Speedbit false positive?

Discussion in 'ESET Smart Security' started by psychokilla, Nov 11, 2007.

Thread Status:
Not open for further replies.
  1. psychokilla

    psychokilla Registered Member

    I tried to download this program :

    http://www.speedbit.com/video_accelerator/

    When I attempted to download it, ESS stopped the transfer with the attached declaration. The same thing happens with the beta version.

    Is this a false positive?
     

    Attached Files:

    Last edited: Nov 11, 2007
  2. nodyforever

    nodyforever Registered Member

    Yes false positive...it can contain them to me adware or it will be able to have an option to choose them to me if we want or not that he is installed

    The programs free have to have some support of some form that will be able to take the enterprise to choose these options.


    sorry my bad english psychokilla
     
    Last edited: Nov 11, 2007
  3. psychokilla

    psychokilla Registered Member

    WTF? Was that english?
     
  4. proactivelover

    proactivelover Registered Member

    just scan it
    File size: 1455.5K
    redir.asp?ID=7279 packed by BINARYRES
    >redir.asp?ID=7279 packed by BINARYRES
    >>redir.asp?ID=7279 - archive WISE
    >>>redir.asp?ID=7279/data001 - OK
    >>>redir.asp?ID=7279/data002 - OK
    >>>redir.asp?ID=7279/data003 - OK
    >>>redir.asp?ID=7279/data004 - OK
    >>>redir.asp?ID=7279/data005 - OK
    >>>redir.asp?ID=7279/data006 - OK
    >>>redir.asp?ID=7279/data007 - OK
    >>>redir.asp?ID=7279/data008 - OK
    >>>redir.asp?ID=7279/data009 - OK
    >>>redir.asp?ID=7279/data010 - OK
    >>>redir.asp?ID=7279/data011 - archive BINARYRES
    >>>>redir.asp?ID=7279/data011/data001 - archive BINARYRES
    >>>>>redir.asp?ID=7279/data011/data001/data001 - archive ZIP
    >>>>>>redir.asp?ID=7279/data011/data001/data001/contents.rdf - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data001/menu.xul - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data001/toolbarembed.html - archive HTML
    >>>>>>>redir.asp?ID=7279/data011/data001/data001/toolbarembed.html/Script.0 - OK
    >>>>>>>redir.asp?ID=7279/data011/data001/data001/toolbarembed.html/Script.1 - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data001/toolbarembed.html - OK
    >>>>>redir.asp?ID=7279/data011/data001/data001 - OK
    >>>>>redir.asp?ID=7279/data011/data001/data002 - OK
    >>>>>redir.asp?ID=7279/data011/data001/data003 - archive ZIP
    >>>>>>redir.asp?ID=7279/data011/data001/data003/contents.rdf - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data003/menu.xul - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data003/toolbarembed.html - archive HTML
    >>>>>>>redir.asp?ID=7279/data011/data001/data003/toolbarembed.html/Script.0 - OK
    >>>>>>>redir.asp?ID=7279/data011/data001/data003/toolbarembed.html/Script.1 - OK
    >>>>>>redir.asp?ID=7279/data011/data001/data003/toolbarembed.html - OK
    >>>>>redir.asp?ID=7279/data011/data001/data003 - OK
    >>>>>redir.asp?ID=7279/data011/data001/data004 contains an advertising software Adware.Msearch.origin
    >>>>>redir.asp?ID=7279/data011/data001/data005 - OK
    >>>>>redir.asp?ID=7279/data011/data001/data006 - OK
    >>>>redir.asp?ID=7279/data011/data002 packed by BINARYRES
    >>>>>redir.asp?ID=7279/data011/data002 - OK
    >>>redir.asp?ID=7279/data012 - OK
    >>>redir.asp?ID=7279/data013 - OK
    >>>redir.asp?ID=7279/data014 - OK
    >>>redir.asp?ID=7279/data015 - OK
    >>>redir.asp?ID=7279/data016 - OK
    >>>redir.asp?ID=7279/data017 packed by BINARYRES
    >>>>redir.asp?ID=7279/data017 - OK
    >>>redir.asp?ID=7279/data018 - OK
    >>>redir.asp?ID=7279/data019 - archive CAB
    In file >>>>redir.asp?ID=7279/data019/Accelerator.dll probably found virus DLOADER.Trojan
    >>>>redir.asp?ID=7279/data019/VideoAcceleratorEngine.exe - OK
    >>>>redir.asp?ID=7279/data019/VideoAccelerator.exe - OK
    >>>>redir.asp?ID=7279/data019/Collector.dll - OK
    >>>>redir.asp?ID=7279/data019/sbbotdiXP.sys - OK
    >>>>redir.asp?ID=7279/data019/sbbotdi2K.sys - OK
    >>>>redir.asp?ID=7279/data019/tray_icon.ico - OK
    >>>>redir.asp?ID=7279/data019/OK.gif - OK
    >>>>redir.asp?ID=7279/data019/Cancel.gif - OK
    >>>>redir.asp?ID=7279/data019/comtest.gif - OK
    >>>>redir.asp?ID=7279/data019/progbar.gif - OK
    >>>>redir.asp?ID=7279/data019/AniGIF.ocx - OK
    >>>>redir.asp?ID=7279/data019/VideoAcceleratorService.exe - OK
    >>>redir.asp?ID=7279/data020 - OK
    >>>redir.asp?ID=7279/data021 - OK
     
  5. NOD32 user

    NOD32 user Registered Member

    detection:

    va21.exe » WISE » apbarSp.Speedbit.exe - a variant of Win32/AdInstaller application

    FP or not I cannot say bus I suggest you follow the faq for False Positives - where to submit to. Answer and Answer

    Cheers :)
     
  6. ronjor

    ronjor Global Moderator

    The download contains adware or maybe worse. I didn't see your screenshot of the warning. Did you post one?
     
  7. psychokilla

    psychokilla Registered Member

    Added it now :)
     
  8. ronjor

    ronjor Global Moderator

    Thank you kindly. :)
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice