You're all in danger...beware...

[shiko]

Hi, this is my 1st post and i joined especially to warn you about the software called TINRA , which converts Realvideo into AVI , guess you know it , it's on site.

as soon as i downloaded it , KASPERSKY antivirus jumped inside the zip and told me TINRA.exe is a PORNO DIALER Virus!!

because i didn't trust that , i called a friend and told him to download TINRA , guess what......yes , PORNO DIALER!

i have scanned my HD fully and nothing was found, then i download form Divx-Digest TINRA and it's a PORNO DIALER.

i sent the file to kaspersky for checking because maybe it's a false alarm......they replied in the email and said that indeed it is w32.PORNO DIALER.A

beware!!
------------

[admin]

I've scanned the Tinra files now with 3 different virus scanners (latest versions), and nothing...

Which specific file are you referring to (there are 3 Tinra related downloads on the software page)?

[admin]

Could you also provide a link to a page that describes this virus, because having just searched Symantec's, McAfee's and F-Secure's websites, there is no virus specially called "w32.PORNO DIALER.A" (the closest was Dialer.Porno.J), but that's a GUI based virus, and TINRA is command line only.

TINRA was last updated way back in December 2001, and I've yet to have one complaint (other than this one) about it (did a search on Google, and nothing came up either). Since it is so old, the virus must be at least this old as well, so you'd think Symantec would have found out about it now.

[admin]

And I've just scanned all three TINRA files on the Kaspersky website (they have a cool online scanner tool):

http://www.kaspersky.com/scanforvirus

All clean as well.

[shiko]

download all version of TINRA ,even the GUI version , also the STABILATOR....

the go to ....www.kaspersky.com

download KASPERSKY 5.0 (latest) , don't use Online scanner won't work....

install , update Signature and put your protection ON DEMAND and taskbar to MAXIMUM , then scan those files (piece a cake to do).....guess what.....BANG....Porno.Dialer.A

kaspersky is the current best antivirus in the world, it found the BEAST 2.06 trojan on a file i got that MCAFEE didn't even.

Please try and let us know.

Thank you for your help , because this is really bad.
-----------------------------

[admin]

download all version of TINRA ,even the GUI version , also the STABILATOR....

So you're saying that everything to do with TINRA is infected, even though all of these programs are made by different individuals/companies? This can only be true if all these software programmers are in the dark about the original version of TINRA being infected with a virus, which seems unlikely don't you think?

Do you have a link to the Kaspersky virus database page that holds the information for this virus, because I couldn't find it. And since all of these TINRA files are at least 1 or 2 years old, the virus should not be a new thing, and should have been listed in the database ages ago. If this virus is new, and just detected, then there is no way the old TINRA files could be infected.

Also, try downloading TINRA from other websites, and see if their version is infected as well:

http://guiguy.wminds.com/downloads/tinragui/down.html

http://www.dvdcopyworld.de/dvdcopyworld/encoder.html

And having just downloaded the latest version of Kaspersky), with the latest updates (6/6 update file), scanned all the TINRA files (all 4 files with maximum on-demand scanning, including GUI, all downloaded from the website, not my local versions) - still nothing!! Just to be sure, I also used Trend Micro's online scanner, which is said to be the best (http://antivirus.about.com/cs/softwa...p/aaonline.htm):

http://clk.about.com/?zi=1/XJ&sdn=antivirus&zu=http%3A%2F%2Fhousecall.trendmicro.com%2F

Still nothing!!

I think what is happening is that your system is already infected with something, and it may be infecting certain files that you download. It's unlikely, but it does happen.

[geffroman]

Sounds more like a hoax post...

[admin]

Sounds more like a hoax post...

That thought occured to me quite early in the process, but then I thought surely no one has *that* much time on their hands to do such a lame hoax

[reboot]

Might not be a hoax post.
If the user has a virus/trojan on their computer, certain ones infect all new .exe files the moment they are first opened/used by any process. This leaves the user thinking that his newly downloaded program is infected, which is false, however there are other programs that ARE infected, the most common one being Explorer.exe. It can be renamed after infection, taking the place of the real one, something like "Exp|orer.exe" or "Expl0rer.exe" (I used lower case letters to show the difference. In upper case, the renamed files are almost impossible to spot.)

[admin]

That was the conclusion I came to as well, as stated in my post above, but in the original posts where the user mentions getting his friend to download it and the same virus detected does seem to go against this conclusion (unless both computers are infected with the same virus, which I guess could happen between friends who share files). And in the email the same user sent me, he did say he scanned his computer for virii and found nothing, so who knows.

[reboot]

Or Kaspersky has a beef with tinra, and is generating false positives

[admin]

I actually tried both the online and offline versions of Kaspersky, and nothing was detected. There was also no listing for any virus called "w32.PORNO DIALER.A" on either the Mcafee, Symantec or Kaspersky websites, which may further back up the hoax theory.

Isn't this fun?

[geffroman]

kinda like lighting a forest fire to watch it on the news for kicks... some people are just sick...