False positive in BoilSoft Joiner .dll?

Discussion in 'ESET NOD32 Antivirus' started by loverboy, Nov 14, 2010.

Thread Status:
Not open for further replies.
  1. loverboy

    loverboy Registered Member

    Joined:
    Mar 25, 2009
    Posts:
    59
    This BoilSoft Joiner file
    BSWMVUTIL.dll
    ~Link Removed~
    is seen by v. 4.2.64.12 as a
    C:\Program Files\Boilsoft Video Joiner\bswmvutil.dll - probably a variant of Win32/Agent.IVYXXWB trojan

    Even VirusTotal says it is a malware

    ~Virus Total results removed per Policy~

    But I cannot believe it because it comes directly from the installation, so could you please investigate on it and confirm if it is a False Positive?

    Thanks

    PS
    Why version 2.70.39 never warned me or said anything about this dll?
     
    Last edited: Nov 15, 2010
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,794
    Location:
    Texas
  3. loverboy

    loverboy Registered Member

    Joined:
    Mar 25, 2009
    Posts:
    59
    Ok, never mind I have just uninstalled it (it was a trial version)

    Just to let this thread be useful, at this point my question is

    "Why till few days ago, when I had 2.70.39 no scan gave any alert with that file, while with 4.2.64.12 that alert came out at the very first scan? Don't the two versions share the same virus signatures?" o_O
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Both v3 and 4 have better detection rate than v2. The trial version of v2 is no longer available for download so I assume you got it from a 3rd party source. As for the dll in question, it wasn't installed on my computer with the trial version of Boilsoft Video Joiner but we managed to get it finally and removed detection. It looked actually very suspicious, there was no version info, signature or something that would identify it as legit.
     
  5. loverboy

    loverboy Registered Member

    Joined:
    Mar 25, 2009
    Posts:
    59
    OK, thanks.
    So with the same "virus signature database" the matter was about the different detection rate in the newer versions.
    This is something that "old" users maybe don't take into proper account (that's why lots of them stick with 2.70)

    Thanks for this great product :thumb:
     
    Last edited: Nov 15, 2010
  6. proactivelover

    proactivelover Registered Member

    Joined:
    Apr 7, 2006
    Posts:
    840
    Location:
    Near Wilders Forums
    just download Boilsoft Video Joiner 6.34 from http://www.boilsoft.com/download.html
    using letest ESS v4.2.67.10 letest signature 5622 no virus found
    i did not see any file named bswmvutil.dll in installation folder pls download it and tell us
    and one more thing v4 is better then v2
     

    Attached Files:

  7. loverboy

    loverboy Registered Member

    Joined:
    Mar 25, 2009
    Posts:
    59
    It was a three years old 5.1 (or so) version that I still had on a CD

    Never mind :thumb:
     
  8. proactivelover

    proactivelover Registered Member

    Joined:
    Apr 7, 2006
    Posts:
    840
    Location:
    Near Wilders Forums
    always use letest version for better result
    case solved
     
Thread Status:
Not open for further replies.