Registered: Dec 2004
From:

So Adaware is reporting that C:\Program Files\Winamp\Plugins\ml_ipod\Process.exe is "malware" of the win32.Trojan.KillProc family

This seems odd. Is this a mistake on Adaware's part or is there really some malware in ml_ipod?

Quick Link | Report this post to a moderator | IP: Logged

Registered: Nov 2005
From:

Thats very unlikely. The only people who have been contributing code to ml_iPod for the past few years have been Abu and FatCerebrus1. I don't really see how any malware could get into ml_iPod. Strange though, thanks for bringing it up. I would do this if you want to be sure.

1. Uninstall ml_iPod
2. Run Adaware and remove any malware ect.
3. Re-download and reinstall ml_iPod (and make sure you download from http://mlipod.sourceforge.net/patches)
4. Run Adaware again and check it out.

Report back your findings. My guess is its nothing or you downloaded ml_iPod from a really bad place.

Quick Link | Report this post to a moderator | IP: Logged

Registered: Dec 2004
From:

I always download directly from the sourceforge page. Anyway, I let Adaware quarantine the file, then re-installed ml_ipod to replace the process.exe. I then ran adaware again and it didn't find anything, so I'm baffled!

Quick Link | Report this post to a moderator | IP: Logged

Registered: Jan 2007
From:

Did you look at the details of the reported virus? Most programs, to try and detect still unknown viruses, look for a pattern that might be a virus. I have had this numerous times with my virus software, although not with ml_ipod. When you look at the details, it says that it has detected a potential virus but to be careful as it is not sure. This may be the case here.

Quick Link | Report this post to a moderator | IP: Logged

Registered: Jun 2005
From: Germany

The process.exe is used to kill the Apple iTunesHelper.exe when ml_ipod starts, to prevent iTunes from opening when you attach your iPod. So it is a "dangerous" tool as it allows to kill running processes. But it's definitely no malware.
If you are uneasy about that, you can simply remove the file. ml_ipod will still run, but it can't kill the iTunes app then.

__________________
WinAmp Pro 5.5 with ml_iPod 3.08 + dev.patches (download it)
ml_iPod documentation Wiki - ml_iPod FAQ - search ml_iPod forum - iPhone/iTouch - Found a bug?
Donations to support the ml_iPod project can be done HERE

Quick Link | Report this post to a moderator | IP: Logged

Registered: Jul 2007
From: Greece

I have a similar problem with nod32. It blocks me from downloading version 3.03, 3.04 from sourceforge because of "Win32/PrcView application" as it says. It is probably a false alarm and i think it will go away in the next virus definition update but you might wana contact eset if it doesn't.

Quick Link | Report this post to a moderator | IP: Logged