False Positive on new Auslogics Defrag?

Discussion in 'ESET NOD32 Antivirus' started by johnpd, Nov 9, 2011.

Thread Status:
Not open for further replies.
  1. johnpd

    johnpd Registered Member

    Joined:
    May 23, 2004
    Posts:
    80
    I am getting a threat from attempting a download of the latest version (v3.3.0) of Auslogics Disk Defrag. Is this a False Positive? I am using NOD32 v4.2.64.12.

    Thanks,

    JohnD

    11/9/2011 12:12:33 AM HTTP filter file hxxp://software-files-l.cnet.com/s/...Dlm=1&fileName=cnet_disk-defrag-setup_exe.exe a variant of Win32/InstallCore.D potentially unwanted application

    Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.
     
    Last edited by a moderator: Nov 9, 2011
  2. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    Dr.Web says
    Try to download the file from some other source other than C-net.
    I don't trust c-net to 100% anymore so I never download from them ;)
     
    Last edited: Nov 9, 2011
  3. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,409
    I confirm, it's not FP but a download wrapper (discussed here) detected as a potentially unwanted application (PUA). Note that it's not malware and detection of PUA is optional; each user opts for detection during installation or can disable/enable it at a later time in the program setup. If one wants to keep a PUA installed, they can exclude it from scanning as per the instructions here.
     
  5. johnpd

    johnpd Registered Member

    Joined:
    May 23, 2004
    Posts:
    80
    I just tried both Major Geeks and the original C-Net sites. No problem now.

    JohnD
     
  6. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    PUA or no, I would not download software from sites this consistently deliver bloated software for advertising means of the delivery website. :ouch:

    First party or no party. But that's just me.
     
  7. tipo

    tipo Registered Member

    Joined:
    Dec 29, 2008
    Posts:
    408
    Location:
    romania
    perfectly said, siljaline! :thumb:
     
  8. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Thanks, tipo
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.