Announcement: Our new CyberLink Feedback Forum has arrived! Please transfer to our new forum to provide your feedback or to start a new discussion. The content on this CyberLink Community forum is now read only, but will continue to be available as a user resource. Thanks!
CyberLink Community Forum
where the experts meet
| Advanced Search >
PowerDVD 8 Ultra Update Build 2521 has Packer.RLPack.D Virus!!!
Sanchai [Avatar]
Newbie Joined: Feb 10, 2009 04:40 Messages: 12 Offline
[Post New]
While attempting to update PowerDVD 8 Ultra to the new build 2521, BitDefender Internet Security 2009 detected and quarantined 4 files infected with Packer.RLPack.D Trojan. Theses files are in VideoFIlter folder, and are: ddabc.dll, ddabcd.dll, ddorz.dll, ddorzd.dll.

Search Google by entering ddabc.dll and ddabcd.dll confirmed that these are Trojan! McAfee cannot detect this trojan!

Hey Cyberlink, do you want to infect your customers' PC with virus and trojan?

What these 4 filese neeeded for PowerDVD, the last buil;d never have these files
Martin [Avatar]
Newbie Joined: Dec 12, 2008 06:09 Messages: 47 Offline
[Post New]
I do not have these files on my computer after the update. Probably your system was infected before?

Regards!
Sanchai [Avatar]
Newbie Joined: Feb 10, 2009 04:40 Messages: 12 Offline
[Post New]
I don't think my PC was infected. This is because I did a manual scan of the update file downloaded from Cyberlink website (File name: PowerDVD8.2521_DVD81202-02.exe) with BitDefender Internet Security 2009 and it reported 3 incidence of infected files in data1.cab installation file. I also download a patch file (PowerDVD_Patch_DVD081231-02.exe and scan it, the same result!

So when I install the file downloaded, the 4 infected files were autiomatically quarantined! My PC is not infected yet. But I'm sure there are virus in Cyberlink update file of build 2521. Scan of build 2217a was clean!

ANy friend can confirm this incident? AFter conplianing to Cyberlink, the customer service point m,e to build 2430! I will scan test and report. Hope it will be fine!
Sanchai [Avatar]
Newbie Joined: Feb 10, 2009 04:40 Messages: 12 Offline
[Post New]
Just downloaded Build 2430 from Cyberlink website as per customer service instruction filename: PDVD8_2430U_DVD081202-02.exe. Then right after download, I manually scan the downloaded files with BitDefender Internet Security 2009,

Found Packer.RLPAck.D virus in Data1.cab included in the installation archive.

And after extraction, these files are: ddabc.dll, ddabcd.dll, ddorz.dll, ddorzd.dll in \VideoFilter folder under c:\Program Files\Cyberlink\PowerDVD8.

These filese were found in both build 2430 and 2521!!!

SO I proceed to install build 2521, then remover these 4 quarantined virus files in BirDefender, PowerDVD8 Ultra start and run fine.

These 4 files may be unnecessary and come from Cyberlink's infected PC? I never seen these files in build 2217a and before.

Daisuke [Avatar]
Contributor Joined: Oct 03, 2006 06:25 Messages: 354 Offline
[Post New]

Probably it's the false alarm of the BitDefender software.
I heard about CyberLink RD team is trying to contact the virus lab to verify this issue.
BTW, here is the free on-line virus scan URL.
It includes many scan engines.
http://www.virustotal.com
Sanchai [Avatar]
Newbie Joined: Feb 10, 2009 04:40 Messages: 12 Offline
[Post New]
If you go to Google and enter ddabc.dll or enter ddabcd.dll, you will see that they are all trojan!!!

What these 4 files do for PowerDVD? Why they just appeared on build 2521 and 2430 but notin prior build like 2217a? I tried to get answer from Cyberlink but no hope!

Can any friend here clarfy? Thank!
Stefan [Avatar]
Newbie Joined: Mar 05, 2007 08:30 Messages: 1 Offline
[Post New]
I've got the same trojan infected file via Cyberlink support. Scanned with Avira Antivir.
Maybe their servers were infected and someone "forgot" to check the files recently.
JJPower [Avatar]
Newbie Joined: Feb 21, 2009 22:34 Messages: 47 Offline
[Post New]
I got the same thing detected by my Avast antivirus. I have reported this to Cyberlink in a support ticket, but they do not seem to want to respond. I have been waiting 4 days for a reply. I had to completely uninstall my PowerDVD Ultra 8 program and now have NO program.
All I want is the link so I can reinstall the my previous build that was working fine. This is terrible that I can't even get my previous program back and have to wait until the support team feels like getting around to addressing my support ticket.
Daisuke [Avatar]
Contributor Joined: Oct 03, 2006 06:25 Messages: 354 Offline
[Post New]
Hello,

The Packer.RLPack is a tool to protect PowerDVD module.
Some AV softwares will detect these Packer files as false alarm.

