PDA

View Full Version : To ESET's Customer Care department: FP MBR trojan


Smokey
April 11th, 2008, 04:11 PM
Concern case #93048 - "False Threat Detection".

NOD32 v.3.0 detects Jetico BCVE (Bestcrypt Volume Encryption) code as a MBR trojan.
Note: BCVE modifies MBR sector to provide pre-boot authentication.

This FP is reported several times to Eset, despite of that nothing happened.

Eset folks, please take care of this FP.

TIA!

proactivelover
April 11th, 2008, 06:00 PM
pls submit FP to this web site
http://www.eset.com/threat-center/up/submit.htm

Smokey
April 11th, 2008, 06:04 PM
{QUOTE-> pls submit FP to this web site
http://www.eset.com/threat-center/up/submit.htm <-QUOTE}
Is submitted past months by several Eset customers but till yet regrettably no Eset action on it.

proactivelover
April 11th, 2008, 06:14 PM
wilder's power will fix it

agoretsky
April 12th, 2008, 04:29 PM
Hello,

Is this (http://www.jetico.com/bcve.htm) the product in question?

If so, can you please tell me the specific version or version(s) of the product for which you are reporting the false positive alarm, the exact version of NOD32 (including the signature version) used, and the exact virus reported?

Thank you.

Regards,

Aryeh Goretsky

proactivelover
April 12th, 2008, 08:21 PM
install letest BestCrypt Volume Encryption v1.9.9.3
no warning from ESS(v3.0.650 sig version:3021) all files are clean
i see this web site Boot-Virus notification from Eset NOD32 (http://www.smokey-services.eu/forum/viewtopic.php?f=75&t=14957&sid=ccb386d04b2c3cf5f0faed1332afb226)

Smokey
April 13th, 2008, 12:14 PM
Hi Aryeh,
{QUOTE-> Is this (http://www.jetico.com/bcve.htm) the product in question? <-QUOTE}
It is indeed.
{QUOTE-> If so, can you please tell me the specific version or version(s) of the product for which you are reporting the false positive alarm, the exact version of NOD32 (including the signature version) used, and the exact virus reported? <-QUOTE}
FP is discussed in this thread (http://www.smokey-services.eu/forum/viewtopic.php?f=75&t=14957).

Regards,