009 9:34 am

Computer question

Post by Snowfire »

Thats interesting Spot and thanks for the thorough answer. I'm quite horrified at AVS' complacency and refusal to recognise peoples concerns when faced with the complaints

I dont think I should argue with Spyware Doctor. Its proved its worth in the past. I shall put my faith in it again

I am now in the market for a new video converter

Thank you.
"He has all the virtues I dislike and none of the vices I admire."

Winston Churchill
User avatar
Nomad
Posts: 25864
Joined: Thu Jun 30, 2005 9:36 am

Computer question

Post by Nomad »

Hope this helps snow.





There's a good discussion of it at AVS Video Converter - Reviews and free AVS Video Converter downloads at Download.com

AVS look somewhat anally retentive all round. Their support area won't let you read anyone else's support, for example, even though they use forum software to make it go.

I'd sooner do without a product than go through their hoops, were it me.

Summary: As best as I been able to determine from research Win32/Packed is a virus/malware. Apparently a company, Oreans Technology, has taken the technology, modified it, and created Themida, with the intended purpose of helping software producers hide their program activation keys from hackers to prevent pirating of their software. You have to appreciate the irony here of taking malware hackers technology and turning it against them; very clever.

However, Themida can still be used to hide a virus or malware - under the guise of a legitimate anti-pirating shield - which is worse than other anti-pirating schemes because Themida can create a false sense of security for both you and the software producer. While Themida is locking out hackers it also locks out end-user protection software from examining the program?s activation key programming code for threats, thus opening your system to a possible attack from an unscrupulous software producer. This I conclude is why Eset considers Themida a threat.

The bottom line is that you MUST implicitly trust the software producer using Themida not to put adware, malware, or intelligence gathering software that you might consider a intrusive, or a threat, on your system. Unfortunately, no one can help you with trust except you; and what AVS is being shortsighted about, in this approach to preventing pirating, is that threat reports form anti-virus software immediately creates distrust. They're likewise shortsighted in that locks are only intended to keep honest people honest; the bad guys will always find a way in.



Updated on Mar 4, 2009

The following is the response from Eset; producers of NOD32 anti-virus software which I use on my computer, regarding the AVS Video Convert 6 link offered on this and other download sites:

Update for Case #251046 - "themida"

An ESET Customer Care Representative has updated this case with the following information:

Hello,

I have tested this download and the file contains thermida, which ESET perceives as a threat and will not allow the download. The software creator would need to submit their software as a sample to us in order to be removed, but because it include thermida, I do not see that happening.

If this resolves your issue or if you need further assistance, please let us know by replying to this email.

Thank you for using ESET security products,

ESET Customer Care

So the question remains, who do YOU trust more an anti-virus expert with no vested interest in the product or AVS? I personally am putting my faith in Eset.

Updated on Mar 9, 2009

The following is the response to my complaint to AVS regarding Themida:

Hello,

I can assure you that our software have no viruses in them. The problem should be with your antivirus filter. As far as we know they have made an update for their programs and now your antivirus program will persist in the fact that our installation files contain some viruses.

We already had such problems in the past with producers of antivirus systems and they presented their apologies to us.

We have already contacted them and I hope that it will be corrected soon.

Pleas[e] try to download the programs from both our web sites:

AVS4YOU® Best software for you on today's market. Subscribe and download now for free! and AVSMedia. Best software for you on today's market. Subscribe and download now for free!

Specify your OS and version of Nod32.

make a screenshot of the error message.

regards...

Thanks,

AVS Support team

Since the program did successfully download and install it can be concluded that the software was submitted to, and passed examination by, Eset.

AVS Video Converter - Reviews and free AVS Video Converter downloads at Download.com

I AM AWESOME MAN
User avatar
Snowfire
Posts: 4835
Joined: Wed Mar 11, 2009 9:34 am

Computer question

Post by Snowfire »

Nope That just complicates things. You didnt listen did you mate ? I ask for tomatoes and you give me tematers. It aint the same thing
"He has all the virtues I dislike and none of the vices I admire."

Winston Churchill
User avatar
Nomad
Posts: 25864
Joined: Thu Jun 30, 2005 9:36 am

Computer question

Post by Nomad »

Must have been the way I said it.
I AM AWESOME MAN
Post Reply

Return to “Computers Internet”