StreamFab 6.2.2.7

adrie

I downloaded the latest version released today, StreamFab 6.2.2.7. Two parts of this version were flagged by Norton as Trojan Horses and quarantained by Norton.

the two parts are: YoutubeToMP3Service.exe and youtubetomp3process.exe

Are these exe false positives ?

Anyone?

Windown 11 64 bit
StreamFab 6.2.2.7

Stan001

Norton was good year's ago when Norton made it, not Symantec.
However, other users claim that some files now are being flagged as virus or Trojan.
You could double-check here. Most times, it's because the files were reported to the makers of the antivirus, and they add them without checking if it's a real problem. So it ends up as a false positive finding.
I have the whole streamfab folder excluded so as not to have issues with antivirus or malwarebytes eating the files. Malwarebytes does not see these files as an issue, even with the folder not excluded.
YoutubeToMP3Process.exe

adrie

Norton was good year's ago when Norton made it, not Symantec.
However, other users claim that some files now are being flagged as virus or Trojan.
You could double-check here. Most times, it's because the files were reported to the makers of the antivirus, and they add them without checking if it's a real problem. So it ends up as a false positive finding.
I have the whole streamfab folder excluded so as not to have issues with antivirus or malwarebytes eating the files. Malwarebytes does not see these files as an issue, even with the folder not excluded.
YoutubeToMP3Process.exe
Stan001

Thanks a lot Stan001.

Indeed Norton is not what it used to be. I excluded the 2 exes .

BradYonder

I downloaded the latest version released today, StreamFab 6.2.2.7. Two parts of this version were flagged by Norton as Trojan Horses and quarantained by Norton.

the two parts are: YoutubeToMP3Service.exe and youtubetomp3process.exe

Are these exe false positives ?

Anyone?

Windown 11 64 bit
StreamFab 6.2.2.7

adrie

Got the same issue from Avast Free - both files were moved to Quarantine. My gut tells me they are false positives. Related, I've been sick for a week so my gut may be telling me a lot of things I shouldn't be listening to...

Timo1701

I got the same with Avast, those two files were put into quarantine too. Now Streamfab just crashes if I try to download anything from watchfreeuk.co.uk and u.co.uk. Is it worth removing these two files from quarantine and restoring them? Never had this problem before with files being sent to quarantine.

Olivierduc

No (false) detection of SF6227 with BitDefender.

Sebastian001

I got the same with Avast, those two files were put into quarantine too. Now Streamfab just crashes if I try to download anything from watchfreeuk.co.uk and u.co.uk. Is it worth removing these two files from quarantine and restoring them? Never had this problem before with files being sent to quarantine.
Timo1701

Streamfab will not work without these two files

Stan001

Thanks a lot Stan001.

Indeed Norton is not what it used to be. I excluded the 2 exes .
adrie

Glad you got it working.

I did not get to post more info yesterday, but even VirusTotal says it can be a false positive. As stated, one of the best malware scanners, Malwarebytes, says NO issues were found or detected.

A quote from the VirusTotal website, 'Detects patterns in compiled PyInstaller binaries. This rule is a generic rule that might generate false positives. A match should be further investigated.'

And for those having issues like Sabastian001 said, streamfab must have these files, or it will cause issues with the program working right or not at all.
So, if the files are in quarantine, you must restore them. If not in quarantine, exclude them from your virus scanner, as adrie has done, then install SF from the offline installer again to restore these files.

KidJoe

I know its suspected to be false positives, but take a look at -> https://www.reddit.com/r/Streamfab/comments/1jncpyi/check_your_temp_folder/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

Note: I haven't upgraded past 6.2.2.5 yet.

Stan001

I know its suspected to be false positives, but take a look at -> https://www.reddit.com/r/Streamfab/comments/1jncpyi/check_your_temp_folder/?utm_source=share&utm_medium=web3x&utm_name=web3xc ss&utm_term=1&utm_content=share_button

Note: I haven't upgraded past 6.2.2.5 yet.

