False Positive?

Discussion in 'NOD32 version 2 Forum' started by Acadia, Dec 21, 2005.

Thread Status:
Not open for further replies.
  1. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    I am trialing NOD32. Every time that I install NOD, it flags a file called wrsssdk.exe from Webroot's Spy Sweeper program as a baddie of some sort. Can I ASSume that this is a false positive? There are two reasons for me to think so: number 1. I trust Webroot, and number 2. Neither my regular AV, nor any of the other AV that I am trialing, nor AdAware, nor Spybot are flagging this file.

    Thank you,
    Acadia
     
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,719
    Location:
    Texas
  3. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    Thanks, Ronjor. Maybe NOD did not bother to fix this in the Trial version? (And yes, I did update the NOD signatures)

    Acadia
     
  4. und

    und Guest

  5. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    It only happens when I install the trial NOD, not at any other time.

    Acadia
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Acadia, are you sure you are actually using the latest version 1.1332? I could't find any file wrsssdk.exe submitted via ThreatSense and still flagged as suspicious. It makes no difference whether you are a trial or paying user.
     

  7. I had the same thing but It got fixed.
     
  8. kjempen

    kjempen Registered Member

    Joined:
    May 6, 2004
    Posts:
    379
    Are you sure you're not trying to run an old NOD32 installer? If I remember right, the installers were updated not so long ago.
     
  9. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    Ok, folks, thanks for the replies. If the installer or version was changed within the past 2-3 weeks, then yes, I might be using something old. If I purchase NOD I need to uninstall the trial anyway. Thanks.

    Acadia
     
  10. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    It doesn't matter whether you installed NOD32 2 weeks or months ago, if you have the latest update installed you shouldn't get any warning from NOD32 on that file.
     
  11. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    Like I said, it only flashes that warning when I install NOD, not at any other time. I am constantly removing NOD and reinstalling it since I am also trialing other AV.

    Acadia
     
  12. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    If I'm not mistaken, their installers gets updated once in a while, so maybe you should try and download the trial again.
    It could very well fix the issue you are experiencing ;)
     
  13. webyourbusiness

    webyourbusiness Registered Member

    Joined:
    Nov 16, 2004
    Posts:
    2,640
    Location:
    Throughout the USA and Canada

    then don't worry about it - in 30 days when the trial EXPIRES, you'll not be able to see the problem any more!
     
  14. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    Yup, that's basically the attitude that I adopted. I just want to make sure that it was indeed a false positive and that question has been answered. Thanks. (to everyone)

    Acadia
     
  15. ragnarok

    ragnarok Registered Member

    Joined:
    Jul 14, 2005
    Posts:
    36
    try uninstalling it, reboot, delet ESET folder from the installed directory, try a good registry cleaner, download a fresh copy from eset website, and try again...:rolleyes:
     
Thread Status:
Not open for further replies.