PDA

View Full Version : NOD32 V4 Major issue


TOCS
July 15th, 2009, 01:47 AM
As a reseller who has sold 1000's of licenses can you (eset) please stop attacking Maxsecure's Spyware Detector Program. It would also be great if you could also stop blocking their website. All this was bought about alittle while back when Spyware Detector deleted NOD32, they fixed the issue within a few hours yet Eset seem to still be so childish as to hold a grudge.

agoretsky
July 16th, 2009, 02:33 PM
Hello,

I am not aware of the issue you are reporting, so let's gather some information so we can investigate your report of a false positive alarm:

Build of ESET NOD32 Antivirus?
Version number of virus signature database?
Name of detected threat(s)?
Name of files and/or URLs of web sites in which threat was detected? (please obfuscate protocol handlers by replacing hTTp with hXXp, just in case)

Providing that information will be helpful in resolving the issue in a speedy fashion.

Regards,

Aryeh Goretsky

YeOldeStonecat
July 16th, 2009, 02:55 PM
Even Firefoxes WOT rating system blocks that site. :doubt:
hmmmmm

TOCS
July 16th, 2009, 06:40 PM
-{ Quote: "Hello,

I am not aware of the issue you are reporting, so let's gather some information so we can investigate your report of a false positive alarm:

Build of ESET NOD32 Antivirus?
Version number of virus signature database?
Name of detected threat(s)?
Name of files and/or URLs of web sites in which threat was detected? (please obfuscate protocol handlers by replacing hTTp with hXXp, just in case)

Providing that information will be helpful in resolving the issue in a speedy fashion.

Regards,

Aryeh Goretsky" }-

1. Build is 4.0.314.0
2. Version is 4251 (20090716)
3. C:\Program Files\SpywareDetector\LiveUpdate.exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
4. {snip}, {snip}, {snip}

agoretsky
July 16th, 2009, 07:01 PM
Hello,

ESET's virus lab has been notified. Thank you for your report.

Regards,

Aryeh Goretsky

TOCS
July 16th, 2009, 07:09 PM
-{ Quote: "Hello,

ESET's virus lab has been notified. Thank you for your report.

Regards,

Aryeh Goretsky" }-

Thanks for you prompt reply, will they notify us with their result/fix?

JohnnyDollar
July 16th, 2009, 09:54 PM
There is quite a few people reporting that site as rouge security software. Perhaps you need to take a closer look at it.

TOCS
July 16th, 2009, 10:13 PM
Hi Johnny.

Here at Time Out! Computers we have been selling MaxSecure's Spyware Detector along with NOD32 for more than 5 years now. It has been the best Spyware/Malware protection we have been able to find and with NOD32 make up an awesome protection package that we have not been able to fault as per lack of pressure put on the CPU and doing their job faultlessly. The only problem we have had is NOD32's continual quarantining and blocking of Spyware Detector and their site. We sell and renew 60 to 70 Spyware Detector a month along with even more than that of NOD32. We need this to stop as it is costing me more than the revenue I am making, in support of this continual problem.

Maybe you need to take a closer look at it... I have done my due diligence.

Ross Bladin
Managing Director
Time Out! Computers Australia.

danieln
July 17th, 2009, 05:49 AM
This is how the software behaves on the clean computer:
210496

Marcos
July 17th, 2009, 06:59 AM
Plus it detects batch files I have on the disk as well as a famous file manager. I've read a review where it detected Zone Alarm files (haven't tested yet). Not to mention the way it's designed which highly resembles rogue AVs. We'll give it one more check, but I doubt that detection will be removed as its behavior seems to be unwanted by users.

TOCS
July 23rd, 2009, 08:48 PM
-{ Quote: "This is how the software behaves on the clean computer:
210496" }-

You are joking right?? You have not registered the program you are "Testing and slagging" so how can you even comment?
Register the program and show me what it has found then we will talk.
I'll bet it is only tracking cookies.

Ross Bladin
Managing Director
Time Out! Computers Australia.

TOCS
July 23rd, 2009, 08:56 PM
-{ Quote: "Hello,

ESET's virus lab has been notified. Thank you for your report.

