Vagasaur Caution

Deva-Bida wrote on 8/1/2018, 9:15 PM

I am using the Vegasaur Trial.

I went to use the Render > InstantDVD action.

I wanted to use the option to burn with ImgBurn. However:

** Following the link provided ~within~ the Vegasaur program to the ImgBurn website, I was directed by the developer to several download mirrors. I selected the first mirror and the downloaded ImgBurn EXE was wrapped in no less than 11 trojans. Most were adware, but at less one was a KEYSTROKE LOGGER. .  Malwarebytes quarantined 278 files.

It took me a few hours ensure that my machine was clean.

The ImgBurn developer's forum acknowledges the issue with some of the mirrors.

Be careful.

Comments

Former user wrote on 8/1/2018, 9:42 PM

I have not had to redownload ImgBurn for a while but thanks for the caution.

OldSmoke wrote on 8/1/2018, 10:32 PM

I thought Win7, 8 and 10 have their own image burner?

Last changed by OldSmoke on 8/1/2018, 10:33 PM, changed a total of 1 times.

Proud owner of Sony Vegas Pro 7, 8, 9, 10, 11, 12 & 13 and now Magix VP15&16.

System Spec.:
Motherboard: ASUS X299 Prime-A

Ram: G.Skill 4x8GB DDR4 2666 XMP

CPU: i7-9800x @ 4.6GHz (custom water cooling system)
GPU: 1x AMD Vega Pro Frontier Edition (water cooled)
Hard drives: System Samsung 970Pro NVME, AV-Projects 1TB (4x Intel P7600 512GB VROC), 4x 2.5" Hotswap bays, 1x 3.5" Hotswap Bay, 1x LG BluRay Burner

PSU: Corsair 1200W
Monitor: 2x Dell Ultrasharp U2713HM (2560x1440)

Former user wrote on 8/1/2018, 10:46 PM

I will only use IMGBURN to make my DVDs and CDs (video music or data). I don't use anything else to burn anymore.

Deva-Bida wrote on 8/1/2018, 11:09 PM

A day later, Malwarebytes is still finding stuff to quarantine, in this case, the ImgBurn installer:

File: 1
PUP.Optional.BundleInstaller, IMGBURN_1532699286_3838235038.EXE, Quarantined, [406], [547627],1.0.6165

Deva-Bida wrote on 8/1/2018, 11:11 PM

@altarvic , please take a look.

Vegasaur embeds a link into the software directing its customers to a known malware download site.

altarvic wrote on 8/2/2018, 2:06 AM

Vegasaur opens ImgBurn website, where users can download the software. You choose where to download, but it's better to choose the direct download link provided by ImgBurn (mirror 7): http://www.imgburn.com/index.php?act=download

Websites such as Softpedia often add additional software to the original installer and it can be adware. It's better to avoid such download catalogs. (but I don't think they intentionally add malware/trojans)

 

Deva-Bida wrote on 8/2/2018, 4:55 AM

Thank you for your quick reply, altarvic, both here and from Vegasaur support.

So, I did download from Mirror 7 (provided by ImgBurn), and it did also want to install the adware, so I cancelled. I understand now that you probably can opt out of the adware crap, but the installer is misleading (hey the developer WANTS us to take it), and I have never encountered this kind of trap.

But, success:

** I ended up with a clean installer from Mirror 6, maintained by MajorGeeks. **

Please excuse my reaction, but this is my first Windows machine, having started work on a Mac at age 40 in 1987 using Pagemaker 2.0. So, I'm an old-timer, a Windows luddite, not accustomed to viruses, adware, bloatware, etc. Plus one of the items installed kept playing audio ads through my speakers every couple of minutes. You can imagine my horror, as I also run vMix on this machine, and do regular remote mixes for high profile clients. I know shouldn't use the same machine for video editing, but, after 10 years running Final Cut Pro 7, I'm migrating to a Windows-based NLE environment and decided to test the Vegas 15 install on this machine before purchasing more Windows computers.

Anyway, it was a major headache. One of the installed items was a keystroke logger.

For those interested in what was installed, I'm including photos of the Windows Defender Trojan complaints, and also showing some of the exes that were installed.

BTW, Vegasaur looks great and I hope to try out some of the other actions soon.

Thanks again.

altarvic wrote on 8/2/2018, 6:00 AM

I found another place to download (clean, no adware): https://www.videohelp.com/software/ImgBurn

Unfortunately, the developer of ImgBurn decided to add this garbage to the installation program. I believe he makes money this way.