False Positive on new Auslogics Defrag?

Discussion in 'ESET NOD32 Antivirus' started by johnpd, Nov 9, 2011.

Thread Status:
Not open for further replies.
  1. johnpd

    johnpd Registered Member

    Joined:
    May 23, 2004
    Posts:
    80
    I am getting a threat from attempting a download of the latest version (v3.3.0) of Auslogics Disk Defrag. Is this a False Positive? I am using NOD32 v4.2.64.12.

    Thanks,

    JohnD

    11/9/2011 12:12:33 AM HTTP filter file hxxp://software-files-l.cnet.com/s/...Dlm=1&fileName=cnet_disk-defrag-setup_exe.exe a variant of Win32/InstallCore.D potentially unwanted application

    Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.
     
    Last edited by a moderator: Nov 9, 2011
  2. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    Dr.Web says
    Try to download the file from some other source other than C-net.
    I don't trust c-net to 100% anymore so I never download from them ;)
     
    Last edited: Nov 9, 2011
  3. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,375
    I confirm, it's not FP but a download wrapper (discussed here) detected as a potentially unwanted application (PUA). Note that it's not malware and detection of PUA is optional; each user opts for detection during installation or can disable/enable it at a later time in the program setup. If one wants to keep a PUA installed, they can exclude it from scanning as per the instructions here.
     
  5. johnpd

    johnpd Registered Member

    Joined:
    May 23, 2004
    Posts:
    80
    I just tried both Major Geeks and the original C-Net sites. No problem now.

    JohnD
     
  6. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    PUA or no, I would not download software from sites this consistently deliver bloated software for advertising means of the delivery website. :ouch:

    First party or no party. But that's just me.
     
  7. tipo

    tipo Registered Member

    Joined:
    Dec 29, 2008
    Posts:
    408
    Location:
    romania
    perfectly said, siljaline! :thumb:
     
  8. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Thanks, tipo
     
Thread Status:
Not open for further replies.