Regards,

Aryeh Goretsky" }-

We are still waiting for answer to this problem. We have over 1000 clients using NOD32 and Spyware Detector together and have been for years.
We submit our false positives to you and you use it against us by blocking more sites for downloading Spyware Detector.
Will someone please tell me what the hell is going on. I don’t care if there are users out there that don’t like Spyware detector, that is fine everyone has their own opinion and they don’t have to use it if they don’t want to, we are certainly not forcing them to.
Either fix this up or explain to me why Eset have the need to make my life hell.

Ross Bladin
Managing Director
Time Out! Computers Australia.

stratoc
July 23rd, 2009, 09:16 PM
it was on spyware warrior's rogue list for ages, it has now been removed. but a quick check with any site checker will point to at least greyware, and these are generally made up from users.
so if you have nod 32 set to detect potentially harmful software and it does this is hardly a major issue from eset's point of view. Where does one draw the line, all security programs are out to get peoples money, they are businesses and if you check the history of a lot of anti spyware programs they have a murky past.
call it a in-compatibilty maybe, but i would not be happy if nod 32 didn't detect it as potentially dangerous, as pretty much the rest of the security industry seems to.

TOCS
July 23rd, 2009, 09:36 PM
-{ Quote: "it was on spyware warrior's rogue list for ages, it has now been removed. but a quick check with any site checker will point to at least greyware, and these are generally made up from users.
so if you have nod 32 set to detect potentially harmful software and it does this is hardly a major issue from eset's point of view. Where does one draw the line, all security programs are out to get peoples money, they are businesses and if you check the history of a lot of anti spyware programs they have a murky past.
call it a in-compatibilty maybe, but i would not be happy if nod 32 didn't detect it as potentially dangerous, as pretty much the rest of the security industry seems to." }-

I don’t know how many times I have to keep saying this. We have been selling SD for over 5 years now. It has bought many spyware infected computers back to life over those 5 years. We have over 1000 customers using it, a lot of them corporations. We sell\renew over 100 per month. We use it alongside NOD32 on all our computers and servers and have done for over 5 years. So I don’t need any sermons for those of you who believe everything written in forums. I mean lets face it, there are still millions out there using NORTONS, god help them.
All I need is for an explanation as to why from the people who write this program. And if SD has been a problem for years why is ESET only just doing this now?
The only problem we have had with SD is Eset/NOD32 attacking it.

Ross Bladin
Managing Director
Time Out! Computers Australia.

JohnnyDollar
July 23rd, 2009, 10:45 PM
Ross,

I did some searching on this Spyware Detector product and I'm not going to post the links because anybody can google it and get the same results. I could not find hardly anything positive about this product. Most of the reviews/comments I read were from years 2005-2007. PC Mag from Dec 06 gave it a bad review stating it can't remove spyware and has little protection . Several forum comments that I read and a few recent ones too were negative or skeptical at the least, nothing good. It was on Spyware Warriors list of rouge security products. From what I have read this has been a rouge security product or at the very least a poor security application for the past several years. It may not be rouge now, but I don't know. If it is not rouge now then I would say that SD has an uphill battle to gain a reputation as being a legitimate security application. I am trying not to call into question your integrity but, after doing a little reading about this product it is obvious you are in the minority from what I have seen on your opinion of this product. I doubt very likely that you will convince ESET or the security conscious members of this forum to the contrary.

TOCS
July 23rd, 2009, 11:40 PM
-{ Quote: "Ross,

I did some searching on this Spyware Detector product and I'm not going to post the links because anybody can google it and get the same results. I could not find hardly anything positive about this product. Most of the reviews/comments I read were from years 2005-2007. PC Mag from Dec 06 gave it a bad review stating it can't remove spyware and has little protection . Several forum comments that I read and a few recent ones too were negative or skeptical at the least, nothing good. It was on Spyware Warriors list of rouge security products. From what I have read this has been a rouge security product or at the very least a poor security application for the past several years. It may not be rouge now, but I don't know. If it is not rouge now then I would say that SD has an uphill battle to gain a reputation as being a legitimate security application. I am trying not to call into question your integrity but, after doing a little reading about this product it is obvious you are in the minority from what I have seen on your opinion of this product. I doubt very likely that you will convince ESET or the security conscious members of this forum to the contrary." }-

