False positive with a brazilian plugin bank.

Discussion in 'ESET NOD32 Antivirus' started by RenatoMejias, Jun 8, 2008.

Thread Status:
Not open for further replies.
  1. RenatoMejias

    RenatoMejias Registered Member

    Joined:
    Jun 8, 2008
    Posts:
    4
    Location:
    S?o Paulo - Brazil
    Hi,

    Few days ago NOD32 shows a false postive with a brazilian plugin bank known as G-Buster Browser Defense

    A scan with VirusTotal show it:

    ~VirusTotal results removed per Policy. - Ron~

    The path of file is: C:\WINDOWS\Downloaded Program Files\gbieh.dll.

    Thanks
     
    Last edited by a moderator: Jun 8, 2008
  2. ASpace

    ASpace Guest

    Send this file as an attachment to ESET Threat Lab . In the subject include information that you send them a possible false positive

    The mail addrress is samples@eset.sk

    Regards!
     
  3. RenatoMejias

    RenatoMejias Registered Member

    Joined:
    Jun 8, 2008
    Posts:
    4
    Location:
    S?o Paulo - Brazil
    Ok,

    I'm helping an user in a forum here, and I said to him to send the sample and the link to the topic there.

    Thanks.
     
  4. RenatoMejias

    RenatoMejias Registered Member

    Joined:
    Jun 8, 2008
    Posts:
    4
    Location:
    S?o Paulo - Brazil
    Hi,

    Sorry for this 'bump', but I sent a sample to ESET and I don't received any reply :(

    The problem persist. Is very boring all the time receive a malware alert on the computer.
     
  5. Fajo

    Fajo Registered Member

    Joined:
    Jun 13, 2008
    Posts:
    1,812
    It can take 2 weeks from what I have seen. and heard so if you want you can try resending it again maybe it did not go Thur your ISP Virus scanner never know :D
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,376
    We have eventually removed detection just because the tool was created by a bank. You can read more about its suspicious behavior here.

    ~ updated link to current address of web page - agoretsky ~
     
    Last edited by a moderator: Jul 10, 2008
  7. RenatoMejias

    RenatoMejias Registered Member

    Joined:
    Jun 8, 2008
    Posts:
    4
    Location:
    S?o Paulo - Brazil
    Thanks for your feedback Marcos, it's really appreciate.
     
Thread Status:
Not open for further replies.