False Positive on Nero 10 Files?? ( Win32/Ponmocup.AA.Gen )

[BeanCounter]

With signature database 6855 a stack of Nero 10 language DLL files are being reported as infected with the Win32/Ponmocup.AA.Gen trojan. This rather looks like a false positive detection.

[Jacqui D]

I have the same issue. ESET just deleted a ton of NERO files infected with trojan. Is this a false positive?

[olydrh]

I think definitions 6855 are bad. I have a number of users that use RingCentral for Voip and Eset is trying or has killed the Ring Central Call Controller application.
says RCSPSKSPVISTA.DLL in the Program Files (x86)\RingCentral... is a Win32/Ponmocup.AA.Gen trojan

ESET - FIX THIS NOW!!!!

[agoretsky]

Hello,

Issue is under investigation. Thank you for your report.

Regards,

Aryeh Goretsky

[BeanCounter]

The problem seems to have been corrected with 6856.

[agoretsky]

Hello,

Issue should be resolved. If you continue to experience a report of Win32/Ponmocup.AA on any files, please let ESET know.

Regards,

Aryeh Goretsky

[get_it]

Wow resolved within 2 hours. Impressive indeed.

[siljaline]

The behaviours of this trojan are detailed here