I do not want to keep beating the same drum over and over. But I am not interested in other people’s thoughts on this, especially from 2 to 3 years ago. I am interested in Eset's thoughts on why they are blocking the site. If they can show me or give me a reason why they are blocking the web address’s for SD I will concede defeat.
The personal opinions of the readers of this forum that do not even use this product are of no concern to me.
Many years ago I started selling an antivirus product no-body here in Australia had even heard of called NOD32. I was told I was nuts and that nothing was better than Norton’s or Kaspersky. Look at NOD32 now. So sorry personal opinions do not weigh well with me.

But as I said. If/when the Eset team get back to me to tell me why they have "good reason" to block these sites I will have to make a few decisions. Otherwise they need to stop the blocking of the SD download and information pages ASAP.


Ross Bladin
Managing Director
Time Out! Computers Australia.

danieln
July 24th, 2009, 12:21 AM
The question was already answered.
It has flawed detection with extremely high false positive ratio. After it scares a user it suggest him to to order a paid version.

JohnnyDollar
July 24th, 2009, 02:31 AM
-{ Quote: "
The personal opinions of the readers of this forum that do not even use this product are of no concern to me.


Ross Bladin
Managing Director
Time Out! Computers Australia." }-

Well they may not matter to you but they do to ESET, this is their forum. Like Marcos said
-{ Quote: "We'll give it one more check, but I doubt that detection will be removed as its behavior seems to be unwanted by users." }- http://www.wilderssecurity.com/images/buttons/quote.gif (http://www.wilderssecurity.com/newreply.php?do=newreply&p=1505405)

Cudni
July 24th, 2009, 03:53 AM
Maybe you should talk to the Customer services at Eset, and especially as a reseller, direct instead of objecting when others don't agree with your songs of praise about some 3rd party product that may or may not have value for the users. Eset also knows that users will come as tons of bricks on them if the software that acts as spyware is not detected and blocked. Their software is here to protect the users of this forum and not some vested interests of resellers selling other wares.

rpradhan
July 24th, 2009, 10:04 AM
Hello,
Max Secure Software is a Windows security product company providing innovative security and Privacy related products, having more that million customer base working towards the goal of removing Spyware from users pc for the last 7 years. Our anti-spyware product can be downloaded from: maxpcsecure.com/spywaredetector.exe and Registry optimization product from: maxpcsecure.com/maxregistrycleaner.exe . We have a long list of customer testimonials who are happily using our products for the last several years, many affiliates who have reviewed our products, found them Spyware free, awarded 5-Star ratings and successfully promoting it. Spyware Detector is a world class product having very superior Spyware detection and removal statistics along with rootkit and heuristically detection capability.
This detection by Eset nod is definitely a FALSE positive on your end and must be removed immediately. We would also like to know the reason for putting it in there. No other anti-virus or anti-spwyare or virustotal catches our products. Just because spyware warrior made a mistake in 2005 and cnet reviews were not good in 2006 does not mean it is a Fake or Trojan or Spyware. Have they reviewed it since.
It is an excellent antispyware product , very light weight and having fastest scanner in the world.
I am attaching eset snapshot for your review.
If you have any questions, do not hesitate to drop me an email or call.
Regards,
Rachna Pradhan

grndady
July 24th, 2009, 03:11 PM
First, Smart Sec. blocked my SP downloaded upgrade files.

Now, as you see from the Max Secure rep., you can't even get to the website because of ESET.

Spyware Detector has SAVED my system almost 10 times in the past 2 years. Especially the malware that re-routes Google searches from the clicked on URL to an unasked for site.


ALSO, malware had made my XP Pro SP 3 system UNABLE to run Checkdisk upon re-boot. SPYWARE DETECTOR FIXED THAT, TOO!

IF THIS ISN'T UNBLOCKED. I'M DUMPING ESET.

