False Positive

Discussion in 'ESET NOD32 Antivirus' started by Nod64, Jul 30, 2011.

Thread Status:
Not open for further replies.
  1. Nod64

    Nod64 Registered Member

    Joined:
    May 3, 2011
    Posts:
    10
    Nightly scan from this morning shows these two Dell system Backup files as infected. I do nightly scans each night (early am) and these two files have never been flagged before. They both appear to be related to Dell system backup software.

    Why are they suddenly being flagged as Unsafe applications?



    Scan Log
    Version of virus signature database: 6335 (20110729)
    Date: 7/30/2011 Time: 3:00:03 AM

    C:\Program Files (x86)\Dell DataSafe Local Backup\hstart.exe - a variant of Win32/HiddenStart.A potentially unsafe application - action selection postponed until scan completion

    C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe - a variant of Win32/HiddenStart.A potentially unsafe application - action selection postponed until scan completion
     
    Last edited: Jul 30, 2011
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    First of all, why did you enable unsafe applications that cover legit tools used mainly for legit purposes? It's not a false positive.
     
  3. Nod64

    Nod64 Registered Member

    Joined:
    May 3, 2011
    Posts:
    10

    It has always been enabled. You didn't answer my question.

    Why is it suddenly being detected when it has never been detected in the past.
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Probably because somebody has reported it and the viruslab found out it could be misused for malicious purposes in the wrong hands. Enabling unsafe applications is not recommended unless you're fully aware of what you're doing, what consequences it may have and how potentially flagged files can be excluded if they are actually needed.
     
  5. Nod64

    Nod64 Registered Member

    Joined:
    May 3, 2011
    Posts:
    10


    I'll let the folks at Dell know that their software is being detected by ESET as potentially unsafe and they can handle it as they see fit.

    Thanks for you response.
     
  6. Sacles

    Sacles Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    372
    Location:
    Belgique
    Hello,

    The files you listed are not system files. For me, the system files are those needed for the operating system.
     
Thread Status:
Not open for further replies.