PDA

View Full Version : Win32/Adware.Hithopper


LokiLoki
March 10th, 2006, 11:13 PM
Hi Guys,

While I was doing a scan with ewido, NOD32 came up with this threat warning.

Ewido was scanning cablenut_update.exe at that time. Since the warning, I uninstall/deleted that program.

I did a search on hithopper on my registry and files but no results. I install cablenut since last year. So is this threat a f/p?

Anyone with cablenut get this warning?

Howard
March 11th, 2006, 07:49 AM
{QUOTE-> Hi Guys,

While I was doing a scan with ewido, NOD32 came up with this threat warning.

Ewido was scanning cablenut_update.exe at that time. Since the warning, I uninstall/deleted that program.

I did a search on hithopper on my registry and files but no results. I install cablenut since last year. So is this threat a f/p?

Anyone with cablenut get this warning? <-QUOTE}

I don't have cablenut, but I have just received the same warning for eDexter, one of Pyrenean's well known internet filtering utilities. Attempting to download the eDexter install file from this site will trigger the warning http://www.pyrenean.com/?page_value=-18

jmc777
March 11th, 2006, 09:02 AM
I had the same for the AudioCoding mp4 Winamp plugin setup file. NOD32 started to flag the file after one of the virus definition updates on the 10th, but it has been fixed with todays update.

Howard
March 11th, 2006, 09:15 AM
{QUOTE-> I had the same for the AudioCoding mp4 Winamp plugin setup file. NOD32 started to flag the file after one of the virus definition updates on the 10th, but it has been fixed with todays update. <-QUOTE}

Thanks for the heads up, latest update has fixed it re eDexter. Ah well, it was good to see NOD in action for a little while ;D

alglove
March 11th, 2006, 09:09 PM
The same thing happened to me with...

C:\Program Files\America Online 8.0\Radio@AOL\setup.exe - Win32/Adware.HitHopper application - quarantined - unable to clean - deleted

However, the latest update seems to have fixed this, as well. I have restored the file from quarantine without incident. :)

LokiLoki
March 11th, 2006, 10:37 PM
Ah I see. Thanks guys for your replies.

nameless
March 11th, 2006, 11:07 PM
If you have a suspected FP, just right click that file in Quarantine, select the option to submit it for analysis, and in the box provided, enter a brief note such as "False positive?". That's what I did after having to deal with a slew of FPs, and mistakenly-deleted and -renamed files from the update of the other day. Asking here is almost useless, maybe literally useless, as far as getting the problem solved.