exile360 Posted February 14, 2008 ID:13181 Share Posted February 14, 2008 Using a quick scan with database 357 this item was detected. I went to my system32 folder and could not locate the file. I searched google and found that it is part of SUPER, a video conversion program that I did install, but have long since removed. I believe the FP is on a file that SUPER left behind. I did a scan two days ago(I don't recall what the database version was) and it found 2 or 3 other files it claimed were trojans in my System32 folder. I researched them and likewise found them to be components of SUPER. I am currently running KAV, SuperAntispyware Pro, TeaTimer, Windows Defender and Comodo Boclean and none of them made any of these detections. I was just wondering if this is an FP or something they missed. Thanks. I have attached the log file from todays scan as instructed in the sticky. Link to post Share on other sites More sharing options...
nosirrah Posted February 14, 2008 ID:13185 Share Posted February 14, 2008 This super c thing . I have seen many forum threads where people claim that once they install it there systems become unstable and have seen reports that it also hides files from the user .I may be wrong about it being a trojan (still not sure) but it does seem to be junk .I am going to look into this one a lot more today . Link to post Share on other sites More sharing options...
nosirrah Posted February 14, 2008 ID:13186 Share Posted February 14, 2008 OK , you cant see that file because its hidden , and for no reason it seems .When you google any of the files involved with super c all you get is hijackthis help forum threads .I can find experts removing them , I can find experts not removing them .I can find VirusTotal reports where these files are listed with 3 to 5 heuristic hits but no actual direct hits for malware .One thing I cant find are reports where is this is outright listed as malware .I am removing this for now , I will look into this further though .These are the reasons I added it to begin with :1. Searching for its files netted nothing but help forum threads .2. Multiple reports of it being removed because for various reasons all involving people not being happy with it .3. Multiple reports of it being uninstalled but leaving some of its files behind .4. It hiding its files from the user .5. Some evidence of other vendors detecting it as malware . Link to post Share on other sites More sharing options...
nosirrah Posted February 14, 2008 ID:13189 Share Posted February 14, 2008 http://www.witcobber.com/download.htmThis seems to be the downlad page . I want to test this further but the download is not working .I am trying to find something that is not a strike against this software but I just cant . Link to post Share on other sites More sharing options...
nosirrah Posted February 14, 2008 ID:13190 Share Posted February 14, 2008 I cant find a download for this that still works and because of time issues (and loads of real malware to research) I cant look into this any further today .I have removed it for now , next update will up soon .If anyone can find me a link to this software I would be grateful . Link to post Share on other sites More sharing options...
Cobra Posted February 14, 2008 ID:13196 Share Posted February 14, 2008 (edited) Here is a link for Super Video Converter 5.3hxxp://www.download.com/3001-2194_4-108011...a696a53874d62c5 Edited February 14, 2008 by JeanInMontana mung live link Link to post Share on other sites More sharing options...
JeanInMontana Posted February 14, 2008 ID:13199 Share Posted February 14, 2008 Here is a link for Super Video Converter 5.3hxxp://www.download.com/3001-2194_4-108011...a696a53874d62c5Please don't post live links to malware. We appreciate your help but munged links are to protect others. Link to post Share on other sites More sharing options...
nosirrah Posted February 14, 2008 ID:13201 Share Posted February 14, 2008 This did not drop any files into system32 or windows , I do not hink that this is the same app .The one I hear mentioned is super c .Im going to check some more . Link to post Share on other sites More sharing options...
nosirrah Posted February 14, 2008 ID:13202 Share Posted February 14, 2008 http://www.erightsoft.com/S6Kg1.htmlNow this looks like it , cant find a working link on this site either though . Link to post Share on other sites More sharing options...
exile360 Posted February 14, 2008 Author ID:13203 Share Posted February 14, 2008 Thanks for all your hard work and research guys. I will agree that the program seems to be junk, that's why I uninstalled it to begin with, but I just like you could find nothing truly malicious about it. Again, I appreciate all the assistance and all the work Malwarebytes has done on RoguRemover, MBAM, Qoofix etc. You guys are great, please keep up the good work. Link to post Share on other sites More sharing options...
dr_Bora Posted February 14, 2008 ID:13204 Share Posted February 14, 2008 @nosirrah: you need to start from the home page: http://www.erightsoft.net/home.html- below Super picture> link Download and use for free- next link (on the new page) > Start Downloading SUPER Link to post Share on other sites More sharing options...
nosirrah Posted February 15, 2008 ID:13206 Share Posted February 15, 2008 Got it now , thanks for the info .Guess I was in to big of a hurry earlier . Link to post Share on other sites More sharing options...
nosirrah Posted February 15, 2008 ID:13207 Share Posted February 15, 2008 OMGThese guys have a funny definition of the term uninstall .At the very most their uninstaller removed 10% of this software .I just may build a removal tool for this , should be real easy .I am also taking a close look at all of the files left behind , what still loads and what this file is that runs for a split second after you uninstall . Link to post Share on other sites More sharing options...
nosirrah Posted February 15, 2008 ID:13208 Share Posted February 15, 2008 I m not adding this back into defs .Here is the deal , two things combine to make this "look" like malware .First it removes next to nothing that it adds to windows and system 32 .Next a lot of these files are hidden from the user and many also have no version info .But .....None of whats left is set to load and all detection on these files are based on their executable packers , they use a lot that malware also uses . Link to post Share on other sites More sharing options...
exile360 Posted February 15, 2008 Author ID:13209 Share Posted February 15, 2008 Thanks for the additional info. I'm inclined to agree that it isn't malware, however, an uninstall tool would be handy to remove all the junk this software leaves behind, especially if it could cause any conflicts with the codecs installed on a user's system. Link to post Share on other sites More sharing options...
Citrus Posted April 23, 2008 ID:17062 Share Posted April 23, 2008 OMGThese guys have a funny definition of the term uninstall .At the very most their uninstaller removed 10% of this software .I just may build a removal tool for this , should be real easy .I am also taking a close look at all of the files left behind , what still loads and what this file is that runs for a split second after you uninstall .Any news on that removal tool? I uninstalled the program and would like to remove all traces of it. Link to post Share on other sites More sharing options...
P.K. Atomsk Posted May 3, 2008 ID:17578 Share Posted May 3, 2008 I've been using SUPER for a while now to convert .flv files to MP3's and haven't had any problems with it. My friend said that he had it and uninstalled it and had no problems. I'm sure it's just bad design and not malicious in nature. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 3, 2008 Root Admin ID:17579 Share Posted May 3, 2008 Hi Bruce,SUPER Link to post Share on other sites More sharing options...
CJS Posted June 18, 2008 ID:20578 Share Posted June 18, 2008 OMGThese guys have a funny definition of the term uninstall .At the very most their uninstaller removed 10% of this software .I just may build a removal tool for this , should be real easy .I am also taking a close look at all of the files left behind , what still loads and what this file is that runs for a split second after you uninstall .Did you ever build a removal tool for SUPER? I would be greatly interested in it. Or could you post a log of all the files it installs, so I know which ones to manually delete to uninstall the program? Thanks for any help. Link to post Share on other sites More sharing options...
GT500 Posted June 18, 2008 ID:20579 Share Posted June 18, 2008 Did you ever build a removal tool for SUPER? I would be greatly interested in it. Or could you post a log of all the files it installs, so I know which ones to manually delete to uninstall the program? Thanks for any help.At the very least a list of what's left behind would allow one of us to create a BFU script to automate the cleanup. Link to post Share on other sites More sharing options...
Guest remixed Posted June 25, 2008 ID:21061 Share Posted June 25, 2008 Hi Bruce,SUPER Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now