View Full Version : False positive - unable to ignore
pwillener
May 25th, 2006, 04:08 AM
http://img80.imageshack.us/img80/5568/fp2yt.gif
I have been trying to run keyfinder (http://www.magicaljellybean.com/keyfinder.shtml), but ewido 4 beta prevents it. Whatever I select - Ignore, or Ignore and add to ignore list - I cannot run the program. I always get the same pop-up.
Not a big deal for me; I just wanted to report it.
vulfgar
May 25th, 2006, 06:34 AM
Same problem for me. I have an old program that I know is not infected, but some AV-programs and Ewido thinks it is. It works fine to put it in ignore-list, but after a cople of updates (not after every update) I get the same problem as pwillener. I have to make a new enter to ignore-list, or edit the old one, then it works again.
kjempen
May 25th, 2006, 12:33 PM
False positive?
First of all, Ewido doesn't say that the file is infected. The named "detection" says: "Not-A-Virus", and in the name you can also read: "PSWTool" as in a tool, and not a trojan or worm or virus or spyware or adware or anything like that.
The reason for detecting an application like this? It could be that it can be used maliciously to steal CD-keys from Windows installations at work, schools, etc.
I suppose it is also possible to bind this together with a trojan and make a Windows cd-key stealer?
EDIT: But I agree, the ignore/exclude feature should work on this.
vBulletin® Copyright ©2000-2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums