Adware/Apropos false positive?

Discussion in 'NOD32 version 2 Forum' started by CyberMew, May 2, 2005.

Thread Status:
Not open for further replies.
  1. CyberMew

    CyberMew Registered Member

    Joined:
    Apr 17, 2005
    Posts:
    128
    AntiVir Found nothing
    Avast Found nothing
    AVG Antivirus Found nothing
    BitDefender Found nothing
    ClamAV Found nothing
    Dr.Web Found nothing
    F-Prot Antivirus Found nothing
    Fortinet Found Adware/Apropos
    Kaspersky Anti-Virus Found nothing
    mks_vir Found nothing
    NOD32 Found nothing
    Norman Virus Control Found nothing
    VBA32 Found nothing

    It was created while I was uninstalling my Star Wars: Republic Commandos. IMON said it was Adware/Apropos but it couldn't be. Scaned with jotti and only Fortinet found it. Seems the beta is working but it's too sensitive? So how can I send it to eset for further analysis on this file? I am using the beta.

    Edit: scanned it with virustotal and here is the result.
    This is a report processed by VirusTotal on 05/02/2005 at 18:46:02 (CET) after scanning the file "libexpat_01C54F7787E4010F_.dll" file.
    Antivirus Version Update Result
    AntiVir 6.30.0.7 05.02.2005 no virus found
    AVG 718 05.02.2005 no virus found
    BitDefender 7.0 05.02.2005 no virus found
    ClamAV devel-20050307 05.02.2005 no virus found
    DrWeb 4.32b 05.02.2005 no virus found
    eTrust-Iris 7.1.194.0 05.01.2005 no virus found
    eTrust-Vet 11.7.0.0 05.02.2005 no virus found
    Fortinet 2.51 05.01.2005 Adware/Apropos
    F-Prot 3.16b 05.02.2005 no virus found
    Ikarus 2.32 05.02.2005 no virus found
    Kaspersky 4.0.2.24 05.02.2005 no virus found
    McAfee 4481 05.02.2005 potentially unwanted program Adware-Apropos
    NOD32v2 1.1085 05.01.2005 Win32/Adware.Apropos
    Norman 5.70.10 05.02.2005 no virus found
    Panda 8.02.00 05.02.2005 no virus found
    Sybari 7.5.1314 05.02.2005 no virus found
    Symantec 8.0 05.01.2005 no virus found
    VBA32 3.10.3 05.02.2005 no virus found
    Seems that virustotal is better than jotti ^_^

    So what can I do now?
     
    Last edited: May 2, 2005
  2. kjempen

    kjempen Registered Member

    Joined:
    May 6, 2004
    Posts:
    379
    Have a look here

    By the way, how can you know that it's a false positive? Especially since 3 different AVs found it to be (the same piece of) ad-ware?

    EDIT: Usually, for false positives, I think you are supposed to submit them at support at eset.com
     
  3. CyberMew

    CyberMew Registered Member

    Joined:
    Apr 17, 2005
    Posts:
    128
    Because it only happened while I was uninstalling the game.
     
Thread Status:
Not open for further replies.