Home	Forums	What's new	Resources

DivX codec virus or hack?

Mysticales - Jul 2, 2002

		Mysticales		Jul 2, 2002
			Hey I did a sysinfo on myself. Found something interesting... dont know if its standard divx stuff. AV doesnt see it as a virus and nortons database has nothing listed. I want you all to check on your pc for the files or sysinfo as well to see if you have the same markings. Im using w2k so I dont know about 98. Look for the words (Hacked with joy) I know im not affected or so... just wondering what the hell it is. e:\winnt\system32\divxa32.acm Hacked With Joy ! DivX ;-) Audio Codec OK E:\WINNT\System32\DIVXA32.ACM 4.1.00.3920 284.58 KB (291,408 bytes) 4/1/2000 3:11:08 AM e:\winnt\system32\msgsm32.acm Microsoft Corporation OK E:\WINNT\System32\MSGSM32.ACM 5.00.2134.1 22.27 KB (22,800 bytes) 12/6/1999 11:00:00 PM e:\winnt\system32\msg723.acm Microsoft Corporation OK E:\WINNT\System32\MSG723.ACM 4.4.3385 106.77 KB (109,328 bytes) 4/26/2002 6:10:10 PM [Video Codecs] Codec Manufacturer Description Status File Version Size Creation Date e:\winnt\system32\divxc32f.dll Hacked with Joy ! DivX ;-) MPEG-4 Video Codec (Fast-Motion) OK E:\WINNT\System32\DIVXC32F.DLL 4.DivX.3917 404.56 KB (414,272 bytes) 12/19/2000 8:36:30 AM e:\winnt\system32\divxc32.dll Hacked with Joy ! DivX ;-) MPEG-4 Video Codec (Low-Motion) OK E:\WINNT\System32\DIVXC32.DLL 4.divx.3920 404.56 KB (414,272 bytes) 12/19/2000 8:36:30 AM e:\winnt\system32\ir50_32.dll Intel Corporation Indeo® video 5.10 OK E:\WINNT\System32\IR50_32.DLL R.5.10.15.2.55 737.50 KB (755,200 bytes) 12/6/1999 11:00:00 PM

		jim993		Jul 2, 2002
			wouldn't know how to go about doing this but i've noticed a lot of codecs in my loaded modul list and i also noticed a lot of other messed up things in my running software.

		antime		Jul 2, 2002
			What's supposed to be odd about the components listed? Remember that the original DivX ;-) codec is a hacked version of a Microsoft codec.

		Taelon		Jul 3, 2002
			Well, Mysticales... I'm almost certain you have the good old DivX 3.11 codec, and yes those strings are supposed to be in there. Your antivirus triggered a false alarm. The files you posted about all look proper to me...while the codec is indeed a hack of Microsoft's MPEG4 codec, it's nothing sinister at all. FYI, DivX 4.x and 5.0 were rewritten from the ground up and use no Microsoft code anymore.