Help with NOD false positive

Discussion in 'NOD32 version 1 Forum' started by Karl, Feb 26, 2003.

Thread Status:
Not open for further replies.
  1. Karl

    Karl Guest

    Hi all,

    I have a problem with a (probably) false positive in NOD32 with latest update v1.367. Nod claims that the file at http://www.reonis.d2g.com/POFFS/pfprogr.zip contains a "probably unknown script virus" in the file forum6.dat.
    The files are forum archives from the power basic programming forums.

    KAV trial and McAfee don't report this virus, so I guess it is a false positive. Could anybody check this? But beware: the file is long (5MB), so that's a task for people on a quick internet connection.

    Thank you for your help! And if it is a false positive, maybe the ESET folks around at this forum can update NOD accordingly?
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    Hi Karl,

    Check out: http://www.wilders.org/free_services.htm
    You´ll find two online scanners there, (DrWeb and Kaspersky) where you can submit separate files.
    This is to reassure yourself. Probably someone from Eset will want to have a look as well.

    Regards,

    Pieter
     
  3. Karl

    Karl Guest

    Have checked the file with the trial from Kaspersky, too...same result, no infection...but as NOD is my main av, it's rather annoying to have it complain all the time...so I am hoping for an update.

    Up to now, NOD has rarely produced false alarms for me...hope it can keep up its good record...:)
     
  4. jan

    jan Former Eset Moderator

    Joined:
    Oct 25, 2002
    Posts:
    804
    Hi Karl,

    >I have a problem with a (probably) false positive in NOD32 with latest update v1.367. Nod claims that the file at http://www.reonis.d2g.com/POFFS/pfprogr.zip contains a "probably unknown script virus" in the file forum6.dat.
    The files are forum archives from the power basic programming forums.

    We'll check that and let you know.

    Thanks. :)

    jan
     
  5. Karl

    Karl Guest

    Thank you jan,
    please post the reply here in the forum, because I don't have access to my email account right now.
     
  6. Karl

    Karl Guest

    Hi Jan,

    just curious if there are any news about the (hopefully ;)) false positive in the file I mentioned...

    Regards,

    Karl
     
  7. jan

    jan Former Eset Moderator

    Joined:
    Oct 25, 2002
    Posts:
    804
    Hi Karl,

    sorry for the delay - a bit "betabusy" here - you are right - it's a false alarm and we're working on its elimination.

    Thanx. :)

    jan
     
  8. Karl

    Karl Guest

    No problem Jan, and thank you for the info....

    Regards,

    Karl
     
  9. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    Well, let me describe my problem again: I have reported a false positive about two months ago. Now I tried using the above mentioned program again, but unfortunately NOD still claims to have found a possible virus - although a fix was promised back then.

    I do understand that Beta testing keeps NOD folks busy, but it shouldn't be too much of work to eliminate a false positive.

    I'd really appreciate a solution for this.

    Thank you.

    Karl
     
  10. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    *deleted*
    Forgot to read my pm :rolleyes:
     
Thread Status:
Not open for further replies.