Skip to main content

Notice

Please note that most of the software linked on this forum is likely to be safe to use. If you are unsure, feel free to ask in the relevant topics, or send a private message to an administrator or moderator. To help curb the problems of false positives, or in the event that you do find actual malware, you can contribute through the article linked here.
Topic: Free Encoder Pack (Read 32891 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

Re: Free Encoder Pack

Reply #51
I feel safe saying false positive. Of course, this same false positive issue didn't stop me from completely discarding and reformatting my development virtual machine last year or so, only to reproduce the exact same false positive on a fresh compile on a fresh vm installed from verified install media, installing only Visual Studio Community, git for windows, and cmake for windows, and then acquiring a fresh clone of the source repository.

False positives don't even lead to improving the detection algorithms, they only lead to whitelisting tactics, because apparently detection rates are just that important.

Re: Free Encoder Pack

Reply #52
Files submitted to Microsoft for whitelisting. Hopefully they'll fix the false detection quickly and release updated definitions.

Edit: Microsoft removed the false positive detections.

Re: Free Encoder Pack

Reply #53
I attached a test version of Encoder Pack that should make Apple's AAC encoder easier to use. If it detects Microsoft Store version of iTunes it will automatically install qaac with proper bitness and offers to copy the required dlls.
This is undocumented territory and I have no idea how well this works in the wild. I have only tested it on my own machines and here it works fine.


Edit: Attachment removed. Feature included in the released version.

Re: Free Encoder Pack

Reply #54
Oh nice thanks man. Why only the MS Store version? Wouldn't be easier to detect the normal installation of iTunes from the default Program Files location/s first?

Re: Free Encoder Pack

Reply #55
It's my understanding that the "normal" encoder pack install of qaac 2.71 already does that (use the dll's from a non-Store install of iTunes), which is why Case added the option for using the Store iTunes which is otherwise not available using the standard method.  If that is correct, it might be better if Case worded the new checkbox as "Copy the required dll's if the Microsoft Store iTunes is used."

It's also worth noting that qaac versions 2.70+ require iTunes installer version equal to or greater than 12.10.9.3.  See https://sites.google.com/site/qaacpage/news/qaacrelease270refalac170.

Re: Free Encoder Pack

Reply #56
Thanks for the feedback.

As @sveakul correctly stated, the regular version doesn't need dll copying. The encoder can use those dlls directly so copying would only waste disk space. Though the points you raised made me change the qaac part once more.

Now the qaac selection will show the "(requires iTunes)" bit only if no iTunes is detected. And when iTunes is detected and the installer runs on a 64-bit OS the selection name will have "(x64)" added to the end to inform that the user gets 64-bit version. This version is required as 64-bit iTunes no longer bundles 32-bit dlls.

The installer will remove the 32-bit qaac.exe on a 64-bit machine unless it detects proper QTfiles directory with the required dlls. And in reverse it will remove qaac64.exe on a 32-bit machine unless it detects QTfiles64 directory with the required dlls. This is done to prevent foobar2000 from trying to execute a version of the program that can't function.

I'm open to suggestions if anyone has better wording for the dll copy feature.

Edit: Attachment removed. Feature included in the released version.


Re: Free Encoder Pack

Reply #58
Free Encoder Pack.exe
Trojan:Win32/Zpevdo.B
Shit, I have it installed on my old PC :-(
I'm not sure if you are serious or sarcastic. There is no trojan, some antivirus products are just insanely stupid. Some for example seem to flag all NSIS creations as trojan.
Send the file to your antivirus vendor as a false positive and you'll hear from them soon enough that they have whitelisted the file as it is not malicious at all.

Re: Free Encoder Pack

Reply #59
Sorry, not sarcastic by me. I wanted install the Encoder Pack on my new PC (Windows 10) and the file was blocked by the Defender. I cannot send the file anywhere. I can't it also download no more (also with my old PC). Therefore I copied on a USB stick and moved to the other computer.
Here, the Defender says to me:
Trojan:Win32/Zpevdo.B
Alert level: severe
Status: Quarantined
Category: Trojan

https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3aWin32%2fZpevdo.B&threatid=2147729093

Regards
muxx

Re: Free Encoder Pack

Reply #60
Downloaded the Free Encoder Pack.exe just now from Case's attachment using Firefox 85 on Windows 10 v2004 x64.  No warning flags at all from Defender.  Manually scanning with Defender both the exe and the extracted contents:  "Zero threats found."  This is a clean file.

