Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: PowerDVD Ultra 8 Malware?

22 Apr 2011   #1
seekermeister

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 
PowerDVD Ultra 8 Malware?

My firewall pops the alert in the screenshot when the CLHelper.exe is used in any way, and each time that it runs a scan. With this file deleted, PowerDVD fails to initiate, so it comes down to a choice between keeping a questionable file or not using PowerDVD. Does anyone really know what the risk of this file is?




Attached Images
PowerDVD Ultra 8 Malware?-clhelper.png 
My System SpecsSystem Spec
.
22 Apr 2011   #2
fseal

Windows 7 x64 Ultimate
 
 

Personally no, but you may be able to just block that program for good with your windows firewall and if PowerDVD still operates, enjoy...
My System SpecsSystem Spec
22 Apr 2011   #3
stormy13
Microsoft MVP

Win 7 Ultimate x64
 
 

Not the first AV to flag it,

Avast 5.1 in conflict with Cyberlink PowerDVD

and found a few others as well (Kapersky, Bitdefender, etc). Also not the first time for Outpost either,

Clhelper.exe/Rlhelper.exe

More like a false positive than anything malicious. If it hasn't been flagged before probably find it is a recent definition update that needs to be fixed on Outpost's end.
My System SpecsSystem Spec
.

22 Apr 2011   #4
Ponmayilal

Windows 7 Ultimate 32bit
 
 

CLHelper.exe is an important part of the Windows system, which is responsible for a large number of important tasks in your PC.

Removing it can only cause more problems in running your PC/ programs.

Power DVD is not the cause of this problem.So removing Power DVD is not going to be the cure. Other programs also may not run without CLHelper.exe. Are you going to remove them all too?

You should only try to get rid of the virus and cleanup your system with a good antivirus program without removing important system files. You may google and try to find if there is any other way of killing Packed/RLPack.

One other way which may work is after removing CLHelper.exe (assuming that is the infected file), you may run system file checker and see whether it will replace the missing file with a clean one. Good luck.

I do remember that long back I used to extract files from the Windows media and implant them into my system. I had had no occasion to do such surgery thereafter and so I have forgotten all about it.
My System SpecsSystem Spec
22 Apr 2011   #5
fseal

Windows 7 x64 Ultimate
 
 

You have any info on that?

The program is located inside the PowerDVD install folder and it's probably not a coincidence that the "CL" in CLHelper is the same initials as the company's name "Cyber Link". (Though there is some reference to a CLHelper from Creativfe Labs as well on the net)
My System SpecsSystem Spec
22 Apr 2011   #6
seekermeister

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 

True, and there is no other instance of the file on my PC, so I don't believe that it is a system file.
My System SpecsSystem Spec
22 Apr 2011   #7
seekermeister

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 

When looking closer at the alert, it appears that what it is actually squawking about is RLPack, rather than CLHelper. When I Googled that, I saw a lot of returns speaking of it as either a trojan or virus, but I also found a webpage where it is a wrapper for compressing files. I'm guessing that is what CL used to compress the CLHelper.exe, but I would like to really be sure.
My System SpecsSystem Spec
22 Apr 2011   #8
Ponmayilal

Windows 7 Ultimate 32bit
 
 

That is indeed quite interesting. Sometimes the info given on the net can be wrong. This is what I read in one website "Normally, the CLHelper.exe file should be in the C:\Windows\System32 folder. If it is found anywhere else, then the CLHelper.exe could be a virus, Trojan, worm, or spyware!" My only concern was that no system file should be deleted.

I do have Power DVD on two of my machines in India but not here and so I am unable to categorically state whether this file gets installed with Power DVD.

Assuming that it does and that one has got infected leading to the problem, a simple uninstall and reinstall of Power DVD should put a clean copy of the file and clear the problem.

If it does not then one has to assume that the source of this rogue implant or a genuine file turning into a rogue lies elsewhere and should be tackled as such rather than doing away with Power DVD.
My System SpecsSystem Spec
22 Apr 2011   #9
seekermeister

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
 
 

Quote   Quote: Originally Posted by Ponmayilal View Post
That is indeed quite interesting. Sometimes the info given on the net can be wrong. This is what I read in one website "Normally, the CLHelper.exe file should be in the C:\Windows\System32 folder. If it is found anywhere else, then the CLHelper.exe could be a virus, Trojan, worm, or spyware!"

I do have Power DVD on two of my machines in India but not here and so I am unable to categorically state whether this file gets installed with Power DVD.

Assuming that it does and that one has got infected leading to the problem, a simple uninstall and reinstall of Power DVD should put a clean copy of the file and clear the problem.

If it does not than one has to assume that the source of this rogue implant lies elsewhere and should be tackled rather than doing away with Power DVD.
I don't know where that German website came up with that, because there is no CLHelper in System32 at all...at least not in the root folder, and a Start Menu search doesn't turn it up anywhere else either.

I have reinstalled PowerDVD more than once, and this has occurred each time, but I do not want to permanently uninstall it based on that fact, because there is reason to believe that this is a false positive, in which the trojan/virus is simply using the same name as a legitimate piece of software...assuming that the RLPack software is legitimate.
My System SpecsSystem Spec
22 Apr 2011   #10
stormy13
Microsoft MVP

Win 7 Ultimate x64
 
 

Have you asked on the Outpost forums? If it is false positive they should know about it so they can fix it.
My System SpecsSystem Spec
Reply

 PowerDVD Ultra 8 Malware?




Thread Tools




Similar help and support threads
Thread Forum
powerdvd v8 always wants ....
I was wondering if there was afix for 2 issues i was having with PowerDVD v8.... 1) why does it always ask me to register when i have a couple hundred times??? 2) why does it always change my windows colour scheme back to basic, is thie a bug or do i have to live with it??? It does change...
Music, Pictures & Video
PowerDVD Ultra v 8
I just attempted to play a Blu Ray movie for the first time, but PDVD popped a couple of errors. The first said that it needed to update to continue playing disks, the second was for setting the region and a third was the cryptic error below. I'm under the impression that this version of PDVD...
Software
PowerDVD 10 3D
what does everyone think of PowerDVD 10 i find it a great media player but i found the cuda feature does not work and the cpu usage on it with cuda enabled is still the same as when its disabled. :huh: it uese 7% with cuda enabled and disabled on a Core i7 980x and my cards are GTX480s + 285 for...
Software
PowerDVD 8
Hey you people out there, do you have any experience with this program on win 7,, I wonder if I'm going to have any problems,, I've got this cd disc with my blu-ray drive and PowerDVD isn't the only thing on this disc.. e.g. PowerProducer, Instantburn and such. Are you familiar with this? Need some...
Software
Windows 7 Professional and Cyberlink PowerDVD Ultra
Last night I was installing Cyberlink PowerDVD 9 Ultra on my perfectly running Windows 7 Professional (64-bit) computer. It seemed to install most of the way and then all of a sudden I got...not blue screen...but snow white screen with lines on the left that vibrated up and down the screen. I...
BSOD Help and Support
LG Cyberlink PowerDVD
I ust finished installing this, because it came bundled with a new LG optical drive that arrived today. During the installation, it popped a dialog saying that it was designed for XP SP2, and whether to go ahead and install it or not. Obviously, I did, but when I tested PowerDVD with a movie DVD,...
Software


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:48.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App