Virus In Captureone Le!!!

[amadjuster]

I recently downloaded CaptureOne LE that came with my new Sandisk CF 4mg card. What I didn't know until today is that I also got Win32.HLLW.AntiQFX which is a little trojan back-door that will delete certain files from photo software, rendering them unusable or crippled. I am now missing a .DLL from CS3 Bridge that wasn't a problem before. I will be letting Sandisk know what I think, as well as CaptureOne. It is a shame that a company thinks that sabotaging another piece of software is a legitimate tactic.

[johnastovall]

Originally Posted by amadjuster

I recently downloaded CaptureOne LE that came with my new Sandisk CF 4mg card. What I didn't know until today is that I also got Win32.HLLW.AntiQFX which is a little trojan back-door that will delete certain files from photo software, rendering them unusable or crippled. I am now missing a .DLL from CS3 Bridge that wasn't a problem before. I will be letting Sandisk know what I think, as well as CaptureOne. It is a shame that a company thinks that sabotaging another piece of software is a legitimate tactic.

Why would you think C1 had anything to do with the virus? As for their sabotaging other vendors software that way is just crazy. Too many people run both and haven't reported this problem.

[shutterdrone]

Originally Posted by amadjuster

I recently downloaded CaptureOne LE that came with my new Sandisk CF 4mg card. What I didn't know until today is that I also got Win32.HLLW.AntiQFX which is a little trojan back-door that will delete certain files from photo software, rendering them unusable or crippled. I am now missing a .DLL from CS3 Bridge that wasn't a problem before. I will be letting Sandisk know what I think, as well as CaptureOne. It is a shame that a company thinks that sabotaging another piece of software is a legitimate tactic.

I sincerely doubt that C1 gave you a trojan intentionally to destroy others' software. Especially one six years old that can be detected by any AV software. What AV are you running that let you execute the file to begin with?

You downloaded C1LE from the website, or off of the CF card? Either way, look for MSCDEX.EXE and that's your source. See: http://www.symantec.com/security_res...121513-1645-99


!c

[amadjuster]

Downloaded as a ZIP file from Phase One's site. Used AVG 7.5. I scanned the ZIP file and nothing shows up. When it is installed, there it is. I have removed it and have notified Sandisk. I tried sending an e-mail to Phase One but the only way you can contact Support is if you log in. I thought I was registered but I can't get in so I will try another way. Oh, the tech at Sandisk told me they had other reports about this virus. It sounds like an amateur because there are sure nastier stuff out there. I think I'll pass on Capture One. CS3 is working fine and I only wanted to check this one out. I'm just glad I caught it before anything bad happened (knocking on wood).

[Dwight]

Does Sandisk own Capture One?

[Clint_Smith]

sounds a little more like a "serial" or keygen virus to me......

[amadjuster]

After contact with C1, it was determined something hitched a ride somehow on the download and a new one did the trick. Works great and no bugs.

I was impressed at their promptness. They did indicate there had been more than one event but did not know the source. I believe them.