False Positive on Nero 10 Files?? ( Win32/Ponmocup.AA.Gen )

Discussion in 'ESET NOD32 Antivirus' started by BeanCounter, Feb 3, 2012.

Thread Status:
Not open for further replies.
  1. BeanCounter

    BeanCounter Registered Member

    Joined:
    Apr 8, 2006
    Posts:
    66
    Location:
    Melbourne, Australia
    With signature database 6855 a stack of Nero 10 language DLL files are being reported as infected with the Win32/Ponmocup.AA.Gen trojan. This rather looks like a false positive detection.
     
  2. Jacqui D

    Jacqui D Registered Member

    Joined:
    Nov 26, 2007
    Posts:
    31
    Re: False Positive on Nero 10 Files??

    I have the same issue. ESET just deleted a ton of NERO files infected with trojan. Is this a false positive?
     
  3. olydrh

    olydrh Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    4
    Location:
    USA
    Re: False Positive on Nero 10 Files??

    I think definitions 6855 are bad. I have a number of users that use RingCentral for Voip and Eset is trying or has killed the Ring Central Call Controller application.
    says RCSPSKSPVISTA.DLL in the Program Files (x86)\RingCentral... is a Win32/Ponmocup.AA.Gen trojan

    ESET - FIX THIS NOW!!!!
     
  4. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,032
    Location:
    California
    Hello,

    Issue is under investigation. Thank you for your report.

    Regards,

    Aryeh Goretsky
     
  5. BeanCounter

    BeanCounter Registered Member

    Joined:
    Apr 8, 2006
    Posts:
    66
    Location:
    Melbourne, Australia
    The problem seems to have been corrected with 6856.
     
  6. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,032
    Location:
    California
    Hello,

    Issue should be resolved. If you continue to experience a report of Win32/Ponmocup.AA on any files, please let ESET know.

    Regards,

    Aryeh Goretsky
     
  7. get_it

    get_it Registered Member

    Joined:
    Aug 28, 2007
    Posts:
    99
    Wow resolved within 2 hours. Impressive indeed.
     
  8. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    The behaviours of this trojan are detailed here
     
Thread Status:
Not open for further replies.