Ecuador`s Bitrate Calculator has a backdoor!!!

[stanarevic]

Just to inform you about this... I tried to install Ecuador`s Avi BRC v2.87, but my updated Norton AV informed me that the program has a "backdoor.lolok.b" virus, and terminated the instalation. Then I downloaded the last version (2.91), same thing. I`ve been using this program for at least a year, and instaled it 2-3 times before, but this message never apeared. Remember, only updated Norton finds this!

BE AWARE!!!

[Enchanter]

I suppose a decent firewall would have blocked the backdoor as well.

[stanarevic]

Probably will, but... I`m little worried that if the backdoor in program from year 2001 is found almost recently, than this has to be a really "tough" one... This program is very popular, and I`m really confused because nobody finds this before me (I`ve serched forum, no words about backdoor in this program)

[Batman]

It is possible the backdoor was added externally by someone other than the author. Regardless, thank you for this timely advice

[setarip]

The following may be pertinent to your situation, if the program happens to use the same installer/uninstaller setup:

"Recent alerts involving Norton Anti-Virus and Startup Sentry are deemed 'false positives'.

Digital Widget has received reports of Symantec's Norton Anti-Virus alerting users to the presence of Backdoor.Lolok.B in the uninstaller portion of Startup Sentry. However, both Symantec and Indigo Rose (the author of Setup Factory, the installer used by Startup Sentry) have confirmed this to be a false positive involving files belonging to the Setup Factory suite. Neither Startup Sentry nor any of the components it uses, including Setup Factory, are infected with this virus.

Symantec released an updated NAV definition file on 6/7/03 that corrected this issue. Users are urged to update their NAV definition file if they experience any problems.

Our highest priority is maintaining the integrity of our products and good faith among our users. While it's regrettable that a number of Startup Sentry users were unnecessarily alarmed by this false positive, we recognize that it's impossible for Symantec to completely eliminate this type of situation from occurring. We are grateful that they were able to release the correction as quickly as they did and help us maintain the confidence our users have in us and our products."

[stanarevic]

Yes Setarip, you have the right information. After the newest NAV update, instalation goes well. What can I say, I have bad virus experiences in past with such small, free applications, one of them ruined the network in my firm. I was shocked with the fact that this "backdoor" was not found for a year and a half.

BTW, Norton was wrong? You don`t know who to believe these days...

[setarip]

"Yes Setarip, you have the right information."

;>}