MAX SECURE HAS FOUND MANY, MANY MORE THREATS THAN MY ESET.

As for the TRIAL SCAN mentioned above, I also agree with the guy who said it was probably referencing TRACKING COOKIES!

Get it straight, or GOODBYE ESET!

stratoc
July 24th, 2009, 03:54 PM
so there's no functional trial as such, it does a scan then you pay to remove? i wonder how many clean systems it finds? ;D

smiffy6four
July 24th, 2009, 04:14 PM
-{ Quote: "I do not want to keep beating the same drum over and over. But I am not interested in other people’s thoughts on this, especially from 2 to 3 years ago. I am interested in Eset's thoughts on why they are blocking the site. If they can show me or give me a reason why they are blocking the web address’s for SD I will concede defeat.
The personal opinions of the readers of this forum that do not even use this product are of no concern to me.
Many years ago I started selling an antivirus product no-body here in Australia had even heard of called NOD32. I was told I was nuts and that nothing was better than Norton’s or Kaspersky. Look at NOD32 now. So sorry personal opinions do not weigh well with me.

But as I said. If/when the Eset team get back to me to tell me why they have "good reason" to block these sites I will have to make a few decisions. Otherwise they need to stop the blocking of the SD download and information pages ASAP.


Ross Bladin
Managing Director
Time Out! Computers Australia." }-


How about going into the settings of NOD and adding the path for your SD program to the Exclusions under Antivirus & Spyware?

I use SpyBot on all the PC's that come through my shop, and I simply add C:\Program Files\Spybot - Search & Destroy to the list of exclusions and then NOD leaves it alone.

You can also specify which addresses to ignore under Web Access Protection and add any addresses you like under "List of addresses excluded from filtering"

TOCS
July 24th, 2009, 08:46 PM
-{ Quote: "How about going into the settings of NOD and adding the path for your SD program to the Exclusions under Antivirus & Spyware?

I use SpyBot on all the PC's that come through my shop, and I simply add C:\Program Files\Spybot - Search & Destroy to the list of exclusions and then NOD leaves it alone.

You can also specify which addresses to ignore under Web Access Protection and add any addresses you like under "List of addresses excluded from filtering"" }-

Number one .. I shouldn't have to.
Number two .. As I have said many times, I have over a 1000 of these out there, many of the clients do not to have to make changes to configuration, which is why I am their computer support. That is fine for the computers that leave my workshop.

TOCS
July 24th, 2009, 08:48 PM
-{ Quote: "Hello,
Max Secure Software is a Windows security product company providing innovative security and Privacy related products, having more that million customer base working towards the goal of removing Spyware from users pc for the last 7 years. Our anti-spyware product can be downloaded from: maxpcsecure.com/spywaredetector.exe and Registry optimization product from: maxpcsecure.com/maxregistrycleaner.exe . We have a long list of customer testimonials who are happily using our products for the last several years, many affiliates who have reviewed our products, found them Spyware free, awarded 5-Star ratings and successfully promoting it. Spyware Detector is a world class product having very superior Spyware detection and removal statistics along with rootkit and heuristically detection capability.
This detection by Eset nod is definitely a FALSE positive on your end and must be removed immediately. We would also like to know the reason for putting it in there. No other anti-virus or anti-spwyare or virustotal catches our products. Just because spyware warrior made a mistake in 2005 and cnet reviews were not good in 2006 does not mean it is a Fake or Trojan or Spyware. Have they reviewed it since.
It is an excellent antispyware product , very light weight and having fastest scanner in the world.
I am attaching eset snapshot for your review.
If you have any questions, do not hesitate to drop me an email or call.
Regards,
Rachna Pradhan" }-

Thankyou.
See we don't all agree !!
And Eset themselves have still not come back with an answer.

Dont get me wrong.. I love NOD32 .. That is why I am fighting so hard for this. I dont want to have to move away from either product.

TOCS
July 24th, 2009, 08:49 PM
-{ Quote: "so there's no functional trial as such, it does a scan then you pay to remove? i wonder how many clean systems it finds? ;D" }-

I have over 1000 under my Company's care.

