Win32.Polipos.ki Virus?

theshowmecanuck · Post by **theshowmecanuck** » Sun Nov 13, 2011 1:40 pm

I just downloaded and installed the latest RC for MM4 and when I went to play a video it reported that in the Mediamonkey directory there was a win32.polipos.kl trojan associated with the mediamonkeyvhelper.exe file (in the mediamonkey program folder on my c drive. Is this a false positive from my spybot s&d or is there a problem here?

Post by **Lowlander** » Sun Nov 13, 2011 1:49 pm

Generally false positives as signature databases aren't updated or up to date on user PC.

david main · Post by **david main** » Tue Nov 22, 2011 8:32 pm

Activating Media Monkey 4 this morning - Spybot S&D reports
Win32.polipos.ki virus present

MrBK21 · Post by **MrBK21** » Thu Nov 24, 2011 2:42 pm

I had the same thing happen to me on 11-23-2011 right after I installed MM4 - seems to be infected for sure.

Post by **Lowlander** » Thu Nov 24, 2011 2:44 pm

So far all virus warnings for MediaMonkey 4 have been false positives. Here it shows 0 infections.

MrBK21 · Post by **MrBK21** » Fri Nov 25, 2011 1:19 am

Hmm, mine was picked up with Symantec scan. I wonder if there are multiple download servers with only one infected or some downstream process possibly inserting infections.

vsnmxr · Post by **vsnmxr** » Fri Nov 25, 2011 1:23 am

Lowlander wrote:Generally false positives as signature databases aren't updated or up to date on user PC.

I just upgraded and am having the same problem. I just ran and updated Spybot yet when I try to play a video file in MM4 I receive the message "Filename: MediaMonkeyVHelper.exe" is "Identified as: Win32.Polipos.kl."

For the technology challenged people like myself, could you expand on what you mean by "Generally false positives as signature databases aren't updated or up to date on user PC."

In other words, is there something else I need to do besides updating Spybot?

vsnmx · Post by **vsnmx** » Fri Nov 25, 2011 1:32 am

I just upgraded to MM4 and when I try to play a video I get a pop-up from Spybot telling me "Filename: MediaMonkeyVHelper.exe" is "Identified as: Win32.Polipos.kl."

I updated Spybot but still am receiving the same message/warning.

rovingcowboy · Post by **rovingcowboy** » Fri Nov 25, 2011 2:29 am

each anti virus company uses different parts of the real virus code to id it.
some happen to match real good codes.
all anti virus companys do not use the same name to id a virus which is why it might seem like
several have hit your system but its the same one. if you got one from downloading mediamonkey it was the type
that hang around the download server at some free site or on one between the site and your system. when your download
comes by it jumps on the train to sneak in.

but the only thing in mm that might trigger the false positive is the keyboard script used to allow you to use the keys to control mm. some of those anti virus companys might still refuse to see it is not a threat.

but using the free avg program i get no such warning.

tungsten · Post by **tungsten** » Fri Nov 25, 2011 12:08 pm

Hi,
Just upgaded and getting the same Spybot report regarding Win32.polipos.wl.

Is it safe to allow this process to run ?

Tungsten

JerseyJoe · Post by **JerseyJoe** » Fri Nov 25, 2011 1:29 pm

I got about a dozen of these same errors while scanning some videos under a portable install.

https://picasaweb.google.com/postcards. ... directlink

Testing out some of the new features before my upgrade.

Post by **rusty** » Fri Nov 25, 2011 1:34 pm

Hi,

To reassure you, upon release, MM is scanned by MS Security Essentials, eSet Online Scanner, and Panda Security Activescan. In addition, both Download.com and Softpedia scan the app using a number of engines. None of these have revealed any problems.

The version of the software being scanned is: MediaMonkey_4.0.0.1459.exe (MD5: e82ff15bf4194b7e90a819c233858fdf).

I'm reporting this as a false positive to the folks at S&D.

-Rusty

p.s. this sort of thing has happened numerous times in the past, and on every occasion, the issue was resolved with an update to the virus scanner's definition files. Also the report of a virus detection in MM4 builds by Norton AV was found according to other user reports to have been resolved by updating the engine/definition files.

tungsten · Post by **tungsten** » Fri Nov 25, 2011 2:03 pm

Hi,
I appreciate what you say but all my definitions are up to date.

Is it not the code in MM4 that needs tweaking if it happens to match that of the reported trojan?

By the way, does anyone know what this trojan does if it gets loose on your PC ?

Tungsten

Post by **Lowlander** » Fri Nov 25, 2011 2:22 pm

No, it is Spybot that needs to update their definitions as they're incorrectly detecting the virus. Until Spybot comes out with a definition update it will keep marking it as virus.

tungsten · Post by **tungsten** » Mon Nov 28, 2011 10:14 am

Hi,

Spybot have confirmed this as a false positive and will be fixed during next round of detection updates.

See http://forums.spybot.info/showthread.php?t=64484 for more info.

Tungsten

Win32.Polipos.ki Virus?

Spybot Reported win32.polipos.kl trojan in MM4 RC

Re: Spybot Reported win32.polipos.kl trojan in MM4 RC

Win32.Polipos.ki Virus?

Re: Win32.Polipos.ki Virus?

Re: Win32.Polipos.ki Virus?

Re: Win32.Polipos.ki Virus?

Re: Spybot Reported win32.polipos.kl trojan in MM4 RC

Re: Win32.Polipos.ki Virus?

Re: Win32.Polipos.ki Virus?

Re: Win32.Polipos.ki Virus?

Errors with Spybot

Re: Win32.Polipos.ki Virus?

Re: Win32.Polipos.ki Virus?

Re: Win32.Polipos.ki Virus?

Re: Win32.Polipos.ki Virus?