Problems with VideoPad Download

robert3353

Hello,

I do not know if there is a virus problem with this particular file or if there is a false virus warning by my anti virus software. I have downloaded some of your software today to try it out but I encountered a problem with my Comodo Internet Security Suite issuing a virus warning when attempting to download VideoPad. I did not encounter any difficulties with any other file on your servers so am concerned that this one may have gotten a virus infection some how. If this is not the case I will try and re-download the file, but would hate to get a major virus infection on my new Vista install. If you guys know for sure that there are no problems with any of your software that is available for download perhaps you may want to contact Comodo and loge a complaint about their software giving a false virus warning about your software, http://www.comodo.com/

Thanks,

Robert

gbw

VideoPad - False Positive for Virus, Trojans or Malware

Hi Robert,

I know you are getting a false positive on Comodo.

NCH Software makes sure their audio software is free from virus', malware, or trojans before software is released.
Google scans NCH Software's website at least once a week to check for virus', malware, and trojans and they do not detect malware on NCH Software's Website, which includes all of NCH Software's download files.
Below, I included a report from VirusTotal that can check the most popular anitvirus packages at once including Comodo. No Virus, Malware, or Trojans were found from AVG, Symantec, or McAfee and many others.
VideoPad is listed on all the major software download sites, which thoroughly tests software before listing a product to protect their customers.
VideoPad continues to receive 5 Star Awards and Editor's Picks from popular software sites.

Therefore, I think it is save to conclude you have a false positive virus.

-Garth

File 3BA29099B03261B9FC122A72C8A61C0087FAEE8D.exe received on 2010.06.20 18:47:41 (UTC)

Antivirus Version Last Update Result

a-squared 5.0.0.26 2010.06.20 -

AhnLab-V3 2010.06.20.00 2010.06.19 -

AntiVir 8.2.2.6 2010.06.18 -

Antiy-AVL 2.0.3.7 2010.06.18 -

Authentium 5.2.0.5 2010.06.20 -

Avast 4.8.1351.0 2010.06.20 -

Avast5 5.0.332.0 2010.06.20 -

AVG 9.0.0.787 2010.06.20 -

BitDefender 7.2 2010.06.20 -

CAT-QuickHeal 10.00 2010.06.18 -

ClamAV 0.96.0.3-git 2010.06.20 -

Comodo 5163 2010.06.20 -

DrWeb 5.0.2.03300 2010.06.20 -

eSafe 7.0.17.0 2010.06.20 -

eTrust-Vet 36.1.7650 2010.06.19 -

F-Prot 4.6.1.107 2010.06.20 -

F-Secure 9.0.15370.0 2010.06.20 -

Fortinet 4.1.133.0 2010.06.20 -

GData 21 2010.06.20 -

Ikarus T3.1.1.84.0 2010.06.20 -

Jiangmin 13.0.900 2010.06.15 -

Kaspersky 7.0.0.125 2010.06.20 -

McAfee 5.400.0.1158 2010.06.20 -

McAfee-GW-Edition 2010.1 2010.06.20 -

Microsoft 1.5902 2010.06.20 -

NOD32 5212 2010.06.20 -

Norman 6.05.06 2010.06.20 -

nProtect 2010-06-20.02 2010.06.20 -

Panda 10.0.2.7 2010.06.20 -

PCTools 7.0.3.5 2010.06.20 -

Prevx 3.0 2010.06.20 -

Rising 22.52.06.04 2010.06.20 -

Sophos 4.54.0 2010.06.20 -

Sunbelt 6480 2010.06.20 -

Symantec 20101.1.0.89 2010.06.20 -

TheHacker 6.5.2.0.302 2010.06.20 -

TrendMicro 9.120.0.1004 2010.06.20 -

TrendMicro-HouseCall 9.120.0.1004 2010.06.20 -

VBA32 3.12.12.5 2010.06.18 -

ViRobot 2010.6.19.3894 2010.06.19 -

VirusBuster 5.0.27.0 2010.06.20 -

Additional information

File size: 2817200 bytes

MD5 : 988cdad607598e185d62158a36acffda

SHA1 : 8561d2d5cfde1d3b7a30e4f24e3a00e7ad71f59c

SHA256: c0fa6fa251b05ae8e01dfe719a5a4aff58e758e7c50272c7269432bd3dda034c

PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x2021 timedatestamp.....: 0x4BE39FBF (Fri May 7 07:06:07 2010) machinetype.......: 0x14C (Intel I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 .rdata 0x1000 0x544 0x600 3.97 e3e023213ffb5bec45145e7c2e5a4716 .data 0x2000 0x340 0x400 5.13 7b1069b8df7afc37061f0d388e4e3b7a .rsrc 0x3000 0x2ADABC 0x2ADC00 8.00 08daeffa9088dbbc2eaee7e319dee635 ( 5 imports ) > kernel32.dll: GetStartupInfoW, LoadResource, lstrcpyW, GetExitCodeProcess, FindResourceW, GetModuleHandleW, DeleteFileW, CloseHandle, ExitProcess, GetVersionExA, GetLastError, GetModuleFileNameW, WriteFile, CreateFileW, LockResource, GetTempPathW, WaitForSingleObject, SizeofResource > ole32.dll: CoInitializeEx, CoUninitialize > setupapi.dll: SetupIterateCabinetW > shell32.dll: ShellExecuteW, ShellExecuteExW > user32.dll: wsprintfW, MessageBoxW ( 0 exports )

TrID : File type identification Win32 Executable Generic (68.0%) Generic Win/DOS Executable (15.9%) DOS Executable Generic (15.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

ssdeep: 49152:v+nCUISPIPndxjXyvfwHmNlewgnFlnYuP4j9tneZ9mhI:vdUbPIOvfAs8wgnFxYuP4jLeaO

sigcheck: publisher....: NCH Software copyright....: NCH Software product......: n/a description..: VideoPad Video Editor original name: n/a internal name: VideoPad file version.: 2.10_ comments.....: n/a signers......: NCH Software Thawte Code Signing CA Thawte Premium Server CA signing date.: 8:24 AM 6/15/2010 verified.....: -

PEiD : -

packers (F-Prot): CAB

RDS : NSRL Reference Data Set -

gbw

VideoPad is a Virus Free Program

As a follow up, on Monday July 12th, Virus Total reported a 6/42 for the VideoPad Video Editing Software download file that did not include Comodo reporting a false positive. A-Squared, VBA32, Ikarus, Kaspersky, and 2 from McAfee calling out some form of a Trojan Win32. I submitted false positive reports to Ikarus, VBA32 and McAfee. I did not submit one to A-Squared because their false positive looked like it came from the Ikarus database and Kaspersky I believe piggybacks from other databases too. After they checked the VideoPad software more thoroughly, I received a positive response they would remove the false positive from their database. The next day our Virus Total report for VideoPad was 0/42.

This morning, I submitted 375 files to Quick Heal because their anti-virus software is the worst anti-virus program I've seen for flagging false positives. If you use one of the off brand products, I would like to hear about your experience with false positives.