TOCS
July 24th, 2009, 08:51 PM
-{ Quote: "First, Smart Sec. blocked my SP downloaded upgrade files.

Now, as you see from the Max Secure rep., you can't even get to the website because of ESET.

Spyware Detector has SAVED my system almost 10 times in the past 2 years. Especially the malware that re-routes Google searches from the clicked on URL to an unasked for site.


ALSO, malware had made my XP Pro SP 3 system UNABLE to run Checkdisk upon re-boot. SPYWARE DETECTOR FIXED THAT, TOO!

IF THIS ISN'T UNBLOCKED. I'M DUMPING ESET.

MAX SECURE HAS FOUND MANY, MANY MORE THREATS THAN MY ESET.

As for the TRIAL SCAN mentioned above, I also agree with the guy who said it was probably referencing TRACKING COOKIES!

Get it straight, or GOODBYE ESET!" }-


Hmmm .... Another one??
This is not so one sided now.

TOCS
July 24th, 2009, 09:00 PM
-{ Quote: "Maybe you should talk to the Customer services at Eset, and especially as a reseller, direct instead of objecting when others don't agree with your songs of praise about some 3rd party product that may or may not have value for the users. Eset also knows that users will come as tons of bricks on them if the software that acts as spyware is not detected and blocked. Their software is here to protect the users of this forum and not some vested interests of resellers selling other wares." }-

The Eset Support here in Australia no longer exists and I was directed to this forum for support.
I came here to talk to Eset for support and was subjected to all this objection for forum readers. The Eset moderator Agoretsky, gave the impression of wanting to help, while the rest of you went about slagging the product. This was not what I came here for. So it was not my objection, it was yours, I only came here to find out from Eset why they were doing this, and for an expaination of why this cant be fixed.
Realy quite that simple!!
If you had read all of my Posts, you would see that I am behind Eset 150% and have been for many many years being one of the first resellers here in Aus. Otherwise I wouldn't be here fighting so hard for a fix to this problem.
Once again your evedence of this "other wares" you talk about is all hear say. I need to know what evedence Eset have for doing what they are diong. And that is all I am asking. If I cant ask that there in the "Eset Support Forum" where can I ask it ????????

trjam
July 24th, 2009, 09:03 PM
very good and valid points. Lets hope a answer will follow soon.

trjam
July 24th, 2009, 09:05 PM
you might want to send Agoretsky a PM directly. He is very helpful, and busy.

ASpace
July 24th, 2009, 10:13 PM
-{ Quote: "If you had read all of my Posts, you would see that I am behind Eset 150% and have been for many many years" }-

I did actually read all your posts and the whole thread . But the impression that you leave in me is not that you are behind ESET (no matter how many %) . Just reselling the programs doesn't make you "behind ESET".


-{ Quote: "Once again your evedence of this "other wares" you talk about is all hear say. I need to know what evedence Eset have for doing what they are diong. And that is all I am asking. " }-

Well , in my opinion , ESET (incl. Marcos) + other people (fellows , long-time users of NOD32) already said why it is detected . In short - the programs has potentially unwanted behavior. Check this for clarification:

StevieO
July 24th, 2009, 10:34 PM
My tests in the last hour on Spywaredetector

Tocs Spywaredetector www http://www.tocs.com.au/sd.php I tried to DL it, even with Scripting enabled, i couldn't

{snip}, itself appears to be down ?

This is Google's cache of {snip}, It is a snapshot of the page as it appeared on 18 Jul 2009 10:32:32 GMT

http://209.85.229.132/search?q=cache:YwZd0D7qvwkJ:www.spywaredetector.net/+Maxsecure%27s+Spyware+Detector&cd=1&hl=en&ct=clnk&gl=uk

After many fruitless searches on Google on the usual DL www's i eventually managed to DL it from http://majorgeeks.com/downloadget.php?id=4662&file=15&evp=dfe608800232de4a153c15e3459c9cbe All the other www's appear to have pulled it ?

Installed it see screenies.

Tried to update the Defs, no go !

