PMS.exe from code.google a virus?

[0082]

I downloaded PMS 1.04 from Google Code yesterday and installed it. This morning, Prevx CSI reported that PMS.exe is Cloaked Malware. My Symantec AV is not complaining thought. What's up? Can someone verify this result? Thanks.

Prevx detail on the malware:
http://info.prevx.com/aboutprogramtext. ... ISDLPXACHU

Here is the link I downloaded the PMS 1.04.
http://code.google.com/p/ps3mediaserver/downloads/list

[meskibob]

Not sure about Prevx, but I know other users were having problems with heuristic scanners, like Kaspersky, flagging PMS with a false-positive. According to AV-Comparatives, Symantec does pretty well for good protection with low false-postives (I use the corporate version), so you should be fine. Plus if you're really cautious you can always inspect and compile the sourcecode yourself if you don't trust the already packaged installer. The joy of open source

[Irvysan]

http://www.virustotal.com/analisis/5eb9 ... ed6a20df11


Your safe, you can sleep well tonight!

[whome]

I would say its a way PMS.exe binary is packaged. It's internal file structure may follow some of the cloaked virus exe techniques.

I would like to see WinRunJ or other opensource binary launcher, it would give us moer dynamic properties to adjust JVM environment settings.
viewtopic.php?f=6&t=57

I take Subversion source dumps once in a while and compile a project. I have this PMS.bat script launcher where can try various JVM heap size settings.

Code: Select all

@REM http://java.sun.com/docs/hotspot/ism.html
@REM
@REM Use java.exe or javaw.exe launcher,
@REM you may give a fully qualified path (c:\jdk1.6\bin\java.exe)
@REM
@REM maximum total heap size: -Xmx<768m | 1g>
@REM

@rem java.exe -Xmx1g -Djava.net.preferIPv4Stack=true -Djava.encoding=UTF-8 -jar pms.jar
start javaw.exe -Xmx512m -Djava.net.preferIPv4Stack=true -Djava.encoding=UTF-8 -jar pms.jar

@REM pause