FS 2010 Scan Results

[JerryM]

This morning I ran a full scan with FSIS 2010, and the results were that 11 riskware items were found. None were cleaned. Here are two, and the results of the search.

No malware items were found.

Gen:Application.Heur.cmKfb4L324dO - did not match any documents.

Your search - mspass.exe - did not match any documents.

What are these, and are they legit risk items?

All 11 are in the download files. For example.
Gen:Application.Heur.cmKfba33n@cO (Riskware)
C:\Documents and Settings\XXXXX\Desktop\DL PROGRAMS\passrec.zip\iepv.exe

I assume that FS is making identification based upon some signature, and nothing is of real risk.

I posted this on the FS forum, but as usual no replies.

Regards,
Jerry

[0strodamus]

Jerry,

I've gotten these results from F-Secure as well. mspass.exe and iepv.exe are NirSoft applications. Both are listed as riskware along with many other NirSoft applications that I have downloaded. Here's a page with more info.

I'm not familiar with passrec.zip.

I saw your post on the F-Secure forum and you're right, they are very slow to reply if at all.

Darrell

[King Grub]

passrec.zip is also put there by some application from Nirsoft.

[JerryM]

Originally Posted by King Grub

passrec.zip is also put there by some application from Nirsoft.

Thanks a lot, Darrell.
I was not too concerned, but have to wonder why those were identified as risks when FS does not know what they are.

Regards,
Jerry

[larryb52]

I saw your post on the F-Secure forum and you're right, they are very slow to reply if at all.

Darrell[/quote]


it's not good to not have decent support, it means little to have a good program it distracts to have weak support. This one issue alone makes me leary. FWIW I am a current hold of a license of F-Secure...

[JerryM]

Originally Posted by larryb52

I saw your post on the F-Secure forum and you're right, they are very slow to reply if at all.

Darrell

it's not good to not have decent support, it means little to have a good program it distracts to have weak support. This one issue alone makes me leary. FWIW I am a current hold of a license of F-Secure...[/quote]

In the past I have found FS to have an excellent customer support group, but the forum is at the bottom of the barrel.

Regards,
Jerry

[HKEY1952]

Originally Posted by JerryM

This morning I ran a full scan with FSIS 2010, and the results were that 11 riskware items were found. None were cleaned. Here are two, and the results of the search.

No malware items were found.

Gen:Application.Heur.cmKfb4L324dO - did not match any documents.

Your search - mspass.exe - did not match any documents.

What are these, and are they legit risk items?

All 11 are in the download files. For example.
Gen:Application.Heur.cmKfba33n@cO (Riskware)
C:\Documents and Settings\XXXXX\Desktop\DL PROGRAMS\passrec.zip\iepv.exe

I assume that FS is making identification based upon some signature, and nothing is of real risk.

I posted this on the FS forum, but as usual no replies.

Regards,
Jerry

Perhaps this will provide one layer of information allowing for further investigation

McAfee Online SiteAdvisor Analysis:
http://www.siteadvisor.com/analysis/


McAfee Online SiteAdvisor Analysis results of nirsoft.net
http://www.siteadvisor.com/sites/nirsoft.net
nirsoft.net = Green plus one Yellow

McAfee SiteAdvisor Download tests for nirsoft.net Quote/
Many green downloads

In our tests, we found a small fraction of downloads on this site that some people consider adware or other potentially unwanted programs.
\END McAfee SiteAdvisor Download tests for nirsoft.net Quote

NOTE: To view the complete list of all downloads found on the Site: click on the "See more" link located under the list labeled: "Downloads we found on this site:"



Direct link to McAfee Online SiteAdvisor Download Analysis of Nirsoft: passrec

01 - 2008 October
http://www.siteadvisor.com/sites/nir...oads/17490210/
passrec.zip = Red with Nuisance Score of 7

02 - 2008 November
http://www.siteadvisor.com/sites/nir...oads/16489849/
passrec.zip = Red with Nuisance Score of 4

03 - 2008 November
http://www.siteadvisor.com/sites/nir...oads/17733672/
passrec.zip = Red with Nuisance Score of 7

04 - 2009 February
http://www.siteadvisor.com/sites/nir...oads/17815399/
passrec.zip = Yellow with Nuisance Score of 3

05 - 2009 February
http://www.siteadvisor.com/sites/nir...oads/18917844/
passrec.zip = Yellow with Nuisance Score of 3

06 - 2009 February
http://www.siteadvisor.com/sites/nir...oads/18256547/
passrec.zip = Yellow with Nuisance Score of 3

07 - 2009 March
http://www.siteadvisor.com/sites/nir...oads/20031326/
passrec.zip = Green with Nuisance Score of 0

08 - 2009 April
http://www.siteadvisor.com/sites/nir...oads/21036764/
passrec.zip = Green with Nuisance Score of 0

09 - 2009 April
http://www.siteadvisor.com/sites/nir...oads/21036790/
passrec_setup.exe = Red with Nuisance Score of 6



Direct link to McAfee Online SiteAdvisor Download Analysis of Nirsoft: mspass

01 - 2008 October
http://www.siteadvisor.com/sites/nir...oads/20924203/
mspass.exe = Yellow with Nuisance Score of 3

02 - 2008 October
http://www.siteadvisor.com/sites/nir...oads/19373809/
mspass_setup.exe = Yellow with Nuisance Score of 3

03 - 2008 October
http://www.siteadvisor.com/sites/nir...oads/17475457/
mspass.zip = Yellow with Nuisance Score of 3



Direct link to McAfee Online SiteAdvisor Download Analysis of Nirsoft: iepv

01 - 2008 October
http://www.siteadvisor.com/sites/nir...oads/17776130/
iepv.zip = Green with Nuisance Score of 0

02 - 2008 December
http://www.siteadvisor.com/sites/nir...oads/18392952/
iepv.zip = Yellow with Nuisance Score of 3

03 - 2008 December
http://www.siteadvisor.com/sites/nir...oads/20306544/
iepv.exe = Yellow with Nuisance Score of 3

04 - 2009 February
http://www.siteadvisor.com/sites/nir...oads/20778847/
iepv_setup.exe = Yellow with Nuisance Score of 3


NOTE: Microsoft Security Essentials did not flag any of the above files when downloading or running on-demand scans. .zip files were opened but not extracted.


HKEY1952