XBMC 11.0 Eden TROJAN!?

  Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Post Reply
Gamer2DBone Offline
Junior Member
Posts: 2
Joined: Dec 2011
Reputation: 0
Location: Zagreb, Croatia, Europe
Question  XBMC 11.0 Eden TROJAN!?
Post: #1
Hi guys,

I'm new here so sorry if I made thread in the wrong section.
Admins, you can move it if you like.

I've been using XBMC for more than 1 year now, and everything was OK.
Today I've downloaded Eden 11.0 (beta 1) and when I installed it it freezed for a bit.
To cut the long story short,

- BitDefender Internet Security 2012 found something inside XBMC, that looks like a TROJAN? Confused

-Here is a snapshot of BitDefender with the result of scan:

[Image: capturekag.png]

Could someone please explain what this is about and help me?

Any help is very welcome.
I wish everyone Merry Christmas and a Happy New Year. Big Grin
find quote
voochi Offline
Fan
Posts: 318
Joined: Jan 2010
Reputation: 2
Post: #2
http://www.virustotal.com/file-scan/repo...1324747655

I think it is a false positive, 3/43 or 7%
find quote
marlboroman1 Offline
Fan
Posts: 315
Joined: Aug 2007
Reputation: 0
Post: #3
don't why is classified as a virus looks like its on the level

http://timidity.sourceforge.net/#download
http://en.wikipedia.org/wiki/TiMidity

still needs sorting out though this kind of thing never looks good Sad
find quote
>>X<< Offline
Alaska Group
Posts: 2,901
Joined: Jun 2009
Location: On a farm trying to catch a fox
Post: #4
marlboroman1 Wrote:still needs sorting out though this kind of thing never looks good Sad

That would be BitDefenders job if its a false positive which it obviously is or just add it to be ignored

Current HTPC Lian-Li PC-C37 • Gigabyte GA-E7AUM-DS2H • Intel C2D E8400 E0 Stepping • OCZ Vertex SSD • 4GB Corsair TwinX XMS2 DDR2 • Corsair HX650W Modular PSU (Free Upgrade) • LG CH08LS10 Blu-Ray Drive • Scythe Big Shuriken • Acousti DustPROOF 70mm Fan
find quote
Gamer2DBone Offline
Junior Member
Posts: 2
Joined: Dec 2011
Reputation: 0
Location: Zagreb, Croatia, Europe
Wink  Thx
Post: #5
I've done a full system scan and it's 100% clear.

Guys, thx for the quick response... Big Grin

I will make a rule in bitdefender for this .dll
let's hope that nothing will happen to my collection, it took me quite a while to put it together.

Cheers mates...
find quote
Ned Scott Offline
Team-XBMC Wiki Guy
Posts: 19,888
Joined: Jan 2011
Reputation: 247
Location: Arizona, USA
Post: #6
They're on to us! ABORT ABORT!
find quote
Martijn Offline
Team-XBMC
Posts: 11,037
Joined: Jul 2011
Reputation: 158
Location: Dawn of time
Post: #7
Ned Scott Wrote:They're on to us! ABORT ABORT!

There goes your plan of world domination through the use of trojan Eden Laugh

Always read the XBMC online-manual, FAQ and search the forums before posting.
Do NOT e-mail Team-XBMC members asking for support. Read/follow the forum rules.
For troubleshooting and bug reporting, make sure you read this first

For your mediacenter artwork go to
[Image: fanarttv.png]
find quote
DieBagger Offline
Junior Member
Posts: 2
Joined: Oct 2010
Reputation: 0
Post: #8
Avira Antivir also detects

Quote:Virus or unwanted program 'TR/Spy.698357 [trojan]'
detected in file 'C:\Program Files (x86)\XBMC\system\players\paplayer\timidity.dll.

in the eden installer...
find quote
fuzzyphil Offline
Junior Member
Posts: 1
Joined: Dec 2011
Reputation: 0
Post: #9
Norton 360 reports same virus issue. Anoyingly deletes download bfore I even have chance to open it.
find quote
WiSo Offline
Team-XBMC Developer
Posts: 2,733
Joined: Oct 2003
Reputation: 0
Location: Germany
Post: #10
timidity is just for playing midis so removing it may not harm. However nothing changed to the source so I guess the mingw compilation shares a string with a trojan. If anyone wants to check: Here is the source which we use for timidity.dll
https://github.com/xbmc/xbmc/tree/master/lib/timidity

Always read the XBMC online-manual, FAQ and search the forum before posting.
Do not e-mail XBMC-Team members directly asking for support. Read/follow the forum rules.
For troubleshooting and bug reporting please make sure you read this first.
find quote
Muckl Offline
Junior Member
Posts: 6
Joined: Oct 2011
Reputation: 0
Post: #11
Avira AntiVirus also detected a trojan. I sent them the timidity.dll for review and they naturally confirmed it's a false positive. Updated signatures are available in VDF 7.11.20.153.

Win7 Pro x64 + Eden + Aeon Nox 3.5.0
find quote
TugboatBill Offline
Posting Freak
Posts: 829
Joined: Oct 2009
Reputation: 7
Post: #12
If your AV is reporting it as a virus/trojan let your AV provider know. Otherwise if they don't know, they won't fix it.
find quote
rodmar8 Offline
Junior Member
Posts: 3
Joined: Jan 2012
Reputation: 0
Post: #13
This dll was passed OK on Comodo
find quote
T4FF Offline
Junior Member
Posts: 13
Joined: Jan 2010
Reputation: 0
Post: #14
rodmar8 Wrote:This dll was passed OK on Comodo

Funnily enough, Comodo raised it as HIGH for me Laugh I've raised it with Comodo as a false alert....
find quote