DivXInstaller.exe, ism.exe, chromeid.txt, setup.ini.txt

[slack7639]

DivXInstaller.exe, ism.exe, chromeid.txt, setup.ini.txt

 

DivXInstaller.exe . . . 80,753 KB . . . Installs malware?  Or is this a false positive?

 

I think it was the above file I downloaded from File Hippo.

I installed it, and then it wanted to re-install again for some reason:

 

DivX Play 10.0.1 . . . DivX Team - 78.86MB (Freeware)

http://filehippo.com/download_divx_play/

 

I had a previous verison of DivX installed from CyberLink PowerDirector.  There were no previous malware indications - only after I did this update.

 

I went back to a restore point, and the folders below are gone.

 

Do a Ctrl+F on this page for ism.exe . . . chromeid.txt and setup.ini.txt show up there also

http://forums.divx.com/divx/topics/seems_to_be_a_virus_fix_it

 

DivX says there is no virus, adware, spyware, trojan, malicious code, etc. in *any* current DivX software.

 

* * * * * * * * * * * * * * * * * * * * * * * * * * * *

 

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org

 

Database version: v2013.11.20.14

 

Windows 8 x86 NTFS

Internet Explorer 10.0.9200.16736

* * * * :: * * * * [administrator]

 

11/21/2013 12:52:07 AM

MBAM-log-2013-11-21 (06-23-02).txt

 

Scan type: Full scan (C:\|D:\|)

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P

Scan options disabled: 

Objects scanned: 502525

Time elapsed: 1 hour(s), 39 minute(s), 58 second(s)

 

Memory Processes Detected: 0

(No malicious items detected)

 

Memory Modules Detected: 0

(No malicious items detected)

 

Registry Keys Detected: 0

(No malicious items detected)

 

Registry Values Detected: 0

(No malicious items detected)

 

Registry Data Items Detected: 0

(No malicious items detected)

 

Folders Detected: 2

C:\Users\* * * *\AppData\Local\Temp\ct3288691 (PUP.Optional.Conduit.A) -> No action taken.

C:\Users\* * * *\AppData\Local\Temp\ct3297861 (PUP.Optional.Conduit.A) -> No action taken.

 

Files Detected: 5

C:\Users\* * * *\AppData\Local\Temp\ct3288691\chromeid.txt (PUP.Optional.Conduit.A) -> No action taken.

C:\Users\* * * *\AppData\Local\Temp\ct3288691\ism.exe (PUP.Optional.Conduit.A) -> No action taken.

C:\Users\* * * *\AppData\Local\Temp\ct3288691\setup.ini.txt (PUP.Optional.Conduit.A) -> No action taken.

C:\Users\* * * *\AppData\Local\Temp\ct3297861\chromeid.txt (PUP.Optional.Conduit.A) -> No action taken.

C:\Users\* * * *\AppData\Local\Temp\ct3297861\setup.ini.txt (PUP.Optional.Conduit.A) -> No action taken.

 

(end)

[shadowwar]

This is just stating that it is PUP meaning potentially unwanted program and not malware. It seems to be detecting the optional toolbar bundled with the app and letting you know its there in the app.

[slack7639]

Hi!  Could the program provide this information?  Or instead of just the warning, could it provide you with a URL that takes you to a page that provides these details, with a forum / comments at the bottom?  This could save one a lot of time.

 

When I installed DivX, I unchecked those things.  I think it was Ask.com, and maybe something else . . . so it still puts something related to it on my hard drive - that is supposedly inactive.

 

. . . How does MB know that inactive? Can MB tell if it's active or inactive? Maybe it's spyware.

 

. . . Or could MB give you a security risk level on a scale of 1 to 10?  That would be better than a red or yellow dot . . . but a URL to discussion would be excellent.

[shadowwar]

They are all good ideas and we do have some of them in the pipeline to be developed or in progress already. I cant give an eta at this time though.

[slack7639]

Cool.  Thanks.