Trying to load plug in Chrome gets in Endless loop... IE Virus threat

[rcline]

I'm a pretty technical guy here.

trying to launch the Web Version of the NVR (NV 4116-HS) with the following system firmware - 3.215.00AC000.0, Build Date: 2018-01-05

Chrome - will not work, prompts for plug in - downloaded plug in - creates separate chrome window. will open NVR, yet does not display camera images.

IE - prompts to down load plug in - upon downloading plug - in AntiVirus is preventing me from launching this - the Antivirus Log (windows defender) is identifying this as
Threat Description: trojan:win32/tiggre!plock
Trojan:Win32/Tiggre!plock
Updated on Sep 28, 2017
Alert level: SEVERE

What are my other options here?
Why would amcrest point my computer to download a trojan horse virus?
is this company not on the up and up?

[Melvin]

Hello rcline ,

We have not gotten any complaints regarding this from other users for the NVR. It may be a false positive from the Windows defender.

[scoutermac]

Yes I have this issue too. The only browser the cameras seem to work in are Google Chrome and you have to install an add-in to access the cameras.

[John94si]

Use SeaMonkey browser.. no plug in required
https://www.seamonkey-project.org/

[maciesle]

I have the same problem when trying to install via IE 11.... Trojan:Win32/Tiggre!plock

Can you update this executable to not be flagged as a virus?

https://www.microsoft.com/en-us/wdsi/th ... 2147243670

[plusfour]

I'm getting the same thing, upgraded my 4108E-HS to the latest firmware, 3.215.00AC000.0, and the webplugin included with that is flagged as malware. The version it came with, 3.210.AC02.0, didn't have this problem. This is a real pain because most of the essential functionality of the device is now locked out.

Could people post the firmware versions where they're getting this? It looks like it's a problem with 3.215.00AC000.0.

[plusfour]

Just checked the .bin on VirusTotal, it's probably not malware:

https://www.virustotal.com/#/url/656464 ... /detection

However I don't know about the plugin, if it's not in the binary but gets pulled down from somewhere else it could be malware.

[plusfour]

Looks like there's quite a history of the Dahua plugin triggering malware scanners, here's one from 2015:

https://ipcamtalk.com/threads/virus-war ... -nvr.4526/

Problem is that it's a Dahua program, so it's possible Amcrest can't do anything to fix it.

[plusfour]

Finally managed to extract the file from the binary and uploaded it to Virustotal. It's malware:

https://www.virustotal.com/#/file/ec543 ... /detection

Amcrest, you guys really need to fix this fast, McAfee, Symantec, Trend Micro, Microsoft, Sophos, and others all agree that your web plugin is infected with malware.

[plusfour]

I've submitted it to the Microsoft A/V analysis guys:

https://www.microsoft.com/en-us/wdsi/su ... 11435cd933

Let's see what they say. However there are sixteen other AV products that all flag it as malware, so if it's a false positive it's a pretty widespread one.