Re: Free Encoder Pack

Reply #61
Please could you send me the sha-512/256 checksum of your downloaded file?
I have downloaded it on yesterday (28.01.2021).
Maybe I could make a checksum comparison from the file at my USB stick...
Thank you!

edit:
my Free Encoder Pack.exe has the checksums as follows
Quote
BLAKE2sp: 14E5C81701020E3F823C730B83EFDCFB023CA235765FEBB1624DFF7F8525A9C4
CRC32: F388E0CA
CRC64: EEE05790F60701A6
MD5: E49912AA27FFA1BBCC1AF016DEF0A7D3
SHA-1: C9759CB10BBB9CFBDF21CCC232679979853512FB
SHA-256: 4D03269052A7075A27C7AA5D31DB898278775C9DAE7C2186C016685AD07738F1
SHA-384: 26F4BAAD2987A515F2BC6D742B70C39580B05EF00A2038BCFEE9FDF6C3395F9CBFD0399C35E98D384EC24C37D03C8938
SHA-512: E60895D879FA6600C09A6753510CA7CB872BBFE33E165DDDB6D56C597A06CFF00A73E036C12BB816BA86894840527DE29B12D088526C590D5402CD218EF64DD9
SHA3-512: FB86C4B4CA0001F2BE8311F43C5C50924B67CE1C0A39EFCBAF89FCB331DEA62368422C697D1624B91F9EE12C594B04D245108CD492DB5CBBB730D78323F71033

...And if I will download the file now: no download possible.
On my HD seems to me like an incomplete file...

Re: Free Encoder Pack

Reply #62
SHA-256:  4D03269052A7075A27C7AA5D31DB898278775C9DAE7C2186C016685AD07738F1

SHA-512:  E60895D879FA6600C09A6753510CA7CB872BBFE33E165DDDB6D56C597A06CFF00A73E036C12BB816BA86894840527DE29B12D088526C590D5402CD218EF64DD9

Both of these match those in your post.

There is indeed a piece of an incomplete download in your jpg.  Delete BOTH of the files shown.  Then, restart your browser and completely delete/flush its cache and history.  Exit/re-open the browser, and re-download the original file.

Re: Free Encoder Pack

Reply #63
Microsoft has now whitelisted the file. Update the definitions in Defender and it will no longer be falsely detected as a trojan.


Re: Free Encoder Pack

Reply #65
[Please delete this message.]

Re: Free Encoder Pack

Reply #66
Download a compiler and build them all yourself, then. Then you can upload them and it can tell you they're a virus, because anything sufficiently obscure enough is obviously not to be trusted.

Re: Free Encoder Pack

Reply #67
Updated on 2022-02-22: FLAC 1.3.4, qaac 2.73, refalac 1.73.

Virustotal once again thinks the pack contains adware and trojans because what else could these new binaries be.
If you are unfortunate enough to use one of these AV products, please submit a sample as a false positive and get the vendors to fix their detections.

Re: Free Encoder Pack

Reply #68
I'm using Malwarebytes Premium and 0 problems with Encoder Pack. But Malwarebytes always detects some heuristic virus when I try to install foobar2000 SACD input plugin, because it's Potentially Unwanted Program for Microsoft. Decoding SACD is something that's pure evil. If you want to decode SACD, you should buy hardware SACD player instead... :D Just don't always trust your antivirus and use your head too.

Re: Free Encoder Pack

Reply #69
"Potentially Unwanted" has become a catch-all for everything from "might be bundled with something you maybe didn't ask for" to total disaster.
Suits the AV software very well as an excuse for not being able to distinguish, and for putting the bar so low they flag false positives all the time. Which in turn has one rationale in how type I vs type II errors aren't equally severe - and one rationale in hyping up the justification for their own existence, see there is so much to flag out there, what would you do without our products?!


Re: Free Encoder Pack

Reply #70
Installed just fine for me.

"Potentially Unwanted" has become a catch-all for everything from "might be bundled with something you maybe didn't ask for" to total disaster.
Suits the AV software very well as an excuse for not being able to distinguish, and for putting the bar so low they flag false positives all the time. Which in turn has one rationale in how type I vs type II errors aren't equally severe - and one rationale in hyping up the justification for their own existence, see there is so much to flag out there, what would you do without our products?!

I mean you could use "install with care because the installer might include something you don't want" to "I won't you install because it will wreck your system beyond repair".  That would take effort to implement and what if one of them gets it really wrong one day?

Re: Free Encoder Pack

Reply #71
"install with care because the installer might include something you don't want"
I wonder if that really includes everything down to "this software uses an installer tool that also has been employed by some other unrelated application wherein they include something we for good or bad reason flagged as potentially unwanted - and so we flag everyone who uses that installer tool"?

Re: Free Encoder Pack

Reply #72
Feature suggestion that has probably been considered and rejected (will it increase the AV false flags?)

Add location to PATH.

Re: Free Encoder Pack

Reply #73
Following-up to myself:

* If AV software would get more zealous over exe's that alter system variables, why not outsource that to foobar2000 itself, which can then create an empty "encoders" folder and add it to path?

* Except for untidiness, is there a reason for users not to move all encoders one folder up from "encoders" to "foobar2000"? It is easier than explaining to users how to manipulate PATH.

Re: Free Encoder Pack

Reply #74
is there a reason for users not to move all encoders one folder up from "encoders" to "foobar2000"? It is easier than explaining to users how to manipulate PATH.
But foobar2000 does automatically search for encoders in folder "encoders" first. Why to manipulate PATH?