IMON preventing UBCD4Win download

[enduser999]

Tried for over an hour to download Ultimate Boot CD 4 Windows from each of their mirror sites http://www.ubcd4win.com/downloads.htm and then discovered IMON stopped the download only at the end due to:

Time Module Object Name Threat Action User Information
6/21/2006 23:24:40 PM IMON self-extracting archive http://ubcd4win.itinerantgroup.com/UBCD4WinV30.exe multiple infiltrations Connection terminated

[NOD32 user]

Originally Posted by enduser999

Tried for over an hour to download Ultimate Boot CD 4 Windows from each of their mirror sites http://www.ubcd4win.com/downloads.htm and then discovered IMON stopped the download only at the end due to:

Time Module Object Name Threat Action User Information
6/21/2006 23:24:40 PM IMON self-extracting archive http://ubcd4win.itinerantgroup.com/UBCD4WinV30.exe multiple infiltrations Connection terminated

Just download it from the proper site and it should be OK - I've never heard of it having anything malicious in it before.
http://www.ultimatebootcd.com/

[enduser999]

That is the Ultimate BootCD. They are two separate CDs. I am downloading Ultimate BootCD 4 Windows http://www.ubcd4win.com/index.htm

[NOD32 user]

I would certainly be interested to see a detailed NOD32 scan result of the file you have there...

[enduser999]

Attached is the scan log file for the downloaded file.

[NOD32 user]

Originally Posted by enduser999

Attached is the scan log file for the downloaded file.

Number of threats found: 3
As you can see already the detections are for Potentially Dangerous Applications:-

G:\UBCD4WinV30.exe ... keyfinder.exe »RAR »xpkey.exe - Win32/PSWTool.RAS.A application - was a part of the deleted object
G:\UBCD4WinV30.exe ... keyfinder.exe »RAR »officekey.exe - Win32/PSWTool.RAS.A application - was a part of the deleted object
G:\UBCD4WinV30.exe ... nc.exe - Win32/RemoteAdmin.NetCat application - was a part of the deleted object

When downloading such things it is necessary to disable PDA checking in IMON and AMON.

HTH