AVG antivirus on my pc has just alerted me to the following:
Trojan horse PSW.Generic2.RES
found in \Virtual Dub\vdub.exe
I can't recall where I downloaded Virtual Dub from, but it was a year or two back. I'll have to search my early postings, but a quick search of this forum yields 26 threads containing "Virtual Dub".
P.S. Downloaded fresh (same) version of Vitual Dub from virtualdub.org, and no problems with that. So the trojan might have managed to infect vdub.exe subsequent to my original download.
Virtual Dub - AVG considers it to be/contain a Trojan
Moderator: Ken Berry
Virtual Dub - AVG considers it to be/contain a Trojan
JVC GR-DV3000u Panasonic FZ8 VS 7SE Basic - X2
Hi before you hit the Panic button I had a similar Trojan problem with A-squared software this turned out to be a 'false Positive' Virtual Dub could have a similar 'Signature' to this Trojan and AVG erring on the cautious side flagged it up. If you have other progs such as Ad-Aware, Spybot Spyware Blaster which are all free and widely used run these first and see if they show the same problem. If you don't have these utillities post back and I'll post the links.
Hi Roy,
thanks for your response.
I did sort of panic!
I banged off the post, thinking of the greater good, knowing that there are many Virtual Dub users out there, and fearing the worst!
The file vdub.exe is the command line version of the program - and I honestly can't recall ever using it. AVG sent the infected file into the "virus vault".
I am now of the opinion that the file was infected at some point after I'd installed Virtual Dub.
I've never had any virus problems, and have my own favourite anti virus and anti spyware programs. Being a cheapskate by instinct, I use ZoneAlarm Free, AVG Free, and Spybot SD (also freeware although I do make small donations every now and then) I make regular use of Webroot Washer, Internet History Eraser, Easy Cleaner, Registry Repair Pro and Rootkit Revealer amongst others, and my pc connects to the net behind a router, effectively invisible with all ports closed. I only use Firefox as my browser - using IE for updates only, and Thunderbird as my email client, since it's inherently more secure than Outlook.
I can't recall when I last used Virtual Dub, nor even what I downloaded it for in the first place, so I'm somewhat mystified as to how it could have been infected. I know that a current favoured hacker attack is to have bogus codecs loaded with trojans for the unwary to download. Since only recently getting a broadband dsl connection, I'm wondering if it might somehow relate to viewing video clips on YouTube.
I know also that there can be false positives, and also questionable techniques used by some programs. For instance, Norton Antivirus uses Rootkit methods which I consider to be inappropriate for such a program.
When I do a Google search for PSW.Generic2.RES it brings up a single result - a Russian website, but there's no translation available.
Still, it serves to underline the importance of doing a full virus scan of your pc - all too often, I stop the AVG scan if it's slowing me down when I'm working on something, and you have to remember to allow it to complete later.
thanks for your response.
I did sort of panic!
The file vdub.exe is the command line version of the program - and I honestly can't recall ever using it. AVG sent the infected file into the "virus vault".
I am now of the opinion that the file was infected at some point after I'd installed Virtual Dub.
I've never had any virus problems, and have my own favourite anti virus and anti spyware programs. Being a cheapskate by instinct, I use ZoneAlarm Free, AVG Free, and Spybot SD (also freeware although I do make small donations every now and then) I make regular use of Webroot Washer, Internet History Eraser, Easy Cleaner, Registry Repair Pro and Rootkit Revealer amongst others, and my pc connects to the net behind a router, effectively invisible with all ports closed. I only use Firefox as my browser - using IE for updates only, and Thunderbird as my email client, since it's inherently more secure than Outlook.
I can't recall when I last used Virtual Dub, nor even what I downloaded it for in the first place, so I'm somewhat mystified as to how it could have been infected. I know that a current favoured hacker attack is to have bogus codecs loaded with trojans for the unwary to download. Since only recently getting a broadband dsl connection, I'm wondering if it might somehow relate to viewing video clips on YouTube.
I know also that there can be false positives, and also questionable techniques used by some programs. For instance, Norton Antivirus uses Rootkit methods which I consider to be inappropriate for such a program.
When I do a Google search for PSW.Generic2.RES it brings up a single result - a Russian website, but there's no translation available.
Still, it serves to underline the importance of doing a full virus scan of your pc - all too often, I stop the AVG scan if it's slowing me down when I'm working on something, and you have to remember to allow it to complete later.
JVC GR-DV3000u Panasonic FZ8 VS 7SE Basic - X2