Scanned results -

Worm = mixer.exe = C-Media Electronic Inc = SAFE

Activity Logger = ASProtect = software protection = SAFE as far as i know !

Alvin = {71A27031-C7D8-11D2-BEF8-525400DFB47A} {71A2702E-C7D8-11D2-BEF8-525400DFB47A} {71A27033-C7D8-11D2-BEF8-525400DFB47A} {71A27036-C7D8-11D2-BEF8-525400DFB47A} = CTimer - Googling brought up references to MyBugFree, but no other App detects anything ?

Quick = Ext = ?

Elite Keylogger Licenses {R7C0DB872A3F777C0} = Googling brought up references to Elite and Quick KL, but no other App detects anything ?

Kontiki = BBC iplayer = SAFE

So my prognosis is they are FP's. I suppose if i was a Jo i could have purchased the full version to eliminate them all, if their www was working. Good thing it isn't as it would have deleted lots of legit Apps and files etc ! I wonder how many Jo's have had stuff deleted with SD, if as stated by the owner of SD, there are 1,000,000 of them out there !!!

Screenies to follow

StevieO
July 24th, 2009, 10:35 PM
Screenies

TOCS
July 24th, 2009, 11:11 PM
-{ Quote: "Screenies" }-

You Goose... That is SD 2005... That is the basis of your arguement? A peice of software that is 4 years old???

Also after puting in all the exclusions for SD into NOD32. Each and everyone of the links you provided work fine.

Do you work for The Eset Support team ???

StevieO
July 24th, 2009, 11:23 PM
As i said, i first tried to DL it from your www, but couldn't. Just tried again with IE and FF, still can't.

I'd be quite willing to try the latest version, so if you upload it to for eg Rapidshare and post the link, i'll install it and scan again.

TOCS
July 24th, 2009, 11:54 PM
-{ Quote: "As i said, i first tried to DL it from your www, but couldn't. Just tried again with IE and FF, still can't.

I'd be quite willing to try the latest version, so if you upload it to for eg Rapidshare and post the link, i'll install it and scan again." }-

I have no more time for this. I have sent out a temp fix for this problem to over 1000 clients, all needing to eventually dl from that link, I have not had one complaint yet.

I did not come hear to have you guy's second guess me or my company or the expertise of the many qualified technicians we employ.

I came here to hear from the Eset Support team as to why they are doing this and what evidence they have for doing this and that is it.

I am no longer playing this game of "show me yours and I'll show you one bigger", I await to hear from Agoretsky, who seems to be the only real support person here. And if Eset stand behind their product as they have over many years I will get a full explanation from them.
And that is the only one I am interested in.

The rest of you so far have been a waste of my time with no real substance to any comment.
I didnt come here to see if anyone could discredit SD. I came here to ask a question of the Eset Support team.

ASpace
July 25th, 2009, 06:09 AM
~ removed by me ~

stratoc
July 25th, 2009, 07:04 AM
end of the day if you love this program so much, just exclude it it isnt rocket science. spybot also sees it as malware for your interest.

YeOldeStonecat
July 25th, 2009, 08:55 AM
-{ Quote: "We use it alongside NOD32 on all our computers and servers and have done for over 5 years. ." }-

You put malware removal programs on "servers" :o
Yeesh..what kind of clients do you support that would use servers in the typical role of a desktop computer, surfing 'n exposing them to adware/spyware?

All your posts just in this one thread...you working for them?

stratoc
July 25th, 2009, 09:30 AM
1000 pc network and this thread really don't match up, i think you're on to something...

virkelie
July 25th, 2009, 04:41 PM
-{ Quote: "As i said, i first tried to DL it from your www, but couldn't. Just tried again with IE and FF, still can't.

I'd be quite willing to try the latest version, so if you upload it to for eg Rapidshare and post the link, i'll install it and scan again." }-

Hi Stevie,

I downloaded spyware detector, from ~snip~ , on an old win95 computer - which has no antivirus.

Based on past reviews, I am too scared to test the program myself - I apologise for that.

I have uploaded the files - the 32bit and 64bit versions to sendspace.com - so maybe you can test the program.