For more information of the RLPack, please check the URL.
http://rlpack.jezgra.net/index.html

Free file scan with some AV software engines.
http://www.virustotal.com

This message was edited 1 time. Last update was at Feb 26. 2009 01:16

JJPower [Avatar]
Newbie Joined: Feb 21, 2009 22:34 Messages: 47 Offline
[Post New]
I checked out the link supplied about the RLPack, and it looks to me like a program that cost money to purchase. Is this the case?
My previous Power DVD Ultra 8 build 2021 didn't have any of these issues with virus alerts.
It doesn't seem right that we (paying customers) should have to buy or install another program to make this new upgrade 2521 work. JMO
Daisuke [Avatar]
Contributor Joined: Oct 03, 2006 06:25 Messages: 354 Offline
[Post New]
Hello JJPower,

You don't need to purchase the RLPack.
CyberLink RD team is co-work with these AV softwares to fix the false alarm issue.

For you issue with Avast antivirus software.
You can set the set the PowerDVD 8 install folder, C:\Program Files\CyberLink\PowerDVD8, as the "Exception item" in your virus scan item.


JJPower [Avatar]
Newbie Joined: Feb 21, 2009 22:34 Messages: 47 Offline
[Post New]
Hi Daisuke,
I will exclude this folder from my Avast antivirus for now.
Please notify us as soon as this issue has been resolved.
Thank You.

This message was edited 1 time. Last update was at Feb 27. 2009 18:51

Sanchai [Avatar]
Newbie Joined: Feb 10, 2009 04:40 Messages: 12 Offline
[Post New]
I have just upgraded to PowerDVD 9 Ultra today. The same, there are five files that are infected by Packer.RLPack.D.

My antivirus software (BitDefender Internet Security 2009) won't allow these files to be placed in c:\Program FIles\Cyberlink\PowerDVD9\VideoFilter folders. as it should be.

It put all these 5 files into quarantine. These files are: ddabc.dll, ddabcd.dll, ddor2.dll, ddor2d.dll and d264dec.ax

My installation of Power DVD 9 Ultra completed and PowerDVD9 started OK.

If these 5 files are mssing (since they are placed into quarantine folder by BitDefender), will my PowerDVD9 have any operation problem?

I cannot get support that clearly answer my question from Cyberlink. Can some friend here tell me what are they and how they will afrfect my PowerDVD operation if they are missing?
Sanchai [Avatar]
Newbie Joined: Feb 10, 2009 04:40 Messages: 12 Offline
[Post New]
ANd whay Cyberlink has to use RLPack that resulted in alrm in almopst all antivirus software!!!! Is there any better solution to protect Cyberlink product that have no problem like these?
Sanchai [Avatar]
Newbie Joined: Feb 10, 2009 04:40 Messages: 12 Offline
[Post New]
Every time I asked Cyberlink support, they will tell me to uninstall and reinstall the software. This is absolutely silly! It will never solve the Packer.RLPack.D problem! I need a clean files to be placed back into the \VideoFilter folder to make PowerDVD work as it should be
Tup3x [Avatar]
Newbie Joined: Feb 21, 2009 15:55 Messages: 7 Offline
[Post New]
Cyberlink product after PowerDVD 4 have been just crap and their support is even crappier. ArcSoft, here I come!
Martin [Avatar]
Newbie Joined: Dec 12, 2008 06:09 Messages: 47 Offline
[Post New]
But ArcSoft TMT is also crap... all "update" patches are worse than the previous versions and introduce new problems.

Currently, there is no perfect solution for BR playback on the PC. It's just a matter of picking the less buggier software. With PDVD9, Cyberlink seems to have lost the lead.


Regards!
Sanchai [Avatar]
Newbie Joined: Feb 10, 2009 04:40 Messages: 12 Offline
[Post New]
I wrote to Cyberlink support. They aware of this problem and said they may be false alarm. They said that notification has been made to R&D but still no promise on how to solve this unbelievable problem!

If I un-quarantine the files and run PowerDVD. Whenever these files are called, BitDefender will faithfully put them to quarantine immediately.

This is very serious problem to Cyberlink

They never listen to customer
Daisuke [Avatar]
Contributor Joined: Oct 03, 2006 06:25 Messages: 354 Offline
[Post New]
Dear Sanchai,

I just reported this issue to the CyberLink Headquarters support team.
Please wait for few days to get their feedback.

Sanchai [Avatar]
Newbie Joined: Feb 10, 2009 04:40 Messages: 12 Offline
[Post New]
In PowerDVD Ultra 9 build 1501, the infected files with Packer.RLPack.D are: ddabc.dll, ddabcd.dll, ddor2.dll, ddor2d.dll and d264dec.ax

Download the installation file from Cyberlink, and scan it with BitDefender or Avast will locate these 5 infexcted files
Powered by JForum 2.1.8 © JForum Team