I am fairly certain it’s a legitimate file from the “HEVC Video Extensions from the Device Manufacturer” app, and I’ve reported it as a false positive within the interface.
I recall something mentioned re this on Security Now podcast a few episodes ago - might need to be updated via the Microsoft Store (yes via the store!)
I had an alert displayed from AVG that it had found the malware. But I ran Malwarebytes before closing out the AVG scan to confirm and it did not detect a Malware in the same location. So I quarantined the finding so that I may perhaps restore it once confirmed this is not malware.
I went to the virustotal link Andrew posted earlier and it only had Avast and AVG detecting it.
Then I checked it just now and noticed AVG was no longer detecting it. So I went in to Avast and updated the virus definitions and did another scan and its now no longer picked up as malware.
So think we can case close this as a false positive, though I can see why it appeared on the radar with what Wayne posted.
Nothing back from support yet. Not impressed by support to be honest, have had a lot of issues with Avast over the past two years - they might be ignoring me because I told them some home truths and didn’t hold back.
The CVE is for an earlier version of the codec pack so we should be safe. Looks like it isn’t getting picked up now after a def update like Bowdon said.
By right it is supposed to work but there is an error message (see the link I provided). Also it was detected after I downloaded an update not as per a scheduled scan. I tried Restoring and Restoring and adding exception, both do not work.
I’ll try but I doubt it will help since its a system file but not in the OS (WindowsApps folder). Also I tried restoring an actual malware (a pdf containing malicious javascript) and restoring to Desktop works. Maybe because I don’t have enough permissions to restore it to the particular folder, even though I already run avast as administrator.
