False positives on the [3610] 13 nov 2008 update (win32/Qhost.NGM)

[reni]

Hi there,

On all our 6000 workstations we are running NOD32 Antivirus 3, and with the update of today (3610 - 13 nov 2008) we are experiencing an false positive that hits as an win32/Qhost.NGM trojan . The thing is that i (sysadmin) made that .exe myself and its internally being used.

Its a bat file that is converted with AbyssMedia Batch File Compiler to .exe which will be run each time a user logs in.

It's not virus at all! Is anyone else experiencing false positives after this update, i sended the sample already and marked as a false positive, hopefully they will fix it soon.....

Regards,

Reni

[Marcos]

Hello,
please send the file in a password protected archive to samples[at]eset.com with "False positive" in the subject.

[reni]

Thnx for the reply. Did that yesterday and seems fixed now .

Fnx