I am the last to support SF, whether it's a virus or not. I just know if it was, my Malwarebytes would be very, very busy.

And they seem to be talking about the Windows temp folder, not the temp folder in SF, so it could be a Virus/Trojan anywhere on their computer for those reporting such activity, as they are on Reddit.

Or chose not to use SF or update. I have seen more false positives in my life than I care to go into. I used to make programs and called them keygen, and guess what? They would then be removed by an antivirus program. I 100% believe Virustotal that it is due to the patterns in compiled PyInstaller binaries. We all know the one file is yt-dlp, but with slight modifications to add a few extra commands (source cats4U), and yt-dlp is made via Python compiling.

Again, this is where streamfab or their support should be more active in explaining things and not leaving it all up to just users.

If older version(s) work it was said before, stay with them, I can go back to 6221 & 6223, or if I want, I can put even more versions on my computer if needed.

Stan001

Ok, as far as they are describing on Reddit I was able to duplicate not only with 6227, but the same thing happened with 6223.
All files checked with full Malwarebytes scan and nothing found. Malwarebytes looks for things that Microsoft Defender never looks for or finds.
Malwarebytes will find backdoors, miners, Trojans, and more! ...

Disclaimer: I do NOT get paid to push Malwarebytes.
And YES, you still can use it for FREE!

If you have doubts about Malwarebytes, also try for free Dr.Web CureIt! >here

BRAWLman

Norton was good year's ago when Norton made it, not Symantec.
However, other users claim that some files now are being flagged as virus or Trojan.
You could double-check here. Most times, it's because the files were reported to the makers of the antivirus, and they add them without checking if it's a real problem. So it ends up as a false positive finding.
I have the whole streamfab folder excluded so as not to have issues with antivirus or malwarebytes eating the files. Malwarebytes does not see these files as an issue, even with the folder not excluded.
YoutubeToMP3Process.exe
Stan001

Thx Stan001!
Download link for ALL Manual downloads https://www.dvdfab.cn/download.htm?_cut_=MTc0MDI0NzMwOV9oRmpXemliZGZCZFc%3D&_cus_=TVRjME16UTFOall5TUY4d00xOWtkbVJtWVdKZlkyNWZSazkzZGtKRVZuaG5XZz09&_csrc_=eyJyciI6Imh0dHBzOi8vcGxheWVyZmFiLmR2ZGZhYi5jbi9kb3dubG9hZC1wbGF5ZXJmYWItd2luLmh0bSJ9

Cap'n Piledriver

I was getting "Error 702" after updating to 6.2.2.7 so I uninstalled & did a clean reinstall.
When I did, Norton (I know) caught THIS: Win32:RansomX-gen [Ransom]
____________________________

Details

Threat name: Win32:RansomX-gen [Ransom]
Threat type: Ransomware - This threat locks your data (or entire computer) and demands you pay a ransom to unlock it.
Status: Moved to Quarantine
Options: Report false detection
Detected by: Auto-Protect
On PC from: 3/31/25, 4:03 PM
Last Used: 3/31/25, 4:03 PM
Startup Item: No

Very few
Very few in the Norton Community have used this file.

New
This file was released 4 days ago.

High
The file risk is high.

Cap'n Piledriver

I was getting "Error 702" after updating to 6.2.2.7 so I uninstalled & did a clean reinstall.
When I did, Norton (I know) caught THIS: Win32:RansomX-gen [Ransom]
____________________________

Details

Threat name: Win32:RansomX-gen [Ransom]
Threat type: Ransomware - This threat locks your data (or entire computer) and demands you pay a ransom to unlock it.
Status: Moved to Quarantine
Options: Report false detection
Detected by: Auto-Protect
On PC from: 3/31/25, 4:03 PM
Last Used: 3/31/25, 4:03 PM
.
Cap'n Piledriver

Interesting... turns out I'd accidentally downloaded & installed the x86 version above.
But when I'd uninstalled that and downloaded the x64 (the right one for my computer) NO malware was detected! (?)