Clsid FFDShow modifying Windows Explorer. in Security http://www.dslreports.com/forum/r19884817 en Thu, 10 Dec 2009 11:48:00 EDT Thu, 10 Dec 2009 11:48:00 EDT Re: Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19885668 The Snowman :

ffdshow is installed on my computers without any problems...in fact, I would not be found without ffdshow....its a very good codec. But where a person obtains the codec from.....any codec or any program...means a major thing....there are lots of bad download websites out there.

Blue Turtle all security issues are taken very seriously by the Members of this Forum.......and without a little humor now and then most of us would just plain not help other people....this can be very stressful business.
Of course you always have the option of paying someone for security advice.....it the end most likely their advice wont be as good as the advise found here.....but please try it if you find our humor is offensive.]]> http://www.dslreports.com/forum/remark,19885668 Sun, 27 Jan 2008 20:11:55 EDT Re: Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19885363 NetFixer :
said by Blue Turtle :

No winking or hammer on head smilies please.
This is very serious to me.
The "hammer on head smilies" and the "Doctor, it hurts when I do this." vaudeville joke I posted in another of your threads was in reference to your continued use of a specific model modem/router which was causing you problems, even though you had in your possession a different model which did not have any problems. It was not an attempt to ridicule your security concerns (although using a modem/router which did not have the reported symptoms would probably also have solved the security concerns as well)
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.]]> http://www.dslreports.com/forum/remark,19885363 Sun, 27 Jan 2008 19:23:51 EDT Re: Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19885290 NetFixer :
said by Blue Turtle :

I hope I tested the right explorer.exe. I searched and found a few.
How many is "a few" and exactly where were they found?

Here is a sample screen capture of a search for "explorer.ex?" from the Windows XP workstation I am using.

[att=1]

The copy in the "c:\windows" folder is the only one that should really matter, but if you really have multiple copies, it is not impossible that registry changes could force your Windows installation to use one of the other copies, and where those other copies are located can often be used as a guide to their validity.
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.
Click for full size
]]> http://www.dslreports.com/forum/remark,19885290 Sun, 27 Jan 2008 19:08:55 EDT Re: Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19885240 anon : I tested FFDshow 1805 from the afterdawn site, the latest 1817 from ffdshow.info, and version 1771.

I had the hash from before I installed ffdshow and after.
The hash for explorer.exe in c:\windows in vista 32 bit stayed the same after trying each version out.
I hope I tested the right explorer.exe. I searched and found a few.

This was using the hash software Cudni linked too.
Thanks Cudni.]]> http://www.dslreports.com/forum/remark,19885240 Sun, 27 Jan 2008 18:58:50 EDT Re: Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19885216 AB : I just downloaded the most recent 'ffdshow sse' version a little while ago. I'm looking forward to installing it.

I have zero concerns about it doing anything in the least malicious to my machine.

These codecs do good things! :)]]> http://www.dslreports.com/forum/remark,19885216 Sun, 27 Jan 2008 18:53:32 EDT Re: Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19885043 MarkAW : Even the site you linked to says that some AntiVirus claim that FFDSHOW rev 1805 contains a trojan which they the website says is a FP.

I use K-Lite Mega Codec Pack 3.7.0 that contains
• ffdshow:
- ffdshow [revision 1805]
and on top of that i use Avast and i get no warning from it saying i have a trojan. I say it's a FP.
--
Advertising is legalized lying. - H.G. Wells
Pleasure in the job puts perfection in the work. - Aristotle
Click for full size
 
]]> http://www.dslreports.com/forum/remark,19885043 Sun, 27 Jan 2008 18:21:34 EDT Re: Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19884997 Cudni : drop dead easy approach
take md5 hash of explore.exe before install and after install and compare the 2
»www.beeblebrox.org/hashtab/

i doubt you will see a difference.

Cudni
--
"Mercifully, he hit him with the soft end of the pistol."
Help yourself so God can help you.
MVP, Microsoft Consumer Security 2006-2007]]> http://www.dslreports.com/forum/remark,19884997 Sun, 27 Jan 2008 18:10:12 EDT Re: Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19884878 anon : Cudni, I want to know how I can test if when I install ffdshow is it or is it not modifying Windows Explorer.
Drop dead easy question.

But I will try your test engine too.]]> http://www.dslreports.com/forum/remark,19884878 Sun, 27 Jan 2008 17:53:04 EDT Re: Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19884842 Cudni : he might be lying or his tools are misreporting. Upload and test with the 2 sites
»www.virustotal.com/
»virusscan.jotti.org/

Cudni
--
"Mercifully, he hit him with the soft end of the pistol."
Help yourself so God can help you.
MVP, Microsoft Consumer Security 2006-2007]]> http://www.dslreports.com/forum/remark,19884842 Sun, 27 Jan 2008 17:47:50 EDT Clsid FFDShow modifying Windows Explorer. http://www.dslreports.com/forum/remark,19884817 anon : "You read all this junk about "ffdshow is not a trojan," well it triggers Avast (latest updated version) AND it triggers Windows Data Protection. FFDShow attempted to modify Windows Explorer. I would suggest that if you have a brain in your head stay a thousand miles away from ffdshow from clsid."

»www.afterdawn.com/software/video···show.cfm

I want to know how this fellow found out that ffdshow was attempting to modify Windows Explorer.
Did he use a special software tool?
I would like to test this out, and I'm hoping for a simple answer.

No winking or hammer on head smilies please.
This is very serious to me.]]> http://www.dslreports.com/forum/remark,19884817 Sun, 27 Jan 2008 17:43:28 EDT