VideoReDo accessing internet when saving files

[Baku]

I'm using Videoredo 4.20.7.629 and I have set it to not check for updates, and to ask before accessing the Internet.

My Firewall is poping Internet Access request to address 178.255.83.2 everytime I try to save file (it doesn't happen during any other operation). Why this is happening and how to disable it?

[Dan203]

That's not coming from VideoReDo. A quick whois look up says it's an IP in Amsterdam. You may want to scan your PC for malware.

Dan

[ggieseke]

That's not coming from VideoReDo. A quick whois look up says it's an IP in Amsterdam. You may want to scan your PC for malware.

Dan

The Amsterdam address is just the contact for RIPE (the European equivalent of ARIN). If you search RIPE it comes back to Comodo CA in the UK.

[Baku]

Exactly.

It appears, that it's nothing dangerous, but I would like to know what information are send from my computer and how to avoid it. Of course I can block Internet Access for VideoReDo in my firewall, but if I do so, there is 10 second delay in saving file. VideoRedo first try to contact IP address and when it fails, then saving process actually begins.

[Baku]

My research results:
http://whatismyipaddress.com/ip/178.255.83.2
http://www.mydnstools.info/nslookup/crl.comodoca.com/A

Further investigation (hostname crl.comodoca.com) led me to this topic:
http://www.videoredo.net/msgBoard/sh...t=comodoca.com

So I think it's VideoReDo related. It happens only in VDR and I scanned my sytstem already with Malwarebytes' Anti-Malware, Dr.WEB CureIt! and Kaspersky Anti-Virus. Nothing found.

Also log from OTL shows nothing suspicious.

[DanR]

VideoReDo4.exe and some of the supporting DLLs are signed with a code signing key. You can see the key certificate by right clicking on VideoReDo4.exe and selecting Properties and then the Digital Signature tab.

I think what is happening is that operating system is contacting the key authority to verify the key for one of the DLLs. It's not sending information to one of our sites, nor do I know what exactly is being sent as it's being done by Windows.

The issue is I don't know why this is happening to you. Our code specifically requests that if the DLL hasn't been tampered with not to contact the server and we haven't heard from anyone else about this being an issue in a few years.

If you want to send the log file to support, maybe there's something in there that can help us pinpoint the problem.

[Baku]

By log you mean VideoReDo.Log in which all information from file proccessing are stored?

Anyway is there any chance that reinstalling VideoReDo will help to solve this issue? I tried Trial version on other PC and it's not behaving like on my computer.

If it's worth a try, which folders and registry entries should I manually delete to make 100% clean install?

[DanR]

Yes, VideoReDo.log

An uninstall should give you clean system. The only thing left will be customized profiles in your documents folder and your registration key. Neither of those are related to the security certificate check.

You can manually check for deleted entries:

1) Your install folder (and sub-folder) c:\program files.....

2) The registry key: HKEY_CURRENT_USER\Software\DRD Systems

[Baku]

I reinstalled VideoReDo. It wasn't full clean install because I didn't have to enter my registration key. Settings were cleared.

I don't think that another reinstall will help.

So i should send mail to support with log included and link to this topic?

[DanR]

Yes, include the log as an attachment. The registration key isn't removed with an uninstall. It stays with the system.

One other thing you can try is to reinstall the later beta into a separate folder and see if that has issue.