Here are the links:

32-bit version:
~snip~
64-bit version:
~snip~
To ESET - if I am not supposed to post the links - I don't mind if you modify them (I guess you could delete them if you feel it appropriate- but I hope someone could test the program).

virkelie

Bubba
July 25th, 2009, 05:20 PM
For those wishing to discuss\debate the validity\non-validity of this software or any other like software, feel free to head on over to our other anti-malware software forum (http://www.wilderssecurity.com/forumdisplay.php?f=35).

As for this thread, we'll bring it to a close for the time being. If\when Eset wishes to respond publically to this thread, they can by all means re-open the thread.

agoretsky
July 30th, 2009, 06:10 PM
Hello,

After careful review of the submitted files, ESET's virus lab has reclassified the submitted files. They are no longer detected neither as "probably a variant of Win32/Genetik trojan", which is a generic detection algorithm used to detect new, unknown software which may threaten the integrity, privacy or processing resources of a computer; or as "Win32/Adware.MaxPCsecure" which was the specific detection initially assigned to the software.

As of virus signature database update 4288 (http://www.eset.sk/podpora/aktualizacia-4288?lng=sk), Max Secure's Spyware Detector has been classified as potentially unwanted application and is now detected as "a variant of Win32/MaxPCsecure" and the URLs for web sites associated with Spyware Detector that were previously blocked have been removed from detection and are no longer blocked.

We would like for you to understand why Spyware Detector has been classified as a potentially unwanted application and detected by ESET. One thing that is very important to keep in mind is that the classification of potentially unwanted application does not necessarily mean that a program is malicious or otherwise damages a system. Potentially unwanted applications is ESET's classification for software which while not inherently malicious, may perform undesirable activities on a computer when misused by the wrong personnel. Here are some examples of applications which might be classified as potentially unwanted:

A password-cracking program. A company might not want employees in its sales department to run such applications. However, it would be acceptable for the IT department to do so in order to audit for weak passwords or to help a user recovery a forgotten password.
A product key-finding program. A typical home user might not have any need to look up the key for software which is already running on their computer, however, if the software installation was corrupted, a technician might use such a product key finder when re-installing the software.
Software that displays advertising, possibly through a toolbar, or otherwise changes the results of displayed pages or search queries in a web browser, i.e., adware, but clearly state their intentions, provide easy uninstallation, accurate company contact information and do not engage in affiliate marketing programs which are subject to abuse.
Software of dubious quality and reputation. This would include programs make outlandish, unverifiable and unsupportable claims about their efficacy or generate deceptive false positive alarm reports of threats where none exists in order to mislead people into purchasing something they do not really want or need. Examples of this would include various rogue antivirus and antispyware programs.
For more information on potentially unwanted applications, I would suggest reading Wikipedia's entry here (http://en.wikipedia.org/wiki/Potentially_Unwanted_Application) on Potentially Unwanted Applications or Virus Bulletin Magazine's description here (http://www.virusbtn.com/resources/glossary/potentially_unwanted.xml).

Based on its examination of Spyware Detector, ESET's virus lab has determined that it meets one or more of the aforementioned criteria for potentially unwanted applications. Understand that because there are certain situations in which people may wish to use such software, ESET accordingly treats this as a lower-risk category than, say, a computer virus or worm. In fact, ESET's customers decide themselves during installation whether to enable detection of potentially unwanted applications or not. Screen shot below:

http://www.wilderssecurity.com/attachment.php?attachmentid=210879

Detection of potentially unwanted applications can be disabled in the program settings at any time. For information on how to do this, see ESET Knowledgebase article #2198, "How do I configure my ESET security product to detect unwanted or unsafe applications? (http://kb.eset.com/esetkb/index?page=content&id=SOLN2198)". Additionally, ESET's customers are able to decide what actions should be taken upon detection of a potentially unwanted application. A simulated screen shot of this category is shown below:

http://www.wilderssecurity.com/attachment.php?attachmentid=210880

ESET will continue to monitor this situation in the future and react according to its evolution.

Should you have any further questions, please feel free to contact your local ESET office.

Regards,

Aryeh Goretsky