Registrator viewer has trojan or malware.win32 virus???

to be fair his camera isn't in the list of supported models anyway

Okay. Is there another software that works with avi?
 
VirtualDub (Windows only).
 
I've worked with virtualdub long time back.
Thanks for the reminder.
 
How can we get RegistratorViewer whitelisted with Norton? (I'll message Vadim)

A customer of ours just sent the following message:

"Jon,
FYI - Just tried to view the registratorviewer.com site. Got this warning from Symantec/Norton
According to this discussion
https://dashcamtalk.com/forum/threads/registrator-viewer-has-trojan-or-malware-win32-virus.5806/
it's a false positive, tho from a less reliable program than Norton. Several online discussion on the same topic for two years now. Found one of yours too. People talking about warnings from McAfee last year.
May be a problem, may not be. But just ain't worth the risk."

kAWf7RVl.png
GFOL3Iel.png
 
Last edited by a moderator:
It seems to be issues with older versions of the app flagging up the warning:

Here is a complete list: (for more information about a specific threat, click on the Threat Name below)

Threat Name:
Trojan.Gen.2
Location:
http://download.registratorviewer.com/download/RegistratorViewer_v3.4.exe


Threat Name:
Trojan.Gen.2
Location:
http://download.registratorviewer.com/download/RegistratorViewer_v2.6.exe


Threat Name:
Direct Link To Trojan.Gen.2
Location:
http://www.registratorviewer.com/download.html
 
In fact that v3.4 sends lots of AV scanners crackers:

SHA256: 368e926a878c084845fdf05d9e0e792a075a79d9c20c776715e612ee9f8d07c3
File name: RegistratorViewer_v3.4.exe
Detection ratio: 22 / 56
Analysis date: 2015-08-17 18:05:24 UTC ( 0 minutes ago )
chart

0

0

Antivirus Result Update
ALYac Trojan.GenericKD.2245933 20150817
AVware Trojan.Win32.Generic!BT 20150817
Ad-Aware Trojan.GenericKD.2245933 20150817
Arcabit Trojan.Generic.D22452D 20150817
BitDefender Trojan.GenericKD.2245933 20150817
Comodo UnclassifiedMalware 20150817
DrWeb Trojan.DownLoader9.20870 20150817
Emsisoft Trojan.GenericKD.2245933 (B) 20150817
F-Secure Trojan.GenericKD.2245933 20150817
GData Trojan.GenericKD.2245933 20150817
Ikarus Trojan.SuspectCRC 20150817
Kaspersky UDS:DangerousObject.Multi.Generic 20150817
McAfee Artemis!44EFCD4BF256 20150817
McAfee-GW-Edition BehavesLike.Win32.Downloader.jc 20150817
MicroWorld-eScan Trojan.GenericKD.2245933 20150817
Qihoo-360 Win32/Trojan.Multi.daf 20150817
Rising PE:Trojan.Win32.Generic.14C35C24!348347428 20150817
Symantec Trojan.Gen.2 20150817
TrendMicro TROJ_GEN.R047C0OCQ15 20150817
VIPRE Trojan.Win32.Generic!BT 20150817
ViRobot Trojan.Win32.S.Agent.699392.AO[h] 20150817
nProtect Trojan.GenericKD.2245933 20150817

Probably worth @Vadikus removing those two old versions (3.4 & 2.6) of the file from the site as once they're removed it would fix the detections and make the site safe again.

If UPK was used it could be something like that triggering the AV.
 
Response from Vadim:

"I cannot (and I don't want) to talk with every antivirus organization about whitelist.
And in any case I must do it for every release.
If user has alert, he can send this file to support himself."
 
If UPK was used it could be something like that triggering the AV.

his program is a standalone exe that calls home to Russia to automatically look for updated versions, I guess that's a red flag to some AV programs even though its a legitimate function in this case
 
Norton's website analyser claims to have found 3 viruses on the website, so presumably Norton will also flag up the executable itself ==> https://safeweb.norton.com/report/show?url=www.registratorviewer.com

Not sure how you submit a false positive report to Norton, but there's a button on that page to leave user reviews of the site, if other AV programs find nought amiss, might be worth leaving a few user comments to that effect.
 
don't worry about it, billions of websites, they can't get everything right, the developer knows about these AV programs that flag the very old versions of his program which are in the download archive section, he has no intention of removing them, nor should he have to
 
Hi there, I don't know exactly what site you're trying to download from, but the official site and download link is this:
http://www.registratorviewer.com/download_en.html

If you're downloading from this site directly, then go ahead, my antivirus hasn't found anything wrong with the executable and no other user has reported any issues with trojans and/or malware.
It appears that the name has been changed to DataKam Player. It seems to work without false positive anti-virus notifications from "http://datakam.com/download/DatakamPlayer/index.php?file=DATAKAM PLAYER.zip"
 
Back
Top