You are here

CamStudio Trojan

4 posts / 0 new
Last post
WorkTrana
Offline
Last seen: 3 years 11 months ago
Joined: 2016-05-31 05:44
CamStudio Trojan

Hi,

I am concerned as at my work, we scanned the installer from the official site http://camstudio.org/ (V2.7 md5 388ffa9cb19b85bd507ec85bc4a2ab2e sha1 673efd9452ce70c50f6bce8198b2261dc910302e) and found it has a trojan/adware
https://www.metadefender.com/#!/results/file/f835bc25f3954324adbf593eca3...
https://www.virustotal.com/en/file/2e0ba0c587b15335752a3ff55d2282b446a8e...). The author admits his website has been hijacked in 2014 and that the installer has been compromised (https://sourceforge.net/p/camstudio/discussion/447910/thread/3aa44d33/). But today it seems the installer is still infected.

I scanned the installer from portableapps, V2.7.2, and there is no alert. So I would like to know how are the binary packaged in this portableapps V2.7.2? Does it come from recompilation, a decompression of the installer, or a copy-paste from an installed version? Thank you.

John T. Haller
John T. Haller's picture
Online
Last seen: 41 min 49 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Bundleware, Not Permitted At PortableApps.com

Their website was apparently hacked in 2014. I guess that scan is from then. But this doesn't apply today.

Present day, their website is not hacked. The installer includes a bundleware offer. This is generally referred to as a potentially unwanted program (PUP) by most antivirus software. The offer uses a plugin from InstallCore. You can see this referenced specifically within the VirusTotal Events here: https://www.virustotal.com/en/file/12bec3cdb88f772e4510023bf71666c157250...

If you select not to install the offer as you run through the installer, nothing is installed except CamStudio. And CamStudio itself has no offers within and is clean.

The CamStudio Portable package that we offer does not include the bundleware offer that the CamStudio local installer does. PortableApps.com Format apps are not permitted to include bundleware.

Sometimes, the impossible can become possible, if you're awesome!

farat_as
Offline
Last seen: 7 years 9 months ago
Joined: 2012-02-14 09:02
It is not about this thread

It is not about this thread but I will add just a simple not:

Camstuido is not open source. VLC is open source which can capture (record) web cameras and desktops. So please make a choice Smile

John T. Haller
John T. Haller's picture
Online
Last seen: 41 min 49 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Yes It Is

CamStudio is open source. The source code is downloadable right from the CamStudio Portable page.

Sometimes, the impossible can become possible, if you're awesome!

Log in or register to post comments