Mcafee reports a trojan

david reece · Post by **david reece** » Sun Nov 27, 2005 7:41 pm

I have had a problem with Mcafee reporting a potentially unsafe program for teh last copule of weeks.

program is ulstreamcachel within ulead vs9.

I think we had this problem earlier in the year with norton reporting a virus found in the same program.

Anyway anyone else getting the following virus/troan detected?

w32/sdbot.worm.gen.ax??

problem is that Mcafee deletes the offending file. when i try to run again from the disc it reports that the virus is found there in the ulstr42ef.rra file.

problem is now i cant repair vs9 and vs9 has stopped working.

A further scan of my pc reports no trojans, viruses, adware etc...

although i have to add my pc is continuoulsy being pinged by someone on China.

Coincidence??

I will report to Ulead.

Johnny97 · Post by **Johnny97** » Sun Nov 27, 2005 8:00 pm

I had the exact problem. I installed the trial version because I wanted to test it out before I bought it and then McAfee detected a virus. I am very disappointed but what I want to know is that is this real or maybe McAfee detects it but it really isn't a virus.

Post by **VikingAnimations** » Sun Nov 27, 2005 8:09 pm

From personal experience and from things I've heard, McAfee is known for giving false positives. I'm not sure about the version you have, but there should be a setting somewhere in McAfee to instruct it to ignore or not scan that particular file.

That's a "generic" detection McAfee has. That Ulead file has traits shared by a virus/worm, and gets nabbed. If it looks like a duck, quacks like a duck, McAfee decides it's a duck. Even if it's just a rubber duck... That's the trouble with "generic" detections. Other anti-virus products will do the same thing from time to time.

As far as folks pinging your PC, there's a lot of that going on everywhere. I hope you have a good firewall!

Post by **Ken Berry** » Sun Nov 27, 2005 8:53 pm

FWIW, I am a long time user of Video Studio (7, 8 and now 9), and have a hardware firewall, as well as Zone Alarm Security Suite (and SP2's firewall) installed (automatically and regularly updated). Prior to installing ZA a couple of months ago, I used NOD32 as my anti-virus, also automatically and regularly updated. I have never received a false (or even correct!) virus/worm/trojan report about Video Studio. Another friend uses Norton 2005 and has VS9, and he too has had no reports from it.

THoff · Post by **THoff** » Sun Nov 27, 2005 11:42 pm

The Search button would have given you the answer you are looking for.

http://phpbb.ulead.com.tw/EN/viewtopic. ... ght=mcafee

Altone · Post by **Altone** » Mon Nov 28, 2005 2:50 pm

Hi david,
Yesterday I installed McAfee Virus Scan 10.00 and it instantly detected a trojan w32/Selbot.worm.gen.ax. It informed me that it (McAfee) had deleted the file. It gave me no option whether to delete, quarantine, or clean, it just deleted it. I have tried to find out where I can tell McAfee not to delete this file but I cannot find how to.
My version of Ulead VS 9 is still working ok, that is, I haven't found anything yet that isn't working, but it is a worry, when files are deleted.
I shall watch this post with interest. Please post any updates.

david reece · Post by **david reece** » Mon Nov 28, 2005 7:51 pm

I managed to reinstal VS9 by disabling my virus scanner and reloading.

As to one of the comments here about McAffe giving false positives. i have to say it tooks its time to find it as Norton found the same file earlier in the year. do not sell me the merits of norton anti-virus. Norton has also fallen for the same program!

The only problem is when you re-enabe McAfee it deletes the file if you scan again.

I have to agree that is totally unacceptable if it is a legit program to delete. you should at least be allowed to quarantine. I am using version 10 of Mcafee also.

david reece · Post by **david reece** » Mon Nov 28, 2005 7:56 pm

Just to update i have had a reply back from my contact @ Ulead Taiwan.

This has been escalated urgently to be look at by their research department to why it is causing a problem.

Will update as and when i hear.

Altone · Post by **Altone** » Mon Nov 28, 2005 8:34 pm

Thanks for the reply david

I posted on the McAfee Forum this morning asking for advice on this subject, told them the problem etc. I got the reply to send virus report to McAfee.
This afternoon I received a new update from McAfee the Dat file No is 4638.
I think Ulead may have contacted McAfee and sorted it out, because I no longer get the Trojan warning, when I try to repair my Ulead VS software. Suggest you try repairing your Ulead software after installing the new Dat file.
Hope it solves your problem, thanks for helping to solve mine.

THoff · Post by **THoff** » Mon Nov 28, 2005 8:40 pm

I just went to McAfee's website and searched their virus database for this supposed worm, and it doesn't appear at all in that list. They seem to have another problem with a false positive, and unconditionally deleting the file and damaging the Videostudio installation is just idiotic -- I'd ask for a refund.

david reece · Post by **david reece** » Tue Nov 29, 2005 7:33 pm

i just got an update from Mcafee also and the program is now recognised as safe!

I have to assume that Ulead has told McAfee it is safe like they did Norton earlier in the year.