False Positive on Nero 10 Files?? ( Win32/Ponmocup.AA.Gen )

Discussion in 'ESET NOD32 Antivirus' started by BeanCounter, Feb 3, 2012.

Thread Status:
Not open for further replies.
  1. BeanCounter

    BeanCounter Registered Member

    Joined:
    Apr 8, 2006
    Posts:
    66
    Location:
    Melbourne, Australia
    With signature database 6855 a stack of Nero 10 language DLL files are being reported as infected with the Win32/Ponmocup.AA.Gen trojan. This rather looks like a false positive detection.
     
    BeanCounter, Feb 3, 2012
    #1
  2. Jacqui D

    Jacqui D Registered Member

    Joined:
    Nov 26, 2007
    Posts:
    31
    Re: False Positive on Nero 10 Files??

    I have the same issue. ESET just deleted a ton of NERO files infected with trojan. Is this a false positive?
     
    Jacqui D, Feb 3, 2012
    #2
  3. olydrh

    olydrh Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    4
    Location:
    USA
    Re: False Positive on Nero 10 Files??

    I think definitions 6855 are bad. I have a number of users that use RingCentral for Voip and Eset is trying or has killed the Ring Central Call Controller application.
    says RCSPSKSPVISTA.DLL in the Program Files (x86)\RingCentral... is a Win32/Ponmocup.AA.Gen trojan

    ESET - FIX THIS NOW!!!!
     
    olydrh, Feb 3, 2012
    #3
  4. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,033
    Location:
    California
    Hello,

    Issue is under investigation. Thank you for your report.

    Regards,

    Aryeh Goretsky
     
    agoretsky, Feb 3, 2012
    #4
  5. BeanCounter

    BeanCounter Registered Member

    Joined:
    Apr 8, 2006
    Posts:
    66
    Location:
    Melbourne, Australia
    The problem seems to have been corrected with 6856.
     
    BeanCounter, Feb 3, 2012
    #5
  6. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,033
    Location:
    California
    Hello,

    Issue should be resolved. If you continue to experience a report of Win32/Ponmocup.AA on any files, please let ESET know.

    Regards,

    Aryeh Goretsky
     
    agoretsky, Feb 3, 2012
    #6
  7. get_it

    get_it Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    99
    Wow resolved within 2 hours. Impressive indeed.
     
    get_it, Feb 5, 2012
    #7
  8. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    The behaviours of this trojan are detailed here
     
    siljaline, Feb 9, 2012
    #8
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...