Avatar
Please consider registering
Guest
Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
Register Lost password?
sp_Feed sp_TopicIcon
"Player" video player flagged as a malware
sp_NewTopic Add Topic
Avatar
tkearns
Member
Members
Forum Posts: 4
Member Since:
August 29, 2014
sp_UserOfflineSmall Offline
1
December 9, 2014 - 2:38 pm
sp_Permalink sp_Print sp_QuotePost
sp_ReportPost

Hi all,

On Thursday of last week (12/4/14), our Anti-Virus flagged the AmrDll.dll file within the player program files as malicious, more specifically a Trojan.  Our Anti-Virus software, Vipre, immediately quarantined the file on the two machines that have the player installed.  As a result, the player no longer works unless we force Vipre to allow the program to run with the "infectious" file.  We uploaded the accused file to VirusTotal.com where 4 scanners reported the file as trojan malware.  I'm sure you can understand why we are weary to leave the suspicious file unquarantined.  Has anyone noticed anything suspicious about the player used to view the DVR footage?  We are aware that false positives occur, but do not want to proceed as such without further investigation.  I have more information on this case documented if interested.  Any support is appreciated.  

Regards,

Tyler

Avatar
Techpro Security
Member
Members
Forum Posts: 404
Member Since:
March 27, 2013
sp_UserOfflineSmall Offline
2
December 9, 2014 - 2:44 pm
sp_Permalink sp_Print sp_QuotePost
sp_ReportPost

Hello, 

 

This could be cause because the supplies didn't sign there files with a certificate therefore it could be a false alarm. I can guarantee there is nothing wrong with the files in the player that could harm your machine. The only possible way thins could be bad is if the file has been downloaded from other site other than ours. 

Thanks

Avatar
Brad Besner
Boca Raton, Florida
Admin
Forum Posts: 203
Member Since:
March 9, 2013
sp_UserOfflineSmall Offline
3
December 9, 2014 - 2:45 pm
sp_Permalink sp_Print sp_QuotePost
sp_ReportPost

I can assure you that there is no Trojan Virus in our software or devices. It is not unusual for some anti virus software to falsely detect viruses. I have seen it happen with many devices. As a matter of fact, if you try to install the HP or Brother printer drivers from their website, they will flash a warning to first disable your anti virus software because it will detect certain files as viruses and prevent the software from working. This is the case here. All you have to do is allow the files to run which you can do manually within your anti virus software. This is exactly why the anti virus softwares give control to allow files that you trust to run. 

Sometimes if enough people report this occurrence to the virus software company they will issue a fix for the issue in the next update. 

Avatar
Jose Malave
Boca Raton, Florida
Admin
Forum Posts: 820
Member Since:
January 3, 2014
sp_UserOfflineSmall Offline
4
December 9, 2014 - 2:51 pm
sp_Permalink sp_Print sp_EditHistory sp_QuotePost
sp_ReportPost

This is a False Positive the AmrDll.dll is associated with C++ Mobile Edition developed by Borland Software Corp. for the Windows Operating System.The software is not the culprit.

It can be that a virus or malware has corrupted this file thus the virus software seeing this file being modified or a modification to your registry causing the file to go into Quarantine. It is recommended to go directly to Borlan Software Corp. and getting a copy of this file as opposed to getting it elsewhere. Once you have obtained the file from the developer you can drop it into the System 32 folder where it should reside. Of course this is a General Diagnosis since it can be many other reasons. 

I recommend a Technician go over your system and repair the OS. 

 Jose Malave - IT Director| Toll Free: 866-573-8878 | E-mail: support@securitycameraking.com

Avatar
tkearns
Member
Members
Forum Posts: 4
Member Since:
August 29, 2014
sp_UserOfflineSmall Offline
5
December 10, 2014 - 10:57 am
sp_Permalink sp_Print sp_QuotePost
sp_ReportPost

Thanks for your help guys.  We assumed it to be false, but wanted to check with your team and other users in case it was a threat.  We've reinstalled the player a week later on the machines and ran the program without any noise from our anti-virus.  They may have solved the issue by now.  Thanks again.

Avatar
Jose Malave
Boca Raton, Florida
Admin
Forum Posts: 820
Member Since:
January 3, 2014
sp_UserOfflineSmall Offline
6
December 10, 2014 - 12:33 pm
sp_Permalink sp_Print sp_QuotePost
sp_ReportPost

My Pleasure. Its always best to be sure. ;)

 Jose Malave - IT Director| Toll Free: 866-573-8878 | E-mail: support@securitycameraking.com

Forum Timezone: America/New_York
Most Users Ever Online: 727
Currently Online:
Guest(s) 25
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Techpro Security: 404
shockwave199: 179
tubac: 167
Jer7of9: 155
Gilberto: 150
MrDeepFreeze: 136
Night Hawk: 100
Mark: 90
West Coast Jones: 66
ShawnInFL: 64
Newest Members:
jadedblu12@gmail.com
gasman21
Jamie Teeters
scubamaster
JustGene
Robertkanny
Donald
LeoFreskos
Bula dinor 000x securitycameraking.com mv
cingusmartly
Forum Stats:
Groups: 5
Forums: 28
Topics: 1504
Posts: 6003

 

Member Stats:
Guest Posters: 144
Members: 23019
Moderators: 7
Admins: 5
Administrators: Damon Delcoro, Brad Besner, Jose Malave, Damon Delcoro, Tony Petruzzi
Moderators: Zeke Richey, Eric Wilson, Yarden Pinhasi, Joe Shopsin, jwilhelmi, Jorge Nava, Tyler Rittel