Nirsoft Utilities False Positive?

When downloading the latest zipped version of the well known Nirsoft Utilities from:

http://launcher.nirsoft.net/download.html

NOD32 indicates the presence of a Trojan. I suspect that this is a false positive.

Alex

 

Not the first nor the last AV to detect Nirsoft utils as malware. Not malware but possibly unwanted risky software in work environment

 

This doesn´t seems to be a FP.
All files are correctly detected:

pstpassword.exe - una variante de Win32/PSWTool.PstPassword.A
produkey.exe - una variante de Win32/PSWTool.ProductKey
passwordfox.exe - una variante de Win32/PSWTool.PassFox.A
operapassview.exe - una variante de Win32/PSWTool.OperaPassView
netpass.exe - una variante de Win32/NetPass.AA
mspass.exe - una variante de Win32/MPass.A
mailpv.exe - una variante de Win32/PSWTool.MailPassView.E
iepv.exe - una variante de Win32/PSWTool.IEPassView.NAE
dialupass.exe - una variante de Win32/PSWTool.Dialupass.F
chromepass.exe - una variante de Win32/PSWTool.ChromePass.A
awatch.exe - una variante de Win32/NirSoft.AdapterWatch.A
astlog.exe - Win32/PSWTool.AsteriskLogger.104

 

There are considerably more files than you've listed. I scanned them all using NOD32 and the only one triggering any warning was awatch.exe, classified as "a potentially unwanted application".

Alex

 

FP, FP, FP...

http://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/

 

I dont think that detection as a False Positive (Incorrect malware detection) or a True Positive (No malware detection )

However, this is a Potentially Unwanted Application, not necessarily malicious

Is not detected as a Virus or A Trojan

 

What it comes down to is yes...you are ok to dl and use nirsoft utilities.

 

It's a PUA. Nothing more, nothing less.